Privacy Policy.

PREAMBLE :

When browsing our website accessible at https://hello-hossy.com/ (hereinafter referred to as the « Website »), we may process personal data relating to you, and more specifically:

• The data we have collected;
  and/or
• The data you have provided us with.

By using our Website, you are subject to the current Privacy Policy and signify your acceptance of it.

This Privacy Policy may be updated at any time.

The most recent update will appear on this page along with the update date. We therefore invite you to consult it regularly.

ARTICLE 1 - DEFINITIONS :

« Personal Data »: any data relating to an identified or identifiable person.

« Data Protection Act »: French Act no. 78-17 of 6 January 1978 on data processing, files and individual liberties.

« General Data Protection Regulation » or « GDPR »: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which entered into force on 25 May 2018.

« Data Controller »: a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing.

« Website »: the website accessible at https://hello-hossy.com/   

« User »: any person who uses the Website.

ARTICLE 2 – GENERAL INFORMATION :

The Owner of the Website and the Data Controller for your Personal Data is the company HYONA GROUPE S.A.S, a simplified joint-stock company with a share capital of €1,965, registered with the RCS of DAX under number 823 918 388, whose registered office is located at 110, Avenue de Pascouaou in SOORTS-HOSSEGOR (40150) – FRANCE, hereinafter referred to as "HELLO HOSSY® ".

Contact: 

• hello@hello-hossy.com;
• Phone: 09 53 44 04 10;

As data controller, HELLO HOSSY® (hereinafter "We", "Our", "Us") collects and processes the personal data of its Users (hereinafter "You", "Your") in connection with their use of the Website.

Indeed, through our Platform, you may be asked to provide us with Personal Data, in particular when creating an account or ordering our products.

If, after giving us your consent, you change your mind and no longer consent to the use of your personal data, you may notify us by contacting us by email: hello@hello-hossy.com or by post: HELLO HOSSY®, 110 Avenue de Pascouaou, 40150 Soorts-Hossegor, France.

We may also collect certain information relating to your browsing on our Website, under the conditions described in Article 4 « Cookies and other trackers » below.

These processing activities are carried out in compliance with the provisions of French Act no. 78-17 of 6 January 1978 on data processing, files and individual liberties (the « Data Protection Act ») and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the « General Data Protection Regulation » or « GDPR »).

ARTICLE 3 – DATA COLLECTED, PURPOSES AND LEGAL BASES :

We collect the following categories of data, according to the purposes and on the basis of the legal bases set out below:

3.1 Data collected during browsing on the Website

When browsing the Website, we collect information relating to your identity (title, last name, first name, address, email) that you agree to provide us with when completing a form on the website, when creating a customer account, when placing an order or when contacting us directly. The legal basis for this processing is consent.

The data you provide us with when using our contact form is used solely to enable us to get back to you. The legal basis for this processing is consent.

We also collect volume and sorting data for technical and marketing purposes. The legal basis for this processing is contract performance.

You may also receive exclusive content (newsletter, promotions, etc.). For this purpose, we collect your email address. The legal basis for this processing is consent.

Subject to your express agreement, where you have ticked the relevant box on the data collection form or any other document, particularly any contractual document involving the collection and processing of your data, we use your data to send you information about our product and service offers. The legal basis for this processing is consent.

Furthermore, we reserve the right to gather and publish generic information relating to visitor profiles on our Website, without, however, by using an appropriate anonymisation process, disclosing any personal data such as the names and addresses of visitors. The legal basis for this processing is legitimate interest.

We may also collect statistical information to find out how visitors use the Website (frequency of visits to the various pages of the Website, sales statistics and the origin of Website visitors, etc.). The legal basis for this processing is legitimate interest.

Information relating to visitor profiles is retained and will only be used internally.

3.2. Data collected when creating a customer account

Please also note that all information you send us via letters or emails, including attachments, may contain personal data.

3.3. Data collected when placing an order

3.4. Data collected via the email tracking pixel

ARTICLE 4 – COOKIES AND OTHER TRACKERS :

4.1. Cookies collected

When you browse our website, cookie files or trackers may be stored on your computer, mobile or tablet. Cookies allow us to offer you better navigation and to improve your experience on the Website.

While browsing, cookies are placed on your device according to the choices you have previously made via the cookie management banner present on each page of our Site.

4.2. Cookie settings

With the exception of cookies ensuring the proper functioning of the Website, non-functional cookies and other trackers are subject to the User's express consent.

You can refuse all Cookies by clicking on the "refuse all" link, or select those you wish to allow by configuring them in the Cookie management module entitled "Manage your preferences".

You can also limit the use of cookies in your browser settings and choose how you manage cookies using your browser's help menu. Here is a non-exhaustive list:

• Google Chrome: https://support.google.com/chrome/answer/95647?hl=fr&hlrm=en;
• Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac ;
• Firefox: https://support.mozilla.org/fr/kb/protection-renforcee-contre-pistage-firefox-ordinateur? redirectslug=Activer+et+désactiver+les+cookies&redirectlocale=fr;
• Microsoft Edge: https://support.microsoft.com/fr-fr/windows/supprimer-et-gérer-les-cookies-168dab11-0753-043d-7c16-ede5947fc64d ;
• Opera: https://help.opera.com/en/latest/web-preferences/#cookies;
• Ecosia: https://info.ecosia.org/cookies.

Please note that our Website may not function properly if all cookies are disabled. If you delete cookies from your browser, they will again be subject to your consent when you next visit our Website.

ARTICLE 5 – RECIPIENTS OF PERSONAL DATA :

All data provided will be used by our teams to ensure you have the best possible experience on our Website.

Some of your data may be shared with our service providers within the limits of their respective remits.

• Technical service providers involved in the hosting and maintenance of the Website;
• Payment service providers, in connection with the payment of your order;
• Technical and logistics service providers, in connection with the dispatch and delivery of your order.

In this context, some recipients of your data may carry out transfers outside the European Union.

ARTICLE 6 – DATA RETENTION PERIOD :

The retention period for your personal data varies depending on the purpose for which it was collected. It will be retained for as long as necessary to fulfil the purposes for which it was collected.

However, certain personal data of administrative or legal interest will be retained beyond the period necessary to fulfil the purpose for which it was collected.

Some of your Personal Data may be retained, even if you delete your account, due to a legal obligation or for prevention purposes in the event of a dispute. Such data will be retained within the limits of the applicable statute of limitations rules.

ARTICLE 7 – YOUR RIGHTS :

In accordance with the GDPR, you have the right to exercise the following rights:

• Right of access: you may obtain confirmation as to whether or not Personal Data concerning you is being processed by HELLO HOSSY® and, where it is, access to that data;
• Right of rectification: you may ask us to rectify Personal Data concerning you where it is inaccurate or incomplete. If you have a customer account, you can access the section relating to your Personal Data to modify or update it. You must ensure that this data is true and accurate. Likewise, you undertake to inform us of any changes or amendments to this data. We also remind you that in principle you should only provide your own Personal Data and not that of a third party. Any damage or loss caused as a result of communicating inaccurate or incomplete information in our data collection forms is the sole responsibility of the User of our Platform;
• Right to erasure (or "right to be forgotten") : you may ask us to erase Personal Data concerning you if one of the grounds set out in Article 17-1 of the GDPR applies:
• Your Personal Data is no longer necessary in relation to the purposes;
• You have withdrawn your consent and there is no other legal basis justifying the continued processing of your Personal Data;
• You have validly exercised your right to object;
• The processing of your data is not lawful;
• Your Personal Data must be erased to comply with a legal obligation.
  In addition, you may delete your account via your customer account;
• Right to restriction of processing: you may restrict the processing of your data when one of the conditions set out in Article 18-1 of the GDPR is met:
• You are contesting the accuracy of your personal data, for a period enabling us to verify its accuracy;
• The processing is unlawful and you request the restriction of its use;
• We no longer need your data but you still need it to contest, exercise or defend legal claims;
• You have objected to the processing whilst verification is pending as to whether the legitimate patterns pursued by HELLO HOSSY® override yours;
• Right to object: you may object, at any time, to the processing of your Personal Data, pursuant to the terms of Article 21 of the GDPR: HELLO HOSSY® will no longer process your data, unless it can demonstrate the existence of compelling legitimate patterns for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims;
• Right to data portability : If the processing of your personal data is based on your consent or the performance of a contract, and if the processing is carried out by automated means, you will have the right to request receipt of the data concerning you in a structured, commonly used and machine-readable format, in order to be able to transfer it to another entity, provided that this is technically possible; 
• Right to define instructions regarding the fate of your data after your death.

In order to exercise your rights, you may contact us using one of the addresses below, providing proof of your identity to prevent any third party from exercising your rights over your data without your knowledge:

• Via the following email address: hello@hello-hossy.com;
• Via the following postal address: 110 Avenue de Pascouaou, 40510 Soorts-Hossegor, France.

Your request will be processed within the following timeframes:

• Maximum 1 month for a simple request;
• Maximum 3 months for a complex request. In this case, we will inform you of this extension and the patterns for the delay within one month of receiving the request.

The exercise of your rights is not subject to any payment, except in the case of manifestly unfounded or excessive requests, in particular due to their repetitive nature. HELLO HOSSY® may require the payment of reasonable fees or refuse to act on such requests.

For any complaint regarding the handling of your request by HELLO HOSSY®, you may contact the French Data Protection Authority by post (CNIL - 3 Place de Fontenoy – TSA 80715 – 75 334 PARIS CEDEX 07) or online (https://www.cnil.fr).

ARTICLE 8 - DATA SECURITY :

We implement appropriate technical and organisational measures to ensure a level of security suited to protecting your personal data against any destruction, loss, alteration, disclosure, unauthorised access or any other forms of unlawful processing.

Payment method information is encrypted through the use of the SSL security protocol and stored with AES-256 encryption.

However, as the Internet is open to all and unsecured, HELLO HOSSY® cannot guarantee the full security of your personal data stored or transmitted. Their security also relies on everyone's good practices. Therefore, we recommend in particular that you do not share your account login credentials and that you always log out of your profile after use. Furthermore, it is your responsibility to ensure that appropriate means are in place to secure your personal computer network when accessing our Platform.

While browsing, you may be led to leave our Site by clicking on a hyperlink present on the Site. The risks associated with this use are your responsibility and we recommend that you carefully read the privacy policies specific to each Site.

 ARTICLE 9 - DATA RELATING TO MINORS UNDER 15 YEARS OF AGE :

The Website is not aimed at minors. However, access to the Website is not prohibited to them as it does not contain content prohibited to minors under 18 years of age.

We do not knowingly collect information about minors under the age of 15 without the consent of the holder(s) of parental authority. Should such data be collected without our knowledge, the minor's legal representative will have the option to contact us via the email address hello@hello-hossy.com to correct, amend or delete this information.

ARTICLE 10 - AMENDMENT OF THIS DATA PROTECTION POLICY :

This Data Protection Policy may be amended at any time to reflect changes in personal data protection standards and any changes made by HELLO HOSSY® to the processing of your Personal Data.

Last updated: July 2024