PRIVACY POLICY
WEBSITE
https://www.merlinskateboards.com/
ARTICLE 1: PREAMBLE
This privacy policy applies to the website: https://www.merlinskateboards.com/.
The purpose of this privacy policy is to inform users of the site about:
-
How their personal data is collected and processed. Personal data refers to any information that can identify a user, such as first and last name, age, mailing address, email address, user location, or IP address.
-
Users' rights regarding this data.
-
Who is responsible for the processing of the personal data collected and processed.
-
To whom this data is transmitted.
-
The site's cookie policy, if applicable.
This privacy policy complements the legal notices and the General Terms and Conditions of Sale, which users can access at the following address: https://www.merlinskateboards.com/
ARTICLE 2: GENERAL PRINCIPLES FOR DATA COLLECTION AND PROCESSING
In accordance with Article 5 of European Regulation 2016/679, the collection and processing of users' data follow these principles:
-
Lawfulness, fairness, and transparency: Data is only collected and processed with the user's consent. Whenever personal data is collected, the user will be informed of the reasons for the collection.
-
Limited purposes: Data collection and processing are carried out to meet one or more specific objectives outlined in the General Terms of Use.
-
Data minimization: Only the data necessary for the site's objectives is collected.
-
Time-limited data retention: Data is kept for a limited period, about which the user is informed. If the retention period cannot be communicated, users are informed about the criteria used to determine it.
-
Integrity and confidentiality: The data controller commits to ensuring the integrity and confidentiality of the data collected.
To be lawful, under Article 6 of European Regulation 2016/679, the collection and processing of personal data may only occur if they meet at least one of the following conditions:
-
The user has expressly consented to the processing.
-
The processing is necessary for the performance of a contract.
-
The processing complies with a legal obligation.
-
The processing is necessary to safeguard the vital interests of the data subject or another natural person.
-
The processing is necessary for the performance of a task carried out in the public interest or the exercise of official authority.
-
The processing is necessary for the legitimate interests pursued by the controller or a third party.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING SITE NAVIGATION
A. Data Collected and Method of Collection
The personal data collected on the site https://www.merlinskateboards.com/ includes:
-
Name, first name
-
Mailing address
-
Email address
-
Bank details (when making a purchase)
This data is collected when the user performs one of the following actions on the site:
-
Subscribes to the site's newsletter.
-
Makes a purchase on the site.
-
Leaves a comment on a product purchased from MERLIN SKATEBOARDS.
In addition, when making a payment, the website stores a record of the transaction, including the order form and the invoice.
The data controller will retain the data collected for three years in the site's systems, under reasonable security conditions.
Data collection and processing serve the following purposes:
-
Offering personalized deals and keeping users updated with new information about MERLIN SKATEBOARDS.
-
When making a purchase, the data is collected to create an invoice and order form for the buyer.
The legal basis for data processing is:
-
Contract performance.
-
User consent.
-
Legal obligations.
B. Transmission of Data to Third Parties
Personal data collected by the site is not transmitted to any third parties and is only processed by the site publisher.
C. Data Hosting
The website https://www.merlinskateboards.com/ is hosted by WIX, whose headquarters are located at the following address: 1 Grant’s Row, Dublin 2 D02HX96, Ireland. They can be contacted by phone at (+1) 415 358 0857.
All collected data is hosted and processed exclusively in France.
ARTICLE 4: DATA CONTROLLER
A. The Data Controller
The person responsible for processing personal data is MERLIN SKATEBOARDS. They can be contacted as follows: +33 7 49 90 02 28.
The data controller determines the purposes and means for processing personal data.
B. Obligations of the Data Controller
The data controller commits to protecting the collected personal data, not transmitting it to third parties without informing the user, and respecting the purposes for which the data was collected.
The data controller also commits to notifying the user if the data is rectified or deleted unless this would involve disproportionate procedures or costs.
If the user's personal data integrity, confidentiality, or security is compromised, the data controller commits to informing the user by any means.
ARTICLE 5: USER RIGHTS
Under the regulations on personal data processing, the user has the following rights. To exercise these rights, the user must provide their full name, email address, and, if relevant, account or subscriber number.
The data controller must respond to the user within 30 days.
A. User Rights Regarding Data Collection and Processing
a. Right of Access, Rectification, and Erasure
The user can review, update, modify, or request the deletion of their data by following the process outlined below:
The user must send an email to the data controller, specifying their request to the contact email provided.
If applicable, the user may also request the deletion of their personal account as follows:
The user must send an email to the data controller. The request will be processed within 10 working days.
b. Right to Data Portability
The user has the right to request the transfer of their personal data to another site by following the process below:
The user must request data portability by sending an email to the data controller.
c. Right to Restriction and Objection to Data Processing
The user has the right to request a limitation on or oppose the processing of their data by the site, without the site being able to refuse, unless there are legitimate and compelling reasons that prevail over the user's rights and freedoms.
To request a limitation or object to data processing, the user must send an email to the data controller.
d. Right Not to Be Subject to Automated Decision-Making
In accordance with Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision produces legal effects concerning them or significantly affects them.
e. Right to Define the Fate of Data After Death
The user is reminded that they can determine what should happen to their data after their death, in accordance with Law No. 2016-1321 of October 7, 2016.
f. Right to File a Complaint with the Supervisory Authority
If the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if they believe one of their rights has been violated, they are entitled to file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr) or any competent judge.
B. Personal Data of Minors
Under Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or older may consent to the processing of their personal data.
If the user is under 15, the consent of a legal representative will be required for the collection and processing of personal data.
The site publisher reserves the right to verify by any means that the user is over 15 or that they have obtained the consent of a legal representative before browsing the site.
ARTICLE 6: USE OF COOKIES
The site may use "cookies."
A "cookie" is a small file (less than 4 KB) stored by the site on the user's hard drive, containing information related to their browsing habits.
Cookies help to process statistics, manage traffic, simplify navigation, and improve service quality for user comfort.
For cookies that involve storing and analyzing personal data, the user's consent is required.
This consent is considered valid for six months. After this period, the site will request the user's consent again to save cookies.
a. User Opposition to Cookie Use
Non-essential cookies will only be stored on the user's device after obtaining consent. The user can withdraw consent at any time.
More generally, the user is informed that they can oppose the use of cookies by configuring their browser.
b. Description of Cookies Used by the Site
The site uses the following cookies:
- XSRF-TOKEN
- hs
- svSession
- SSR-caching
- _wixCIDX
- _wix_browser_sess
- consent-policy
- smSession
- TS*
- bSession
- fedops.logger.X
- wixLanguage
ARTICLE 7: CHANGES TO THE PRIVACY POLICY
This privacy policy may be consulted at any time at: https://www.merlinskateboards.com/politique-de-confidentialité.
The site publisher reserves the right to modify this policy to ensure compliance with the law.
The last update to this privacy policy was on: 01/01/2024.