Management of Personal Data
The user of this website is informed of the regulations concerning marketing communications, the Law of June 21, 2004 for Confidence in the Digital Economy, the Data Protection Act of August 6, 2004, and the General Data Protection Regulation (GDPR – No. 2016/679).
Data Controller
The controller responsible for the processing of personal data collected in connection with the creation of a user account and website browsing is DONA CARLOTA, represented by Valérie RANC, its legal representative.
As the data controller, DONA CARLOTA undertakes to comply with the applicable legal framework. It is responsible for defining the purposes of the processing of personal data, providing its clients and prospects with full information regarding such processing, and maintaining an accurate and up-to-date record of all processing activities.
Whenever dona-carlota.com processes personal data, it takes all reasonable measures to ensure the accuracy and relevance of the data in relation to the purposes for which it is processed.
Purpose of Data Processing
dona-carlota.com may process all or part of the following data for the purposes of:
-
Facilitating website navigation, management, and tracking of services ordered by the user (connection data, usage data, billing information, order history, etc.);
-
Preventing and combating online fraud;
-
Improving website performance and user experience (connection and usage data).
dona-carlota.com does not sell or trade users’ personal data. The data collected is used only when necessary or for statistical and analytical purposes.
User Rights
In accordance with current European regulations, users of dona-carlota.com have the following rights:
-
Right of access (Article 15 GDPR), rectification (Article 16 GDPR), updating, and completion of user data;
-
Right to erasure or blocking of personal data (Article 17 GDPR) when such data is inaccurate, incomplete, ambiguous, outdated, or where collection, use, disclosure, or storage is prohibited;
-
Right to withdraw consent at any time (Article 13-2(c) GDPR);
-
Right to restriction of processing (Article 18 GDPR);
-
Right to object to data processing (Article 21 GDPR);
-
Right to data portability (Article 20 GDPR) for data processed automatically based on consent or contract;
-
Right to determine the fate of personal data after death, and to designate a third party to whom dona-carlota.com may or may not disclose such data.
Upon becoming aware of a user’s death, and in the absence of specific instructions, dona-carlota.com undertakes to delete the user’s personal data, unless retention is required for evidentiary or legal compliance purposes.
If a user wishes to know how dona-carlota.com processes their personal data, requests a correction, or objects to processing, they must identify themselves precisely (with a copy of an ID card or passport) and specify the data concerned.
Requests may be sent to:
By post: 208 Rue du Four, 83470 Seillons Source d’Argens, France
By email: donacarlotafashion@yahoo.fr
Requests for data deletion will be subject to the legal obligations imposed on dona-carlota.com, particularly regarding record retention and archiving.
Users may also lodge a complaint with a supervisory authority, notably with the CNIL (www.cnil.fr/en/complaints).
Non-Disclosure of Personal Data
dona-carlota.com undertakes not to process, host, or transfer any client data to a country outside the European Union or one not deemed “adequate” by the European Commission, without first informing the client.
However, dona-carlota.com remains free to choose its technical and commercial subcontractors, provided that they offer sufficient guarantees with respect to GDPR compliance (Regulation No. 2016-679).
dona-carlota.com takes all necessary precautions to ensure the security of the information collected and to prevent its disclosure to unauthorized parties.
Should dona-carlota.com become aware of any incident affecting the integrity or confidentiality of a client’s information, it undertakes to inform the client as soon as possible and to communicate the corrective measures taken.
Furthermore, dona-carlota.com does not collect any “sensitive data.”
Types of Data Collected
For users of dona-carlota.com, the following data — essential for the proper functioning of the service — are collected and stored for a maximum period of 13 months after the end of the contractual relationship:
Data collected through the contact form:
The form allows users to contact Dona Carlota. Submitted data are stored in a database to ensure proper follow-up of contact requests. These data may also serve as evidence for Dona Carlota in cases of defamatory, abusive, privacy-infringing, discriminatory, or illegal content (e.g., incitement to racial or religious hatred, glorification of war crimes or terrorism, or promotion of drug use).
Collected data: First name, Last name, Email address, Telephone number, Postal address, IP address, User Agent.
Data are stored in a database and automatically deleted 3 months after submission.
Data collected during website browsing:
These data allow the website owner to obtain analytics on visitor activity (e.g., product page views, search queries).
Collected data: IP address, User Agent.
Data are stored in a database and automatically deleted 13 months after collection.
Incident Notification
Despite best efforts, no method of Internet transmission or electronic storage is completely secure. Therefore, absolute security cannot be guaranteed. Should we become aware of a data breach, affected users will be promptly notified so they can take appropriate measures.
Our incident notification procedures comply with legal requirements at both national and European levels. We undertake to inform our clients of any relevant security issues and to provide all necessary information to help them meet their own regulatory reporting obligations.
No personal information of users of dona-carlota.com is published, exchanged, transferred, assigned, or sold to any third parties without the user’s knowledge.