PREAMBLE

Atelier Badaboum places particular importance on protecting your personal data and respecting your privacy. This privacy policy aims to inform you transparently about how we collect, use, and protect your personal information, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

SUMMARY

  1. Data Controller
  2. Collection of personal data
  3. Methods of collection
  4. Purposes of processing
  5. Legal bases for processing
  6. Recipients of data
  7. Data retention period
  8. Data security
  9. Your rights
  10. Complaint procedure
  11. Cookies and similar technologies
  12. Data transfers outside the EU
  13. Protection of minors
  14. Data breach notifications
  15. Marketing communications and newsletters
  16. Social networks
  17. Changes to the policy
  18. Contact

1. DATA CONTROLLER

Atelier Badaboum, represented by Ms. Sara DRIF and registered with the Paris Trade and Companies Register under number 942 372 145.

Registered office: 102 Rue Saint-Maur - 75011 Paris

Email: contact@atelier-badaboum.com

2. PERSONAL DATA COLLECTED

We may collect and process the following categories of data:

  • Identification data: surname, first name, date of birth
  • Contact details: postal address, email address, telephone number
  • Payment data: credit card information (securely processed by our payment provider)
  • Connection data: IP address, browser type, operating system, connection time
  • Purchase history: products ordered, amounts, purchase dates
  • Information about your children: first name, age, size (only if you provide it to us for personalized recommendations)
  • Preferences: wish lists, products viewed, communication preferences
  • Interaction data: reviews, questions, correspondence with our customer service

3. METHODS OF COLLECTION

Your personal data is collected:

  • Directly from you: when creating an account, placing an order, subscribing to our newsletter, contacting our customer service
  • Indirectly: via cookies and similar technologies used on our site
  • Via authorized third parties: commercial partners, service providers, subject to your prior consent or another legal basis

4. PURPOSES OF DATA COLLECTION

We process your personal data for:

  • Managing our commercial relationship: order processing, delivery, invoicing, returns management, vouchers, and refunds
  • Customer service: answering your questions, resolving issues, tracking satisfaction
  • Personalizing your experience: product recommendations, offers tailored to your profile and your children's ages
  • Marketing and communication: sending newsletters, promotional offers, event invitations (subject to your consent)
  • Improving our products and services: analyzing purchasing habits, statistical studies
  • Security and fraud prevention: transaction verification, detection of suspicious activities
  • Complying with our legal obligations: invoice retention, compliance with tax and accounting obligations

5. LEGAL BASES FOR PROCESSING

The processing of your data is based on:

  • Performance of a contract: when processing is necessary for the performance of a contract concluded with you (order management, delivery)
  • Your consent: for sending marketing communications, the use of certain non-essential cookies
  • Our legitimate interest: improving our services, fraud prevention, securing our site
  • Compliance with legal obligations: maintaining accounts, retaining invoices

6. RECIPIENTS OF DATA

Your data may be communicated to:

  • Our internal staff: authorized and subject to a confidentiality obligation
  • Our subcontractors and service providers:
    • Payment providers (in compliance with PCI-DSS standards)
    • Carriers and delivery services
    • Hosting and IT maintenance providers
    • Marketing and data analysis providers
    • Outsourced customer services (if applicable)
  • Commercial partners: only with your prior consent
  • Public bodies and competent authorities: in case of legal obligation or judicial request

We never sell your personal data to third parties.

7. DATA RETENTION PERIOD

We retain your data for limited periods proportionate to the purposes:

  • Data related to your customer account: until account deletion or after 3 years of inactivity
  • Order and invoicing data: 10 years from the close of the financial year (legal obligation)
  • Credit card data: not retained after the transaction (except with explicit consent to facilitate your future purchases, and for a maximum duration of 15 months)
  • Marketing data and preferences: 3 years from the last contact
  • Connection logs: maximum 1 year

At the end of these periods, your data is either deleted or anonymized.

8. DATA SECURITY

We implement appropriate technical and organizational measures to ensure a level of security adapted to the risk:

  • Encryption of sensitive data and transactions
  • Secure HTTPS protocol for all site pages
  • Access control and authentication for our staff
  • Regular updates of our systems
  • Periodic security audits
  • Staff training on best practices
  • Procedures in case of data breach

9. YOUR RIGHTS

In accordance with the regulations, you have the following rights:

  • Right of access: obtain confirmation that data concerning you is being processed and receive a copy
  • Right to rectification: have inaccurate or incomplete information corrected
  • Right to erasure ("right to be forgotten"): request the deletion of your data in cases provided for by law
  • Right to restriction of processing: request the temporary suspension of the processing of some of your data
  • Right to object: object to the processing of your data, particularly for commercial prospecting purposes
  • Right to data portability: receive your data in a structured format and transmit it to another data controller
  • Right to withdraw your consent at any time, when processing is based on consent
  • Right to define directives concerning the fate of your data after your death

To exercise these rights, you can:

We will respond within a maximum of one month, unless particular complexity justifies an extension.

10. COMPLAINT PROCEDURE

If you believe that we are not respecting your rights, you can:

  • Contact us first to resolve the issue
  • Lodge a complaint with the CNIL (French National Commission for Data Protection and Liberties):
    • Online: www.cnil.fr
    • By mail: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

11. COOKIES AND SIMILAR TECHNOLOGIES

11.1 Definition

Cookies are small text files placed on your device when you visit our site. They allow us to store information related to your browsing.

11.2 Types of cookies used

We use different types of cookies:

  • Essential cookies: necessary for the site to function (shopping cart, authentication)
  • Analytical cookies: audience and performance measurement (Google Analytics, etc.)
  • Functional cookies: interface personalization and remembering your preferences
  • Marketing cookies: targeted advertising and social media sharing

11.3 Retention period

Cookies are kept for a maximum of 13 months. Session cookies are automatically deleted when you close your browser.

11.4 Legal basis

In accordance with current legislation, we obtain your explicit consent before placing non-essential cookies. Essential cookies, necessary for the site's operation, are placed based on our legitimate interest.

11.5 Cookie management

You can at any time:

  • Accept or refuse cookies via our cookie banner
  • Configure your browser to block or delete cookies
  • Modify your preferences by clicking on "Cookie management" at the bottom of the page

For more information on how to configure your browser, please consult its help pages.

12. DATA TRANSFERS OUTSIDE THE EU

Your data is primarily processed within the European Union.

If we were to transfer your data to countries that do not offer an adequate level of protection according to the European Commission, we would implement appropriate safeguards:

  • Standard contractual clauses approved by the European Commission
  • Binding corporate rules
  • Approved code of conduct or certification mechanism

You can obtain a copy of these safeguards by contacting us.

13. PROTECTION OF MINORS

Our site and services are primarily aimed at adults, even if we sell products for children.

If you are under 15 years old, you must obtain parental consent before providing us with personal information.

We never knowingly collect data concerning children under 15 without verifying that parental consent has been given.

If we learn that we have collected personal information from a child without verifiable parental consent, we will delete this information as soon as possible.

14. DATA BREACH NOTIFICATIONS

In the event of a data breach likely to pose a risk to your rights and freedoms, we commit to:

  • Notify the competent supervisory authority of the incident within 72 hours
  • Inform you directly as soon as possible if the risk is high
  • Implement measures to remedy the breach and limit its consequences

15. MARKETING COMMUNICATIONS AND NEWSLETTERS

15.1 Registration and consent

By subscribing to our newsletter, you consent to receive our marketing communications. This consent can be withdrawn at any time.

15.2 Special Offers

Free Shipping: For any order on our website exceeding €150, Atelier Badaboum automatically offers you free delivery in mainland France. The shipping method will be selected at our discretion.

Newsletter Welcome Code: By subscribing to our newsletter, you will receive a €5 promotional code to use on your next order over €100. This code cannot be combined with other ongoing promotional offers. Vouchers are neither refundable nor exchangeable.

15.3 Unsubscription

Each marketing email contains an unsubscribe link at the bottom of the page. You can also contact us directly to request unsubscription.

16. SOCIAL NETWORKS

Our site may contain share buttons for social networks. These may collect data about you, even if you do not click on these buttons. We invite you to consult the privacy policies of these social networks to understand the nature of the information collected and how to configure them.

If you interact with us on social networks (Instagram, Facebook, etc.), we may process the data you make visible there according to the privacy settings you have defined.

17. CHANGES TO THE PRIVACY POLICY

We may need to modify this privacy policy, especially to adapt it to legal, regulatory, or business practice changes.

Any substantial modification will be indicated by a visible notice on our site and, if necessary, by email. The "last updated" date at the top of this policy will also be modified.

We encourage you to consult this page regularly to be aware of any changes.

18. CONTACT

For any questions regarding this privacy policy or your personal data, you can contact us: