Privacy policy

This English translation is provided for information purposes only. In the event of any discrepancy, the French version shall prevail.

LABORATOIRES PHYT’S PERSONAL DATA PROTECTION CHARTER

When you browse our site, you may send us personal data, directly or indirectly. Your personal data is precious: it is part of your private life. That is why we undertake to collect, use and keep it under conditions that ensure its protection and confidentiality, in accordance with the laws in force.

We invite you to read this Personal Data Protection Charter (hereinafter “the Charter”) carefully.
You will find in it all the information about the data we collect, how we use it, how long we keep it, the measures we take to protect it, the rights you have, etc.
Our Personal Data Protection Charter may be updated or modified as our tools and the regulations evolve. We therefore invite you to consult it regularly.

I. What data does the Charter cover?

This Personal Data Protection Charter applies to all personal data that you send us, directly or indirectly, when browsing our site (hereinafter “phyts.com”).
“Personal data” is information that directly or indirectly identifies a natural person. It includes, for example, your name, email address and telephone number, but also data relating to your consumption habits, your skin type, etc.

II. Who is the data controller?

The law defines the data controller as the company that determines the purposes and conditions of the collection and use of your data. It is the company Laboratoires PHYT’S, with share capital of 1,451,000 euros, registered with the Trade and Companies Register under number 493 447 494, whose registered office is located at La Bouygue, 46140 Caillac, France.

III. What is the legal basis for our processing of personal data?

The personal data processing we carry out in the course of our activity may have several legal bases:

• Legitimate interest: we need to collect your personal data to get to know you better in order to offer you personalised offers and services, ensure the security of our Site, improve our content, etc.
• Performance of a contract: collecting your data is necessary when you sign up for one of our online services (creating an account in our loyalty programme, taking part in a promotional offer, etc.)
• Your consent: the law requires us to obtain your consent to collect or use your data.

This is the case, for example, when we collect data relating to your health or ethnic origin in order to recommend suitable products (e.g. skin problems revealing a condition, skin colour, etc.), or when we wish to send you marketing communications (e.g. information about our products) by email or by SMS/MMS.

IV. Why do we collect your personal data?

We collect your personal data only when necessary, for explicit, legitimate and specified purposes.
We therefore collect and process your personal data in particular to:

• send you information about your order (tracking, delivery, etc.);
• improve the operation and content of our Website and services, in order to better meet your needs and requests;
• gather your opinion on our products and services;
• carry out audience analyses and statistical studies, for example to measure the number of visits to our Site, visitors’ activity and journeys on our Site, the subscription rate to our services, etc.;
• carry out satisfaction surveys on our products and services;
• detect fraudulent behaviour and manage disputes;
• ensure the security of our site and services.

V. What data is collected, when, and how long is it kept?

We respect the principle of data minimisation. This means that we only collect the data strictly necessary to achieve our purposes.

Data may be collected:

• either directly from you, for example when you fill in our data collection forms on our Site (e.g. when placing your order);
• or indirectly or automatically, for example when you browse our Site.

In our data collection forms, fields marked with an asterisk are mandatory.
Failure to answer will prevent or compromise the provision of the services concerned.

We set the retention period of your data according to the time needed to achieve the purposes of the collection. Once our purposes have been achieved, we delete your data, except in certain cases where the law requires us to keep it. In such cases, your data is archived under the conditions provided for by law.
The table below shows when your data is collected, what data is collected and how long it is kept:

VI. How do we collect data from minors?

Our site is accessible to everyone, adults and minors alike.
However, the additional consent of the holder of parental authority is required for minors under fifteen who sign up for our services or send us personal data about themselves.

VII. Who receives your data?

We may pass on your data to the following companies or persons, who are involved in achieving the purposes described in section IV above:

• Google, to measure audience on our Site;
• administrative or judicial authorities, at their request.

We choose subcontractors, service providers and suppliers who offer sufficient guarantees to ensure the protection, security and confidentiality of your personal data, in particular by implementing appropriate technical and organisational measures that meet the requirements of the law. They are only authorised to process your data in accordance with our instructions.

We do not sell or transfer your data to any commercial companies other than those mentioned above.

VIII. How do we keep your data secure?

Laboratoires PHYT’S undertake to implement reasonable means to ensure that your personal data is adequately protected, taking into account the sensitive nature of some of the information collected. We use several technologies and procedures to protect your data against unauthorised access, use or disclosure. We require an equivalent level of security from our subcontractors.
For example, we or our subcontractors store your data on computer servers located in controlled places with restricted access. Unfortunately, the total security of data transmission over the Internet cannot be guaranteed. We therefore cannot fully guarantee the security of the data you send us electronically.

IX. Where do we store your data?

Our company and our subcontractors process and store your data only in member states of the European Union.

X. How can you exercise your rights?

In accordance with the laws in force, you have:

• a right of access to data concerning you;
• a right to rectify your data;
• a right to erasure of your data, on legitimate grounds;
• the right to object to the processing of your data, on legitimate grounds;
• the right to withdraw your consent to the processing of your data;
• a right to restriction of processing;
• the right to data portability;
• the right to object to direct marketing;
• the right to give instructions concerning the storage, deletion and communication of your personal data after your death;
• the right to lodge a complaint with the CNIL (the French data protection authority).

You can exercise these rights at any time by writing to: Service Consommateurs Laboratoires PHYT’S – ZAC des Grands Camps, 46090 Mercuès, France, or by sending us a message via our contact form.

XI. How can you contact the DPO?

LABORATOIRES PHYT’S have appointed a Data Protection Officer (DPO), who can be contacted at: contact@jerodia.fr