Privacy Policy
1. Who are we?
1.1 The controller The following information is communicated to you so that you know the commitments regarding the protection of personal data made by AMI (ADVANCED MAGNETIC INTERACTION), who acts as controller for the processing of personal data referred to in this document.
1.2 Our Data Protection Officer AMI has designated a Data protection Officer whose contact details are as follows: Tristan Hautson, Advanced Magnetic Interaction, 2B avenue Pierre de Coubertin 38170 Seyssinet-Pariset France, [email protected]
2. What personal data do we process?
In the context of processing of personal data, AMI collects and processes the following data: – Via order form: surname, first name, full delivery address, phone number, email address and means of payment for order management and tracking. – List to be completed, where applicable.
3. What are the purposes and legal bases of our data processing?
We are processing data for the following purposes: – Order management and tracking; – List to be completed, where applicable
4. The legal bases of our data processing
We implement data processing only if at least one of the following conditions is met: – your consent to the processing operations has been obtained; – the existence of our legitimate interest, or that of a third party, which justifies that we implement this processing of personal data; – the execution of a contract binding us to you requires that we implement this processing of personal data; – we are subject to statutory and regulatory obligations which require this processing of personal data.
5. Who are the recipients of your data?
The personal data we collect, and those we obtained subsequently, are intended for us in our capacity as controller. We ensure that only authorized persons have access to this data. Our service providers, such as Shopify for the e-commerce website, the company Colorz/Davison Consulting that creates the WordPress website and Pontica for after-sale services, can be recipients of this data to perform the services we entrust to them. Some personal data may be sent to third parties or to legally authorized authorities in order to meet our legal, regulatory or contractual obligations. AMI (ADVANCED MAGNETIC INTERACTION) is recipient of some of your data via newsletter form: email address, surname, first name, birth date for marketing purposes, statistics production and commercial prospection. They may be communicated to these entities for the purposes referred to in this privacy policy. These operations are carried out on the basis of instruments that comply with applicable regulations and are capable of ensuring that your rights are protected and respected.
6. Do we transfer your data?
We may transfer your personal data outside the European Union. We ensure that these transfers are governed by legal instruments that comply with the applicable legal framework, i.e an adequacy decision or standard contractual clauses. These safeguards offer your personal data a level of protection equivalent to the one which is applied on the European Union territory. Personal data may be transferred to the United States. Each of these transfers is carried out on the basis of legal instruments that comply with the applicable legal framework. The recipients of these data have adhere to the Privacy Shield recognized as offering a level of protection equivalent to the one applied on the European Union territory pursuant to the decision on the adequacy of the protection provided by the EU-U.S. Privacy Shield adopted by the European Commission on 12 July 2016. Transfers made to the United States to processors who have not adhered to the Privacy Shield are governed by standard contractual clauses approved by Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council.
7. How long are we keeping your data?
The periods for which we keep your personal data are proportionate to the purposes for which your data were collected. Our data storage policy is organized as follows: – Personal data for order management and tracking: duration of the business relationship from the conclusion of the contract when the delivery of goods or the provision of service is immediate and from the conclusion of the contract until the date of delivery of goods or the provision of service otherwise.
8. What are your rights?
You acknowledge that this privacy policy provides you with information about the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data are shared and the possibility of a data transfer to a third country or international organisation. In addition to this information and with the aim of ensuring fair and transparent processing of your data, you further acknowledge that you have received additional information concerning: – the period for which your personal data will be kept; – the existence of the rights which are granted to you and the terms and conditions to exercise them. If we decide to process data for purposes other than those indicated, all information relating to those new purposes will be communicated to you.
9. Your right of access to and rectification of your data
You have the right to access and rectify your personal data, which you can exercise with Tristan Hautson, Advanced Magnetic Interaction, 2B avenue Pierre de Coubertin 38170 Seyssinet-Pariset France, [email protected].
In this respect, you have the confirmation as to whether or not your personal data are being processed and where this is the case, access to your data and the following information: – the purposes of the processing; – the categories of personal data concerned; – the recipients or categories of recipient as well as the international organisations to whom the personal data have been or will be disclosed, in particular recipients in third countries; – where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; – the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; – the right to lodge a complaint with a supervisory authority; – where the personal data are not collected from the data subjects, any available information as to their source; – the existence of automated decision-making, including profiling, and in this case, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. You can ask us to, as the case may be, rectify or complete your personal data that are inaccurate, incomplete, equivocal or expired.
10. Your right to erasure of your data
You can ask us to erase your personal data where one of the following grounds applies: – the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; – you withdraw the consent you have previously given; – you object to the processing of your personal data and there is no legal reason for such processing; – the processing of personal data does not comply with the provisions of the applicable legislation and regulations; – your personal data have been collected in relation to the offer of information society services to children under 16 years of age. Nevertheless, the exercise of this right will not be possible when the retention of your personal data is necessary for compliance with statutory or regulatory provisions and in particular for example for the establishment, exercise or defence of legal claims.
11. Your right to restriction of processing
You may request restriction of processing of your personal data in the cases provided for by law and regulation.
12. Your right to object to data processing
You have the right to object to the processing of personal data concerning you when the processing is based on the legitimate interest of the controller.
13. Your right to data portability
You have the right to portability of your personal data. The data on which this right can be exercised are: – only your personal data, which excludes anonymized personal data or data that does not concern you; – declarative personal data and personal data relating to our functioning, as mentioned above; – personal data which do not adversely affect the rights and freedoms of others such as those protected by trade secrets. This right is limited to processing based on consent or contract as well as to personal data that you have personally generated. This right does not include derived or inferred data, which are personal data created by AMI.
14. Your right to withdraw your consent
When the data processing we carry out is based on your consent, you may withdraw it at any time. We will then stop processing your personal data but this will have no impact on the previous transactions to which you have consented.
15. Your right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with the French data protection authority (the CNIL) on the French territory without prejudice to any administrative or judicial remedy.
16. How to exercise your rights?
All the rights enumerated above can be exercised by sending a request to Tristan Hautson, Advanced Magnetic Interaction, 2B avenue Pierre de Coubertin 38170 Seyssinet-Pariset France, [email protected].
Regarding the exercise of your right of information, we are not required to provide you with information where: – you already possess the information; – the recording or disclosure of your personal data is expressly laid down by law; – the provision of information to you proves to be impossible; – the provision of information to you would involve a disproportionate effort.
17. Why are your data communicated to us?
Your personal data are communicated to us: – Where applicable, to be able to manage and track your order. You are obliged to provide us with the following personal data in the order form: surname, first name, full delivery address, phone number and means of payment. In this context, if you refuse to provide us with your personal data, we will inform you that this refusal will result in the impossibility to manage your order.
