PRIVACY POLICY

Version dated 25/05/2018


1. About MESSIKA and this Privacy Policy

MESSIKA GROUP, a French simplified joint stock company, having its registered office at 64 Rue La Fayette, 75009 Paris – France, registered in the Paris Trade and Companies Register under number 301 293 999 ("MESSIKA")

MESSIKA has prepared this Privacy Policy to inform you of its policy and practices with regard to collecting, using and disclosing your personal data, provided to us through the Messika.com website and mobile applications published by MESSIKA (jointly referred to as the "Website"), when you visit a MESSIKA store or when you deal with a MESSIKA advisor by phone, or when you interact with MESSIKA via social media. 

MESSIKA protects the privacy of its internet users by complying with applicable regulations in force. As a data controller, MESSIKA has therefore informed the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés or CNIL) of the collection and processing of your personal data (the "Personal Data").

You can print our Privacy Policy from your browser by pressing CTRL+P (Windows and Linux) or ⌘+P (mac)

 

2. Data collected

The main Personal Data that we are likely to collect and process include:

- data relating to your identity, such as your full name, your contact details, your email address;

- data relating to payment methods, such as your credit card number and its expiry date;

- data relating to the monitoring of our commercial relationship, such as your order number, your previous purchases and your MESSIKA customer service requests;

- your preferences and interests;

- electronic identification data, including your IP address or browser data relating to your terminal.

 

 3. Purpose of collecting your Data

When you decide to use the Website, you thereby agree to MESSIKA collecting, using and disclosing your personal data, including your personal and financial information, under the terms and conditions set out in the Privacy Policy. If you do not accept the terms of this Privacy Policy, or any amendment made hereto, we kindly ask that you leave the Website and refrain from purchasing any MESSIKA product listed for sale on the Website.

Furthermore, MESSIKA may also collect personal data from you when you communicate with MESSIKA, when you supply your contact details when you visit a MESSIKA store or when you consult a MESSIKA advisor by phone.

If you choose to interact with MESSIKA via social media or another third-party service, we will collect information that you provide to us via said platform.

Your Personal Data is collected either with your explicit consent, or is necessary for the execution of your orders (performance of a contract).

Your Personal Data is therefore collected in order to:

- process your questions and requests for information;

- enable you to set up a personal "My account" space, and to purchase our products online;

- manage your orders and deliveries online, as well as any applicable warranties;

- ensure the security of online transactions, prevent fraud and payment incidents;

- manage and optimise customer relations;

- subject to your consent: send you information on our offers, news and events (newsletters, invitations and other publications);

- improve the functioning of the Website;

- offer personalised services;

- detect any potential fraud 

- analyse the number of Website visitors.

- manage and respond to requests for repairs, and to provide after-sales services;

Information that is crucial to MESSIKA in order to fulfil the purposes described above are indicated with an asterisk on the Website's various pages. Should you fail to complete these mandatory fields, MESSIKA will not be able to respond to your requests and/or provide you with the products and services requested. Providing the other information is optional, however this enables us to get to know you better and improve our communication and services.

 

4. Recipients of your Personal Data

Your Personal Data is processed by MESSIKA. It will not be sold or made accessible to any third party whatsoever, except for (i) MESSIKA's potential subcontractors, for technical and logistic purposes only (carriers, Website hosting and maintenance service providers, payment and fraud management service providers, etc.) and (ii) any restructuring at MESSIKA, including a total or partial disposal of assets, merger, absorption acquisition, demerger and, more generally, any reorganisation.

Lastly, MESSIKA may be required to disclose your Personal Data to third parties when required by law, regulatory provisions or a court judgement, or if necessary in order to guarantee the protection and defence of its rights.

 

5. Sharing on social media

You may share some information or content (product sheets, etc.) presented on the Site on social media networks. By clicking on the "f" button on Facebook, "bird" button on Twitter or the "P" button on Pinterest, the content is exported from MESSIKA's servers and sent to the website of the social media network concerned. Your posting will then be governed by the terms of use of the social media network you have chosen. You are solely responsible for any content exported from our Site to social media networks. MESSIKA shall under no circumstances be held liable for any use, exploitation or action on the part of said social media networks as soon as the content is exported from the Site.

 

6. Retention period

MESSIKA hereby agrees to only use the Personal Data for the period required by the purposes set out above.

Your Personal Data, collected and processed under the "Contact" section, shall only be retained for the time required to process your request. They will then be destroyed.

In principle, data relating to your orders shall be retained by MESSIKA for a period not exceeding applicable statutory limitation periods. Such Data will, however, also be viewable under your customer account, if active. As soon as your customer account is closed, this Data (i) shall be archived for accounting and evidentiary purposes for the aforementioned limitation periods or (ii) will be destroyed if said periods have expired.

Your Bank Data shall be retained in a secure manner for the period required to confirm your order and payment, and shall then be immediately destroyed. In the event of a payment incident, your Data will be retained for the time required to manage the incident, then for a period of three (3) to five (5) years, depending on the severity of the incident.

Your Identification Data used, with your agreement, in order to send newsletters and other MESSIKA publications shall be retained for a period of three years, as of their collection or your last date of contact (for example, a request for documentation or a click on a hyperlink contained in an email; however, opening an email cannot be considered contact on your part).

Your customer account on the Website shall remain active until you decide to close it, and provided that you make purchases on our Website. In the event of extended inactivity for a period of 3 years, this account will be deactivated.

Upon expiry of this three-year period, MESSIKA may contact you in order to identify whether or not you wish to (i) continue to receive our newsletters and other publications and/or (ii) keep your Website customer account open. Furthermore, your Data will be destroyed within a maximum period of (2) business days following your request to unsubscribe.

In any event, you may close your account and/or unsubscribe from newsletters at any time. To do this, please send an email to our customer service department at conciergerie@messikagroup.com or click on the "unsubscribe" link included in each newsletter. To exercise this right, you can also complete the "Contact" form on our Website by specifying your request and by visiting the relevant section under Frequently Asked Questions.

Lastly, the connection logs collected, with your consent, in connection with cookies and other trackers set up on our Website, shall be retained in accordance with applicable regulations for a period not exceeding thirteen (13) months. See our cookie policy for more details. 

 

7. Security

MESSIKA has implemented appropriate technical and organisational measures in order to ensure the confidentiality and security of your Personal Data.

MESSIKA's IT systems are the subject of state-of-the-art physical and software protections. Procedures for the physical and electronic storage of data collected on the Website have been implemented, pursuant to French legislation in force relating to the protection of personal data and market standards.

MESSIKA employees, who, due to their function, may have access to your Personal Data, are bound by strict non-disclosure obligations.

All of the financial information that you provide on the Website is stored on the secure Website of the financial institution selected by MESSIKA. Transactions performed on the Website are protected by SSL encryption.

Please be aware, however, that no internet data transfer is 100% secure, and that all of the information provided online runs the risk of being intercepted and used by parties other than the intended recipient.

 

8. Privacy Policy modifications and updates

By using our Website, you accept the collection, use and disclosure of your Personal Data in the manner set out in this Privacy Policy.

MESSIKA may modify and update the Privacy Policy at any time. Should MESSIKA wish to use your personal data in a manner different to that set out in the Privacy Policy in force at the time of the data's collection, such modifications shall be published in a new version of this Privacy Policy. If MESSIKA intends to disclose the Personal Data to third parties or subsidiaries in a manner not set out in this Privacy Policy, MESSIKA shall inform you in advance of its intention in writing, and shall offer you the option to refuse this alternative use or disclosure of your Personal Data.

Given the changes than may be made to the Privacy Policy, we encourage you to visit the "Privacy" section on a regular basis.

 

9. Users' rights over the collected data

In accordance with the regulations in force, you have the right to access and rectify your Personal Data, as well as the right to request their deletion, to oppose their processing and to limit them or obtain their portability insofar as this is applicable, the possibility of opposing the processing of these data for legitimate reasons or at any time to oppose the use of your data for commercial purposes, as well as the right to instruct us what to do with your data after your death.

You may also object to your Personal Data being used in order to prepare your customer profile; in this case, you will no longer be able to take advantage of personalised offers or services.

These rights may be exercised by emailing MESSIKA directly at conciergerie@messikagroup.com. You may be asked to provide proof of identity.

Furthermore, you may choose to no longer receive communications from us relating to our offers, news and events at any time, by clicking on the hyperlink included for this purpose in every email we send you. You can also contact us by sending an email to the following address: conciergerie@messikagroup.com.

You must ensure that you provide MESSIKA with any updates or changes to your information, including your postal and/or email address, enabling us to send your orders to the correct address and, if necessary, to contact you in this respect. MESSIKA can also retain, for archiving purposes, copies of communications with Website users and any reply to questions or comments sent to users by our customer service department.

 

10. Contact us

In case of questions regarding the Privacy Policy and MESSIKA's personal data protection practices, please don't hesitate to contact us via the "Contact" section on our Website, or by emailing our customer service department at conciergerie@messikagroup.com.

 

11. Governing law - Disputes

This Privacy Policy is governed and interpreted pursuant to the laws of France. The French courts shall have territorial jurisdiction over any dispute relating to the Website, with the exception of special jurisdiction rules, particularly in the event of a dispute with a consumer. In the event of a dispute regarding MESSIKA's collection and processing of your Personal Data, you may lodge a complaint with a supervisory authority ("CNIL" in France, located at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07).