Privacy Policy
1 - Preamble
This Privacy Policy sets out the commitments of MALYS SARL regarding the protection of your personal data as a customer or internet user, and as a user of the services. It outlines the methods of collecting and using personal data concerning you, and your rights in this regard. MALYS SARL respects the "Informatique et Libertés" law No. 78 of 6 January 1978 as amended, the law for "Trust and the Digital Economy" No. 2004 – 575 of 21 June 2004 as well as Regulation 2016/679 of 27 April 2016. MALYS SARL has appointed a Data Protection Officer responsible for ensuring the proper application of the law and respecting the rights of access, rectification, objection, erasure, limitation and portability you have under this law (dpo@malys-beaute.com). The Privacy Policy of MALYS SARL applies in addition to our General Terms and Conditions of Sale.
MALYS EQUIPEMENTS reserves the right to modify this policy in order to adapt it to new legislation, case law criteria, sector practices or the interests of the entity. Any modification will be announced in advance as appropriate, so that you have full knowledge of its content.
The legal basis legitimising the processing of your personal data in order to carry out customer management is the consent given by the user by filling in and submitting the corresponding form via our web page. However, the basis of legitimacy for sending commercial communications is the performance of the contract to which the data subject has committed.
2 - What data is collected and who is it used for?
As Data Controller within the meaning of the law known as "Informatique et libertés" and Regulation 2016/679 of 27 April 2016, MALYS SARL is responsible for the personal data it collects. The data is collected in order to allow you, in your capacity as a client, prospect or simple user of our services, to receive personalized information, to manage your orders, to offer you appropriate commercial offers, and where applicable to benefit from offers from our partners. This data also allows our services to administer and improve our marketing activities and services intended for our clients. When collecting your personal data, you are informed of the mandatory nature of the requested information, in order to benefit from a service, or of their optional nature. You are also informed of how MALYS SARL will use your data, and of your right of access, correction, objection, erasure, data portability, and restriction of processing.
Declarative data : MALYS SARL collects the data necessary for receiving its newsletter, creating your quote, or managing your order. The data collected on this occasion may be: your first and last name, the name of your company, the SIREN/SIRET number, your postal address, your email address, your phone number. They may be supplemented by information such as your date of birth. You may be offered on this occasion to receive commercial offers from MALYS SARL or its partners. In accordance with the law for "Confidence in the digital economy", you must clearly express your consent by checking a box confirming your agreement, if applicable. You will, of course, have the possibility to withdraw your consent at any time by exercising your rights of opposition, deletion or limitation. However, you will not be able to challenge the lawfulness of the processing carried out before the withdrawal. All this data is stored in our customer database, in order to communicate with you and offer you deals tailored to your needs.
Behavioural data : MALYS SARL may also keep records of interaction events between you and our website or on our newsletter (page loads, button clicks, click rates on newsletters, banners, etc.) in order to offer you personalised offers adapted to your wishes, and more generally improve our services based on our customers' expectations. In this case, with your consent, we keep this data. You are then informed of your rights of access, rectification, objection and erasure, data portability, limitation of processing, and how to exercise them.
Cookies : a cookie is a small text file, saved on the hard drive of your computer at the request of the server managing the visited website. It contains information about the navigation done on the pages of that site and helps to facilitate later use of the site during your next visit. The information collected by a cookie can only be read by its issuer. You can refuse the placement of cookies, but in that case you risk having degraded access to the offered services. During your visits to our site, cookies may be placed on your computer. MALYS SARL respects the recommendation of the CNIL dated 5 December 2013 concerning cookies:
- On your first visit to our site, a banner informs you about the placement of cookies, your ability to oppose them, and the steps to do so;
- You can always access this information by clicking on « Cookie Management » at the bottom of the homepage of our site malys-beaute.com ;
- Cookies that allow you to browse our sites and be identified during your next visit, or to remember your shopping cart, are not concerned.
In accordance with current regulations, behavioural data may be transmitted to the competent authorities upon request.
Data not collected directly from you : In certain cases, Personal Data concerning you may have been collected from third parties. Thus, MALYS SARL may collect Personal Data from its partners. These sources are non-public. Where applicable, we will be sure to provide you with all information about the processing as well as any useful information regarding the exercise of your rights of objection, erasure, restriction, access, rectification, and portability.
In any case, you can request not to receive any more commercial offers at your email address:
- Either by using the unsubscribe link that you will find at the bottom of all MALYS SARL marketing emails.
- Either by sending a letter to the following address: MALYS SARL, 17 rue Nicolas Copernic, ZA Fonlabour, 81000 Albi.
- Either by writing an email to our DPO at the following address: dpo@malys-beaute.com.
3 - Personal Data Security
MALYS SARL implements all technical means to ensure the security of your personal data, and to prevent any risk of loss, deterioration or misuse of it by taking into account the state of the art, implementation costs, the nature, scope, context and purposes of the processing, as well as the risks of varying probability and severity associated with each processing.
4 - Who are the recipients of your personal data ?
The personal data collected is intended for MALYS SARL and its partners. Your personal data is not communicated to third parties, except in the following cases:
- when MALYS SARL has to share your Personal Data with business partners, suppliers, service providers, including technical providers for the purpose of providing services, resolving service operation issues or in order to offer advertising and promotional information related to the services offered by MALYS SARL ;
- MALYS SARL particularly provides your Personal Data to third-party companies to provide services on its behalf (transport and delivery, assembly of medical beds, etc.);
- in application of a law, a regulation or under a decision of a competent regulatory or judicial authority or, if necessary, for the purpose of preserving its rights and interests, MALYS SARL may communicate your data;
- in the event of a change of control or transfer of all or part of its assets, MALYS SARL will be authorised to transfer your Personal Data ;
- Data may be transferred or communicated, where applicable, to banks for the purposes of recoveries or payments, as well as at the request of the tax authorities or the courts.
MALYS SARL does not share your Personal Data with third-party advertisers for targeted marketing purposes. However, it should be noted that advertisers may obtain your Personal Data from other public sources. MALYS SARL can in no way be held liable in this regard.
However, MALYS SARL may use and share with third parties certain non-personal technical or aggregated data relating to your browsing on our site. The collection, processing and disclosure of such anonymised data shall not be subject to the restrictions set out herein.
5 - What is the retention period of your personal data?
The retention period of your personal Data may vary depending on the purpose of collection. Legal obligations may require MALYS SARL to retain it for a minimum period. In other cases, data concerning you will only be retained within the limit set by law, i.e. 10 years from the collection of personal Data, in compliance with the applicable regulations. The information stored on your terminal (e.g. cookies), or any other element used to identify you and allowing their traceability as well as raw traffic data associating an identifier, will not be kept beyond thirteen months in accordance with current legislation.
6 - How to exercise your rights of access, rectification, opposition, erasure, portability and restriction of your personal data?
In application of the provisions of articles 39 and 40 of the "Informatique & Libertés" law and European Regulation 2016/679, you may request the communication of your Personal Data and require that your Personal Data which are inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or storage is prohibited, be, as the case may be, corrected, completed, updated, locked, or erased.
In accordance with Article 18 of European Regulation 2016/679, you may also, where applicable, request to limit the access to processing (for example, when the accuracy of your Personal Data is disputed by you – and this, for a duration allowing MALYS SARL to verify the accuracy of your Personal Data, or when MALYS SARL no longer needs your Personal Data for the purposes of processing but you still require it for the establishment, exercise or defence of legal rights).
In accordance with Article 20 of European Regulation 2016/679, it is also possible for you, within the limits of the technical processes used by MALYS SARL, to request to receive your Personal Data in a structured, commonly used and machine-readable format, and for it to be transmitted to another data controller, for processing carried out using automated methods for which you have given your consent.
For all these requests, simply send an email or a letter to the following address:
MALYS SARL
Corresponding to data protection
17 rue Nicolas Copernic
ZA Fonlabour
81000 Albi
In accordance with decree no. 2007-451 of 25 March 2007 issued for the application of the "Data Protection & Freedoms" law, your requests must be submitted in writing and must be signed and accompanied by a photocopy of an identity document bearing your signature. The request must specify the address to which the response should be sent. MALYS SARL will have a period of 1 (one) month to respond following receipt of your request.
For your complete information, you have the option to contact the National Commission on Informatics and Liberty (whose contact details are available at https://www.cnil.fr/fr/vous-souhaitez-contacter-la-cnil) in the event that MALYS SARL has not responded to your request within one month following your request. If necessary, this period may be extended by two months, taking into account the complexity and number of requests.