Privacy policy
1 - Preamble
This Privacy Policy sets out MALYS SARL's commitments regarding the protection of your personal data in your capacity as a customer or Internet user, and as a user of the services. It describes how we collect and use your personal data and your rights in this respect. MALYS SARL complies with the French Data Protection Act no. 78 of 6 January 1978 as amended, the Law for "Confidence and the Digital Economy" no. 2004 - 575 of 21 June 2004 as well as Regulation 2016/679 of 27 April 2016. MALYS SARL has appointed a Data Protection Officer to ensure that the law is properly applied and that your rights of access, rectification, opposition, deletion, limitation and portability are respected in accordance with the aforementioned law (dpo@malys-beaute.com). MALYS SARL's Privacy Policy applies in addition to our General Terms and Conditions of Sale.
MALYS EQUIPEMENTS, reserves the right to modify this policy in order to adapt it to new legislation, jurisprudential criteria, sector practices or the interests of the entity. Any modification will be announced in advance as due, so that you are fully aware of its content.
The legal basis that legitimises the processing of your personal data for the purposes of customer management is the consent expressed by the user by filling in and sending the relevant form via our website. However, the legitimate basis for sending commercial communications is the performance of the contract entered into by the interested party.
2 - What data is collected and who uses it?
As a Data Controller within the meaning of the French Data Protection Act and Regulation 2016/679 of 27 April 2016, MALYS SARL is responsible for the personal data it collects. The data is collected in order to enable you as a customer, prospect or simple user of our services, to receive personalised information, to manage your orders, to provide you with tailored commercial offers, and where applicable to enable you to benefit from offers from our partners. This data also enables our departments to administer and improve our marketing activities and services for our customers. When your personal data is collected, you are informed that the information requested is mandatory in order to benefit from a service, or that it is optional. You are also informed of the use that MALYS SARL will make of your data, and of your right of access, rectification, opposition, deletion, data portability and limitation of processing.
Declarative data: MALYS SARL collects the data necessary to receive its newsletter, to create your quote or to manage your order. The data collected on this occasion may be: your first and last name, the name of your company, your SIREN/SIRET number, your postal address, your e-mail address, your telephone number. This information may be supplemented by information such as your birthday. You may be invited to receive commercial offers from MALYS SARL or its partners. In accordance with the law for "Confidence in the digital economy", you must clearly express your consent by ticking a box confirming your agreement, where applicable. You will of course be able to withdraw your consent at any time by exercising your rights of opposition, deletion or limitation. However, you will not be able to challenge the lawfulness of the processing carried out prior to the withdrawal. All this data is stored in our customer database, so that we can communicate with you and provide you with offers tailored to your needs.
Behavioural data: MALYS SARL may also keep records of interactions between you and our website or newsletter (page loads, button clicks, click rates on newsletters, banners, etc.) in order to provide you with offers tailored to your wishes and generally improve our services in line with our customers' expectations. In this case, with your consent, we retain this data. You are then informed of your rights of access, rectification, opposition and deletion, data portability, limitation of processing and how to exercise them.
Cookies: a cookie is a small text file stored on your computer's hard drive at the request of the server managing the website visited. It contains information about your browsing of the site's pages and makes it easier to use the site the next time you visit. The information collected by a cookie can only be read by the sender of the cookie. You may refuse the installation of cookies, but in this case you may have reduced access to the services offered. During your visits to our site, cookies may be installed on your computer. MALYS SARL complies with the CNIL recommendation dated 5 December 2013 concerning cookies:
- When you first visit our site, a banner informs you that cookies are installed, that you can refuse them and how to do so;
- You can always access this information by clicking on "Cookie management" at the bottom of the home page of our malys-beaute.com website;
- This does not include cookies that enable you to browse our sites and be identified the next time you visit, or to save your shopping basket.
In accordance with current regulations, behavioural data may be transmitted to the competent authorities upon request.
Data not collected directly from you: In some cases, your Personal Data may have been collected from third parties. MALYS SARL may collect Personal Data from its partners. These sources are not public. Where applicable, we will not fail to provide you with all the information on the processing as well as any useful information regarding the exercise of your rights of opposition, deletion, limitation, access, rectification and portability.
In any case, you can ask not to receive any more commercial offers at your email address:
- Or by using the unsubscribe link that you will find at the bottom of all MALYS SARL commercial e-mailings.
- Or by sending a letter to the following address: MALYS SARL, 17 rue Nicolas Copernic, ZA Fonlabour, 81000 Albi.
- Or by sending an e-mail to our DPO at the following address: dpo@malys-beaute.com.
3 - Security of personal data
MALYS SARL implements all technical means to guarantee the security of your personal data, and to prevent any risk of loss, deterioration or misuse thereof, taking into account the state of the art, the costs of application, the nature, scope, context and purposes of the processing, as well as the risks of varying probability and seriousness associated with each processing operation.
4 - Who receives your personal data?
The Personal Data collected is intended for MALYS SARL and its partners. Your Personal Data will not be communicated to third parties, except in the following cases:
- when MALYS SARL has to share your Personal Data with business partners, suppliers, service providers and in particular technical service providers in order to provide the services, to solve problems with the functioning of the services or to offer advertising and promotional information in relation to the services offered by MALYS SARL ;
- MALYS SARL fournit en particulier vos Données personnelles à des sociétés tierces pour fournir des services en son nom (transport et livraison, montage des lits médicalisés, etc.) ;
- in application of a law, a regulation or by virtue of a decision by a competent regulatory or judicial authority or, if necessary, in order to preserve its rights and interests, MALYS SARL may communicate your data;
- in the event of a change of control or transfer of all or part of its assets, MALYS SARL shall be entitled to transfer your Personal Data;
- The data may be transferred or communicated, where appropriate, to banks for collection or payment purposes, or at the request of the tax authorities or the courts.
MALYS SARL does not provide your Personal Information to third party advertisers for targeted marketing purposes. It should be noted, however, that advertisers may obtain your Personal Data from other public sources. MALYS SARL shall not be held liable in this respect.
En revanche, MALYS SARL peut utiliser et partager avec des tiers certaines données techniques ou agrégées non personnelles relatives à votre navigation sur notre site. La collecte, le traitement et la divulgation de telles données anonymisées ne sauraient être soumis aux restrictions énoncées dans les présentes.
5 - How long is your personal data kept?
The length of time your Personal Data is kept may vary depending on the purpose for which it was collected. Legal obligations may require MALYS SARL to keep data for a minimum period. In other cases, your personal data will only be kept within the limit given by the law, i.e. 10 years from the date of collection of the Personal Data in compliance with the applicable regulations. Information stored in your terminal (e.g. cookies), or any other element used to identify you and enabling them to be traced, as well as raw traffic data associating an identifier, will not be kept beyond thirteen months in accordance with the legislation in force.
6 - How can you exercise your rights of access, rectification, opposition, deletion, portability and limitation of your personal data?
Pursuant to the provisions of Articles 39 and 40 of the French Data Protection Act and European Regulation 2016/679, you may request the disclosure of your Personal Data and demand that any Personal Data that is inaccurate, incomplete, ambiguous or out of date, or whose collection, use, disclosure or storage is prohibited, be rectified, completed, updated, blocked or deleted, as appropriate.
In accordance with Article 18 of the European Regulation 2016/679, you may also, where appropriate, request to restrict access to the processing (for example, where the accuracy of your Personal Data is disputed by you - and for a period of time that allows MALYS SARL to verify the accuracy of your Personal Data, or where MALYS SARL no longer needs your Personal Data for the purposes of the processing but it is still necessary for you to establish, exercise or defend legal claims).
In accordance with Article 20 of the European Regulation 2016/679, you may also, within the limits of the technical processes used by MALYS SARL, request to receive your Personal Data, in a structured, commonly used and machine-readable format, and that it be transmitted to another data controller and this, for processing carried out using automated processes for which you have given your consent.
For all these requests, simply send an e-mail or letter to the following address:
Malys SARL
Data Protection Correspondent
17 Rue Nicolas Copernicus
For Fonlabour
81000 white
In accordance with decree no. 2007-451 of 25 March 2007 implementing the French Data Protection Act, requests must be made in writing, signed and accompanied by a photocopy of a signed identity document. The request must specify the address to which the reply should be sent. MALYS SARL will have 1 (one) month to reply after receiving your request.
For your complete information, you have the right to refer to the Commission Nationale de l'Informatique et des Libertés (whose contact details can be found at https://www.cnil.fr/fr/vous-souhaitez-contacter-la-cnil) in the event that MALYS SARL does not respond to your request within one month of your request. If necessary, this period may be extended by two months, taking into account the complexity and number of requests.