Privacy policy

The person in charge of the processing is the company SHB SAS, registered in the R.C.S of Fort de France under the number 534 548 656 and whose head office is located at 2 lot POINSETTAS - PETER MAILLET - 97270 SAINT ESPRIT, hereafter KADALYS.

The present charter details the policy of Kadalys regarding the protection of privacy on our commercial site www.kadalys.com, hereafter the "site".

Kadalys is committed to the respect of the privacy of its users browsing our site and to the respect of the legal provisions in force. The information presented in this charter allows you to know the policy of Kadalys concerning the confidentiality of the personal information processed during the consultation of our site and your rights. We invite you to read it before giving us your personal data.

This privacy policy complements our "Legal Notice" and "Terms and Conditions of Sale" for our site and applies to personal information and navigation data collected and processed during your visit to our site. This privacy policy may be updated by us as regulations change. We invite you to consult it regularly. The latest version is permanently available on our website www.kadalys.com. For any information, you can also contact us by e-mail using the address contact@kadalys.com.

1 - DEFINITIONS

Personal Data" or "Data" means any information relating to an identified or identifiable individual.

Processing of Personal Data" means any operation, or set of operations, relating to such Data, regardless of the process used (collection, recording, organization, storage, adaptation, modification, consultation, use, communication by transmission, dissemination or any other form of provision, reconciliation or interconnection, blocking, deletion or destruction, etc.).

Data controller" means the person who determines the purposes and means of the processing.

Processor" means the person processing personal data on behalf of the Controller, who acts under the authority of the Controller and on the instructions of the Controller.

2 - COLLECTED DATA

We may collect and process all or part of the following Data:

• Data relating to your identity (in particular name, first name, e-mail address, telephone number, data relating to your skin);

• Data related to your personal and professional life that you choose to communicate to us;

• Data related to the follow-up of your commercial relationship with Kadalys;

We may also use cookies, which are small files of letters and numbers downloaded to your terminal when you access our website (see cookie policy).
In all cases, we limit ourselves to collecting and processing Data that is relevant, adequate, not excessive and strictly necessary to achieve the purposes listed below.

3 - PURPOSES OF PROCESSING AND LEGAL BASES

We collect Data for all or part of the following purposes:

• General administration and improvement of our site;
• Management of your orders (orders, deliveries, invoices, etc.) necessary for the execution of a contract to which you are party;

• Management of our relations with our customers: loyalty program, newsletters, personalized commercial offers, promotional operations, Kadalys news, new products, invitations to events, contests...).

• Market analysis and anticipation (profiles from your browsing habits, purchasing behaviors, statistics, reporting, ...).

• Management of your specific requests (sample request, complaints, right of access to your data...);

Your Data is collected at several levels on our site, for example when you :

• browse our site ;
• create an account on our site;
• place an order on our site;
• subscribe to our newsletters;
• join our loyalty program;
• take part in our operations: contests, product tests, surveys ... ;
• give your opinion on our products;
• have given your consent to third parties to transmit data about you to us;

• carry out your skin diagnosis.

The Data collected is used on the following legal basis:

• Performance of the contract: This is the legal basis applicable when the Data collected are necessary for the supply of its products by Kadalys.
• Legitimate interest: Kadalys may also collect Personal Data for legitimate interest purposes, in particular when the processing takes place within the framework of a commercial relationship with a client or to prevent fraud or to guarantee the security of our network and of the information of our computer systems. You may object to the processing of your Data on this basis at any time.

• Consent: In certain circumstances, and in particular where the legal bases mentioned above are not applicable, we are required to obtain your express consent to process your Data. You may withdraw your consent at any time.

4 - DATA SHARING

The Data collected are for internal use within KADALYS and access to these Data is strictly limited to the members of KADALYS in charge of the treatment of the relationship with the customers.

Your Data may be transmitted to service providers chosen for their expertise and reliability who act on our behalf and according to our instructions, in particular to provide you with services (IT subcontractor for newsletters, customer service, etc.). We will only allow these contractors to use your Data to the extent necessary to perform services on our behalf or to comply with legal requirements and we will endeavour to ensure that your Data is protected at all times.

We require our partners, whether they are subcontractors or co-controllers, to act in accordance with the applicable Data protection laws.

KADALYS may also disclose/transfer your Personal Data to third parties in the following specific circumstances:

• by law, in connection with legal proceedings, litigation and/or a request from public authorities in your country of residence or otherwise;

• if disclosure is necessary for national security, law enforcement or other public interest purposes;

• if we are in the process of disposing of a business or assets, in which case we may disclose your personal data to the prospective purchaser of that business or assets.

In the event that your Data is transferred outside the European Union, we ensure that :

• Personal Data is transferred to countries recognized as offering an equivalent level of protection,

• Personal Data is transferred to entities certified under the Privacy Shield,

• For Personal Data transferred outside countries recognized by the CNIL as having an adequate level of protection, recourse is made to one of the mechanisms ensuring appropriate safeguards as provided for by the applicable regulations, and in particular the adoption of standard contractual clauses.

Finally, given the state of technology, in particular those generally applied to telecommunications networks, we cannot guarantee the confidentiality, integrity or authentication of e-mails you send to or receive from Kadalys.



5 - DURATION OF STORAGE OF PERSONAL DATA

We keep your personal data for a period of time that does not exceed the period of time required by the applicable law or necessary for the purposes for which they were collected:

• The prospective customers and/or clients' data are kept, unless you object, for a period of three years from their collection or last contact. At the end of this period, we may contact you again to offer you to continue receiving commercial solicitations. In case of refusal on your part, your data will be deleted or archived in accordance with the provisions in force.

• Banking data are managed by our service providers (CIC -PAYPAL) in accordance with the provisions in force. We do not store any banking data.

• The data allowing to establish the proof of a right or a contract, or preserved under the respect of a legal obligation are archived in accordance with the provisions and the prescription periods in force.