Privacy Policy

Valuence International Europe SAS, simplified joint stock company with a single shareholder, with capital of 213,275 euros, registered with the Paris RCS under number 882 145 303, with its head office located at 3, rue du Faubourg Saint-honoré, 75008 Paris and whose the intra-community VAT number is as follows: FR53882145303 (hereinafter “the Company”), processes the personal data of its customers visiting or using the functionalities and services offered on the website accessible from the address https://www.allufr.com/ (hereinafter the “Site”) under the conditions provided below, in accordance with the provisions of the European General Regulation on the Protection of Personal Data (hereinafter “the GDPR”).

Personal data constitutes any information relating to the customer, a natural person identified or who can be identified, directly or indirectly, by reference to an identification number or to one or more elements specific to him, in particular his name, first name, address. postal address, email address (hereinafter the “Personal Data” or “Data”).

This policy (hereinafter referred to as the “Privacy Policy”) aims to inform you, in accordance with the GDPR, of our practices regarding the collection, use and sharing of the information that you may provide to us through our website.
This policy aims to inform you about the categories of Personal Data that the Company collects or holds about you, how it uses it, with whom it shares it, how it protects it, and the rights you have over your Personal Data.

By browsing the Site, you acknowledge having read this Confidentiality Policy and having accepted its terms.

1. Management and protection of Personal Data

The Company ensures appropriate management and protection of its customers' Personal Data in accordance with this Privacy Policy

2.   Responsible for Personal Data Protection

Responsible for the protection of Personal Data:

Valuence International Europe SAS (The “Company”)

Address: 3 rue du Faubourg Saint-Honoré 75008 Paris

3.   Purposes and legal bases for the use of Personal Data

The Company undertakes to ensure appropriate processing of its customers' Personal Data for the following purposes:


Purposes

Legal basis

1

Management of the execution of the services offered by the Company (evaluation, purchase, sale, making appointments for reception in store, registration of members, etc.).

Execution of a contract or pre-contractual measures

2

Bookkeeping.

Legal obligation

3

IR (Investor Relations) information on the companies of the Valuence Japan group or on the commercial activities of the Company.

Legitimate interest

4

Purchasing studies and statistics

Legitimate interest


Claims management

Execution of a contract

5

Prevention of illegal transactions and identification according to French law.

Legal obligation

6

Direct B2B commercial prospecting and communication of product and service offers, campaigns or various projects of the Company, companies of the Valuence Japan group or any other company affiliated with the Company; implementation of questionnaire surveys.

Legitimate interest


Direct B2C commercial prospecting by postal mail or automatic call machine and communication of offers of similar products and services by email or SMS and implementation of questionnaire surveys

Legitimate interest



Direct B2C commercial prospecting by email and SMS

Consent


B2C commercial prospecting by third parties by email and SMS (companies of the Valuence Japan Group, or Valuence partners)

Consent

7


Market study and analysis, preparation of statistical figures for management analysis, use of analysis results, development of new services.

Legitimate interest

8

Customer service management.

Legitimate interest

9

Video surveillance during transactions carried out

Legitimate interest

4. Data Categories personal data collected

The Company processes the Personal Data of its prospects and customers for the purposes indicated in Section 3 above (“Purposes and legal bases for the use of Personal Data”). Personal Data within the meaning of this Privacy Policy is data falling into the following categories:

HAS) Identification data and contact details: first and last name, address and postal code, date of birth, telephone number, email address, customer account including password and any other information that identifies the customer ( age, gender, profession for example).

B) Data from communications and requests for information made by customers and prospects: interviews, telephone calls, electronic messages, voice recordings, comments on products (particularly on the social networks Facebook, Instagram and Whatsapp) and preferences on products.

C) Data relating to operations carried out: purchasing management, nature of transactions, date, payment information, purchase history, service requests and complaints.

D) Data relating to navigation: data that we collect during your navigation on our Site such as the date, time of connection and/or navigation, browser type, browser language, IP address.

E)– Images from video protection devices in accordance with applicable rules in this area (e.g. security surveillance cameras in purchasing offices), times and dates of video recordings.

5. Consequence of refusal to transmit Personal Data

When collecting Data, you will be informed if certain Data must be provided or if they are optional. Data identified by an asterisk within the collection form is mandatory. Otherwise, the execution of your request may be restricted.

6. Who are the recipients of the data collected and for what reasons does the Company transmit this data to them?

1) The Company may communicate or transmit the Personal Data of its customers to the following companies in the group to which it belongs, for the purposes of use provided for in Section 3 above (“Purposes and legal bases for use of Data personal"). In this case, the group companies which receive the Personal Data transmitted are required to ensure appropriate management and protection of this Data, in compliance with this Confidentiality Policy as well as the confidentiality policy specific to each company. .

2) On its Site, the Company uses Google Analytics, a service offered by Google, Inc. (hereinafter “Google”) to monitor access to the Site. It may also use cookies, Web Beacons or any other similar technology to provide its services. Cookies, Web Beacons, etc., are anonymous information which is used for the purposes of statistical analysis in particular. They may also be associated with customer identity information, which is used in member services to provide more personalized services. Furthermore, on part of the Company's Site, third-party distributors to whom the Company entrusts the distribution of its advertisements (such as Google and Yahoo) distribute advertisements on the basis of information relating to access history to the Site collected in using cookies, in compliance with the respective privacy policies of these distributors.

For any information regarding cookies, you can consult the following link: About Cookies | CookieHub – Cookie Consent Solution.

However, customers may request to be excluded from the list of recipients of these advertisements (opt-out right) under the following conditions:

・ When using the Company Site (English version):

It is possible to refuse the creation of cookies from the Site's cookie settings screen.

・ When using the Company Site or any other Company-related web page:

It is possible to block the use of cookies by advertising distributors by accessing their respective opt-out pages.

Customers can also deactivate the cookies function by modifying the configuration of their browser, it being noted that this may have the effect of preventing customers from using all or part of the services offered on the Company's Site.

3) In accordance with the regulations in force, the Company may communicate or transmit the Personal Data of its customers to the competent authorities upon request and in particular to public bodies, judicial officers, ministerial officers, bodies responsible for carrying out the recovery of claims, exclusively to meet legal obligations, as well as in the case of searching for perpetrators of offenses committed on the internet.

4) Personal Data of customers may be communicated or transmitted by the Company to the authorities or bodies indicated by law, when such communication or transmission is necessary to comply with the provisions of the laws of the European Union (EU) or the laws or regulations of EU member states or the European Economic Area (EEA).

5) The Company offers its customers the possibility of consulting its pages on social networks via buttons (Facebook, Instagram and Whatsapp). On this occasion, the social network plug-ins made available on the Site use cookies which make it possible to follow the navigation of customers, whether they are registered on the social networks in question or whether they are connected to their personal account when browsing the Site. The cookies implemented also allow the publishers of the different social networks to target advertising offers on their respective platforms.

In this context, the Company has no control over the processing of Personal Data possibly carried out by the editors of the various social network platforms concerned, who remain solely responsible for their own processing, with the exception of processing resulting from specific settings made. by the Company on these social media platforms, where applicable, for which the Company would be the co-controller. The Company therefore invites the customer to first consult the general conditions of use and the respective confidentiality policies of these social network platform publishers if he wishes to use the sharing buttons made available to him.

7. Transfer of Personal Data to States outside the EEA

The Company may transfer the Personal Data of its customers to the States or regions in which the Company and its group have established bases of operations to achieve the purposes of use provided for in Section 3 above (“Purposes and bases legal use of Personal Data"). In this case, unless the European Commission has granted an “adequacy decision” to the recipient state or region in accordance with the GDPR and the provisions of the applicable laws of the EU/EEA member states, the Company must in principle sign standard data protection clauses (Standard Contractual Clauses or SCC) and implement additional measures where applicable in order to guarantee an adequate level of protection of the Personal Data transferred. Any questions regarding the protective measures provided for in this paragraph should be addressed to the contact details indicated in Section 10 below (“Modality of request for communication, etc., and contact details for requests for information”).

8. Management of Personal Data

The Company retains the Personal Data of its customers for the duration necessary to achieve one of the purposes of use provided for in Section 3 (“Purposes and legal bases for the use of Personal Data”). The following table indicates the expected shelf life for each of these purposes:


Purposes

The duration of the conversation

1

Management of the execution of the services offered by the Company (evaluation, purchase, sale, making appointments for reception in store, registration of members, etc.).

3 years from the end of our commercial relationship

2

Bookkeeping.

10 years from the end of the financial year

3

IR (Investor Relations) information on the companies of the Valuence Japan group or on the commercial activities of the Company.

For contracts arising from a commercial relationship: 5 years from the expiration of the contract

4

Sales studies and statistics.

3 years from the completion of the study


Claims management

Duration of the contractual relationship

5

Prevention of illegal transactions and identification according to French law.

6 years from the date on which the documents or exhibits were established

6

Direct B2B commercial prospecting and communication of product and service offers, campaigns or various projects of the Company, companies of the Valuence Japan group or any other company affiliated with the Company; implementation of questionnaire surveys.

3 years from the last contact of people with the organization


Direct B2C commercial prospecting by postal mail or automatic call machine and communication of offers of similar products and services by email or SMS and implementation of questionnaire surveys

3 years from the last contact of people with the organization


Direct B2C commercial prospecting by email and SMS

Until consent is withdrawn or 3 years from the people's last contact with the organization


B2C commercial prospecting by third parties by email and SMS (companies of the Valuence Japan Group, or Valuence partners)

Until consent is withdrawn or 3 years from the people's last contact with the organization

7

Market study and analysis, preparation of statistical figures for management analysis, use of analysis results, development of new services.

Duration necessary for the achievement of the objective of the study or analysis or until the exercise of the right of opposition

8

Customer service management.

Duration of the commercial relationship

9

Video recording

30 days, extended to the duration of the procedure in the event of incident detection

Furthermore, files relating to various contracts, the status of transactions, complaints, etc., are kept for any period necessary to comply with legal obligations. It is specified, however, that the retention period of this information may be longer, if this is necessary for, among other things, the processing of a dispute.

9. Customer rights over their Personal Data

Any request made by a client or by a client's representative concerning Personal Data retained by the Company will be processed by the Company under the following conditions in accordance with the GDPR:

1) Right of access

The exercise of the right of access is subject to compliance with the following admissibility conditions:

  • the identification of the person concerned;
  • the existence of Processing of Personal Data relating to the person concerned;
  • the non-excessive and well-founded nature of the Request.

Subject to compliance with the admissibility conditions above, the information that the data subject has the right to obtain by exercising their right of access is as follows:

  • the purposes of the Processing;
  • the categories of Personal Data concerned;
  • the recipients or categories of recipients to whom the Personal Data have been or will be communicated;
  • if the recipients or categories of recipients are located in a non-member state of the European Economic Area (which includes the member states of the European Union as well as Norway, Liechtenstein and Iceland): the legal basis of the transfer to this country ;
  • the planned retention period of Personal Data or, if this duration cannot be determined a priori, the criteria used to determine this duration;
  • reminder of the rights of the person concerned;
  • the right to lodge a complaint with a supervisory authority;
  • when the Personal Data processed by the Company was not collected directly from the Data Subject but from a third party who already possessed it, any information available on this third party or on the source of this collection (for example: a partner commercial, etc.);
  • the existence of automated decisions taken on the basis of Processing, including profiling, and any useful information on the significance and anticipated consequences of such processing for the data subject.
  • (i) However, there are several limits that can be invoked by the Company in the context of a Right of Access Request: respect for the rights of a third party;
  • (ii) respect for intellectual property rights; Or
  • (iii) business secrets

2) Right of rectification The exercise of the right of rectification is subject to compliance with the following admissibility conditions:

  • the identification of the person concerned;
  • the existence of Processing of Personal Data relating to the person concerned;
  • the non-excessive and well-founded nature of the Request.

The rectification operations that the Data Subject has the right to obtain by exercising his or her right of rectification are as follows:

  • rectification of inaccurate Personal Data;
  • adding supplements to incomplete Personal Data;
  • updating outdated Personal Data;
  • blocking ambiguous Personal Data.

Where the Company is requested to rectify or update stored Personal Data, on the grounds that the details of such data enabling the applicant to be identified are not accurate, the Company must, except where a correction procedure special is imposed by law or regulation, carry out all necessary investigations without delay and to the extent necessary to achieve the purposes of the data in question. At the end of these investigations, if the Company decides to accept the request by proceeding with the correction, etc. of all or part of the data retained, the Company must inform the applicant without delay. If the Company decides not to accept the request, it must inform the applicant without delay and inform them of the reason for refusal.

3) Right of erasure

A data subject may request that their Personal Data be deleted when:

  • (i)  the Personal Data is no longer necessary for the purposes for which it was collected or is processed,
  • (ii)  the data subject has withdrawn consent,
  • (iii)  the data subject has validly exercised his or her right to object to collection or processing,
  • (iv)  the processing of Personal Data is illegal
  • (v)   to comply with a legal obligation.

When the Company receives a request to erase Personal Data, the Company must carry out all necessary checks to verify whether this data is not necessary to achieve the purposes of the processing. At the end of the checks, if the Company decides to accept the request by deleting all or part of the data stored, it must inform the requester without delay. If the Company decides not to accept the request, it must inform the applicant without delay and inform them of the reason for refusal.

4) Right to limitation

The customer may request the limitation of the processing of his Personal Data:

  • (i)   when he contests the accuracy of the Personal Data, and this for the duration necessary for the company to verify them,
  • (ii)  when the processing is unlawful,
  • (iii) when he wishes the Company to retain his Personal Data when this is necessary for the establishment, exercise or defense of his legal rights,
  • (iv) when he exercised his right to object.

7) Right to portability

The conditions for portability of personal data are as follows:

  • the Portability Request must only concern Personal Data that the person concerned has themselves provided to the Company;
  • the Processing must be based on one of the following legal bases:
    • the consent of the data subject for one or more specific purposes, or
    • the performance of a contract to which the data subject is a party.

Subject to the legal conditions being met, the Company will transmit the applicant's Personal Data to any recipient indicated by the latter, in a structured and machine-readable format. The Company will transmit this Data to a third party, if technically possible. If the Company decides not to accept the transfer request, it must inform the requester without delay and with the reason for the refusal.

8) Right to decide the fate of your Personal Data after your death

The customer has the right to organize the fate of his Personal Data after his death by transmitting general instructions to the company. By default, the deceased's beneficiaries will have the possibility of exercising the rights provided for in this Privacy Policy in the name and on behalf of the deceased.

10. Method of request

The exercise of any of the rights mentioned above must be requested via the request form available on the Valuence International Europe website (https://www.valuence.inc/en/contact/).

11. Contact details for inquiries

For any questions regarding the protection of personal information implemented by the Company, the user can directly contact:

Personal information department, Valuence International Europe SAS

Such.

+33 (0)1 81 69 81 39

Monday to Friday from 11:00 a.m. to 7:00 p.m. in France

E-mail

infoFR@valuence.inc

Customers have the right to lodge complaints about the Company's processing of their personal data directly with the supervisory authority of the EU/EEA member state where they reside or work, or in where their personal data may have been the subject of theft. For details of this procedure, customers should contact the respective supervisory authorities. In France, the competent authority is the CNIL (https://www.cnil.fr/fr/plaintes).

*This Privacy Policy only applies to residents of the European Economic Area (EEA). Non-EEA residents are invited to refer to our privacy policy which covers the provisions concerning them.

For any questions relating to the protection of Personal Data implemented by the Company, please contact:

Personal Information Office, Valence International Europe SAS

TEL: +33 (0)1 81 69 81 39 (Monday to Friday from 10 a.m. to 5 p.m. in France)

E-MAIL: infofr@value.inc

12. Privacy policy update

The Company may modify the Confidentiality Policy depending on legislative and regulatory developments in this area as well as its activity.

Done on 1er May 2021
Updated on 1er June 2024