Last updated : April 2025

PREAMBLE

At Atelier Badaboum, we place great importance on the protection of your personal data and respect for your privacy. This privacy policy aims to inform you transparently about how we collect, use, and protect your personal information, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

TABLE OF CONTENTS

1. Data controller
2. Personal data collected
3. Collection methods
4. Purposes of processing
5. Legal bases for processing
6. Recipients of data
7. Retention period
8. Data security
9. Your rights
10. Complaint procedure
11. Cookies and similar technologies
12. Data transfer outside the EU
13. Protection of minors
14. Notifications in case of data breach
15. Marketing communications and newsletters
16. Social networks
17. Changes to the policy
18. Contact

1. DATA CONTROLLER
Atelier Badaboum, represented by Ms. Sara DRIF and registered with the Paris Trade and Companies Register under number 942 372 145.
Registered office : 102 Rue Saint-Maur - 75011 Paris
Email : contact@atelier-badaboum.com

2. PERSONAL DATA COLLECTED
We may collect and process the following categories of data :
• Identification data : last name, first name, date of birth
• Contact details : postal address, email address, phone number
• Payment data : credit card information (processed securely by our payment provider)
• Connection data : IP address, browser type, operating system, connection time
• Purchase history : ordered products, amounts, purchase dates
• Information about your children : first name, age, size (only if you provide them to us for personalized recommendations)
• Preferences : wish lists, viewed products, communication preferences
• Interaction data : reviews, questions, correspondence with our customer service

3. COLLECTION METHODS
Your personal data is collected :
• Directly from you : when creating an account, placing an order, subscribing to our newsletter, contacting our customer service
• Indirectly : via cookies and similar technologies used on our site
• Via authorized third parties : business partners, service providers, subject to your prior consent or another legal basis

4. PURPOSES OF DATA COLLECTION
We process your personal data to :
• Manage our business relationship : processing orders, delivery, invoicing, managing returns, vouchers, and refunds
• Customer service : answering your questions, resolving problems, monitoring satisfaction
• Personalize your experience : product recommendations, offers tailored to your profile and your children's ages
• Marketing and communication : sending newsletters, promotional offers, invitations to events (subject to your consent)
• Improve our products and services : analysis of buying habits, statistical studies
• Security and fraud prevention : transaction verification, detection of suspicious activities
• Comply with our legal obligations : retention of invoices, compliance with tax and accounting obligations

5. LEGAL BASES FOR PROCESSING
The processing of your data is based on :
• Performance of a contract : when processing is necessary for the execution of the contract concluded with you (order management, delivery)
• Your consent : for sending marketing communications, using certain non-essential cookies
• Our legitimate interest : improving our services, preventing fraud, securing our site
• Compliance with legal obligations : accounting, invoice retention

6. RECIPIENTS OF DATA
Your data may be shared with :
• Our internal staff : authorized and subject to confidentiality obligations
• Our subcontractors and service providers :
o Payment providers (in compliance with PCI-DSS standards)
o Carriers and delivery services
o IT hosting and maintenance providers
o Marketing and data analysis providers
o Outsourced customer services (if applicable)
• Business partners : only with your prior consent
• Public bodies and competent authorities : in case of legal obligation or judicial request

We never sell your personal data to third parties.

7. DATA RETENTION PERIOD
We retain your data for limited periods proportionate to the purposes :
• Data related to your customer account : until account deletion or after 3 years of inactivity
• Order and billing data : 10 years from the end of the accounting year (legal obligation)
• Credit card data : not retained after the transaction (except with explicit consent to facilitate your future purchases, and for a maximum period of 15 months)
• Marketing data and preferences : 3 years from the last contact
• Connection logs : 1 year maximum

Upon expiration of these periods, your data is either deleted or anonymized.

8. DATA SECURITY
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk :
• Encryption of sensitive data and transactions
• Secure HTTPS protocol for all pages of the site
• Access control and authentication for our staff
• Regular updates of our systems
• Periodic security audits
• Training of our staff in best practices
• Procedures in case of data breach

9. YOUR RIGHTS
In accordance with regulations, you have the following rights :
• Right of access : obtain confirmation that data concerning you is being processed and receive a copy
• Right to rectification : have inaccurate or incomplete information corrected
• Right to erasure ("right to be forgotten") : request the deletion of your data in cases provided for by law
• Right to restriction of processing : request the temporary suspension of processing of certain data
• Right to object : object to the processing of your data, particularly for commercial prospecting purposes
• Right to data portability : receive your data in a structured format and transmit it to another data controller
• Right to withdraw your consent at any time, when processing is based on consent
• Right to define directives concerning the fate of your data after your death

To exercise these rights, you can :

• Send us an email at : contact@atelier-badaboum.com

We will respond within a maximum period of one month, unless particular complexity justifies an extension.

10. COMPLAINT PROCEDURE
If you believe we are not respecting your rights, you can :
• Contact us first to resolve the issue
• Lodge a complaint with the CNIL (French Data Protection Authority) :
o Online : www.cnil.fr
o By mail : CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

11. COOKIES AND SIMILAR TECHNOLOGIES

11.1 Definition
Cookies are small text files placed on your device when you visit our site. They allow information related to your navigation to be stored.

11.2 Types of cookies used
We use different types of cookies :
• Essential cookies : necessary for the functioning of the site (shopping cart, authentication)
• Analytical cookies : audience and performance measurement (Google Analytics, etc.)
• Functional cookies : interface customization and remembering your preferences
• Marketing cookies : targeted advertising and sharing on social networks

11.3 Retention period
Cookies are kept for a maximum period of 13 months. Session cookies are automatically deleted when you close your browser.

11.4 Legal basis
In accordance with current legislation, we collect your explicit consent before placing non-essential cookies. Essential cookies, necessary for the functioning of the site, are placed on the basis of our legitimate interest.

11.5 Cookie management
You can at any time :
• Accept or refuse cookies via our cookie banner
• Configure your browser to block or delete cookies
• Modify your preferences by clicking on "Cookie Management" at the bottom of the page

For more information on how to configure your browser, please consult its help pages.

12. DATA TRANSFER OUTSIDE THE EU
Your data is primarily processed within the European Union.
If we need to transfer your data to countries that do not offer an adequate level of protection according to the European Commission, we would implement appropriate safeguards:
• Standard contractual clauses approved by the European Commission
• Binding corporate rules
• Approved code of conduct or certification mechanism

You can obtain a copy of these safeguards by contacting us.

13. PROTECTION OF MINORS
Our site and services are primarily intended for adults, even though we sell products for children.
If you are under 15 years of age, you must obtain your parents' consent before providing us with personal information.
We never knowingly collect data concerning children under 15 years of age without verifying that parental consent has been given.
If we learn that we have collected personal information from a child without verifiable parental consent, we will delete this information as soon as possible.

14. NOTIFICATIONS IN CASE OF DATA BREACH
In the event of a data breach likely to create a risk to your rights and freedoms, we commit to :
• Notify the incident to the competent supervisory authority within 72 hours
• Inform you directly as soon as possible if the risk is high
• Implement measures to address the breach and limit its consequences

15. MARKETING COMMUNICATIONS AND NEWSLETTERS

15.1 Registration and consent
By subscribing to our newsletter, you consent to receive our marketing communications. This consent can be withdrawn at any time.

15.2 Special offers
Free shipping : For any order on our site exceeding €200, Atelier Badaboum automatically offers free delivery in metropolitan France. The shipping method will be selected at our discretion.

Newsletter welcome code : By subscribing to our newsletter, you will receive a promotional code of €5 to use on your next order over €100. This code cannot be combined with other current promotional offers. Vouchers are neither refundable nor exchangeable.

15.3 Unsubscribe
Each marketing email contains an unsubscribe link at the bottom of the page. You can also contact us directly to request unsubscription.

16. SOCIAL NETWORKS
Our site may contain sharing buttons for social networks. These may collect data about you, even if you do not click on these buttons. We invite you to consult the privacy policies of these social networks to understand the nature of the information collected and how to configure it.
If you interact with us on social networks (Instagram, Facebook, etc.), we may process the data that you make visible there according to the privacy settings you have defined.

17. CHANGES TO THE PRIVACY POLICY
We may need to modify this privacy policy, particularly to adapt it to legal, regulatory, or commercial practice changes.
Any substantial modification will be indicated by a visible notice on our site and, if necessary, by email. The "last updated" date at the top of this policy will also be modified.
We encourage you to regularly check this page to be aware of any changes.

18. CONTACT
For any questions regarding this privacy policy or your personal data, you can contact us :
• By email : contact@atelier-badaboum.com