Privacy Policy
(UPDATE 04/07/2022)
This privacy policy is intended to help you understand how your personal data is collected, processed and stored by Sanaflow.
The list below reproduces the different sections of this privacy policy, you can click directly on the titles below to access a specific section of this privacy policy.
1- Data controller / Contact
2- When are your personal data collected?
3- Processing of personal data carried out by Sanaflow
4- Recipients of personal data
5- How will your personal data be hosted?
6- Duration of retention of the processing of personal data
7- Exercise of legal rights
1- Data controller / Contact
This privacy policy is intended to help you understand how your personal data is collected, processed and stored by Sanaflow (hereinafter “Sanaflow”, “ we ”, “ us ” and “ our ”)), responsible for processing within the meaning of European regulations regarding the protection of personal data, Sanaflow company SAS with capital of 10,000 euros, registered in the PARIS Trade and Companies Register under number 893503516, whose head office is located at 54 rue crillon, 69006 LYON, France.
Sanaflow (Le Lab de l’Endo) can be reached via the following contact methods:
- Contact us via Sanaflow.sc@gmail.com
- By contacting us on 07 61 39 32 28
- By sending us a letter to 54 rue crillon, 69006 Lyon, France
2- Consent
When you provide us with your personal information to complete a transaction, verify your credit card, place an order, schedule a delivery or return a purchase, we assume that you consent to our collection and use for that purpose only.
If we ask you to provide your personal information to us for another reason, for example for marketing purposes, we will ask you directly for your explicit consent , or we will give you the opportunity to refuse.
If after giving us your consent, you change your mind and no longer consent to us contacting you, collecting your information or disclosing it, you can notify us by contacting us at contac@lelabdelendo.com or by mail at : SANAFLOW - 54 RUE CRILLON, 69006 LYON, France
3- When are your personal data collected?
We receive and process a certain amount of information, which may include personal data about you when you access and use our site in different ways:
- When you directly provide us with your personal data by completing a registration or contact form provided for this purpose on our site
- When you link your account on the site to an account opened on a third-party site or social network or within the limits permitted by the confidentiality settings that you have defined on this third-party site or social network.
Via the log files of our servers and via our tracking tools and technologies such as "cookies" present on our site, we track your activity and the way in which you use our site. (section below)
4- Cookies
When you browse our site and/or place an order, data may be stored in your browser or retrieved. These are cookies.
The CNIL defines a cookie as being "a small file stored by a server in the terminal (computer, telephone, etc.) of a user and associated with a web domain (i.e. in the majority of cases to the all pages of the same website). This file is automatically returned during subsequent contacts with the same domain."
In practice, we use first-party cookies. These cookies work for the proper functioning of the Endo Lab site. They allow you to memorize your information entered in the forms on our site ( example: allowing you not to re-enter your information during your use, but also to manage and secure access to your account, or to your shopping cart). purchase ) . Most of them cannot be disabled.
Here you will find a non-exhaustive list of cookies relating to the operation of our site* :
- session_id: unique session identifier, allows Shopify to store information relating to your session (referrer, landing page, etc.).
- shopify_visit: no data retained, persists for 30 minutes since the last visit. Used by our website provider's internal statistics tracking system to record the number of visits.
- shopify_uniq: no data retained, expires at midnight (depending on visitor location) the following day. Calculates the number of visits to a store per unique customer.
- cart: unique identifier, persists for 2 weeks, stores information relating to your shopping cart.
- secure_session_id: unique session identifier
- storefront_digest: unique identifier, undefined if the store has a password, it is used to know if the current visitor has access.
*SOURCE: Shopify
We also use third-party cookies (or “third-party cookies”) placed by our partners. These third-party cookies are directly managed by the companies that issue them and who must also comply with data protection regulations.
As part of the General Data Protection Regulation (GDPR) (which came into force on May 25, 2018) which is part of the French Data Protection Act of 1978 establishing rules on the collection and use of data on French territory, we systematically offer users of the Lab de l'Endo site the ability to choose the use of cookies.
You will find this module as soon as you arrive on the site:
Oppose cookies via your browser:
5- Recipients of personal data
In our capacity as data controller, we will be the first recipients of your personal data. Your data will be more specifically processed by the following personnel within Sanaflow (Le Lab de l'Endo): Sale of natural, food, non-food & cosmetic products for women
We may also share your personal data with third parties in the following situations:
- Your personal data may be communicated, if necessary, to the police authorities (on judicial requisition) or to any person legally authorized to receive this information (on court order).
6- How will your personal data be hosted?
We ensure that personal data is adequately and appropriately secured and have taken appropriate precautions to preserve and ensure that our hosting subcontractors preserve the security and confidentiality of the data and in particular prevent it from being distorted, damaged or communicated. to unauthorized persons.
Your data is hosted by Google, headquartered at 1600 Amphitheater Parkway Mountain View, CA 94043.
All personal data collected is hosted in Europe or in countries recognized by the European Commission as benefiting from adequate protection of personal data.
https://www.shopify.fr/legal/mentions-legales
7- Duration of retention of the processing of personal data
Any personal data will be destroyed immediately upon deletion of the user's account.
Your personal data will also be destroyed if you have not logged into your user account for a period of more than six (6) months.
They will then be archived on separate databases in order to meet our legal obligations for a period not exceeding five (5) years from their archiving.
8- Exercise of legal rights
In accordance with European regulations regarding the protection of personal data, you benefit from the following rights:
- A right of access allowing you at any time to know whether your personal data is or is not processed by our services and when they are, to have access to said personal data and to the information required by law concerning the terms of processing of this data,
- A right of rectification allowing you to request that any inaccuracies concerning your personal data be corrected as soon as possible,
- A right to erasure, allowing you to request that your personal data be erased as soon as possible, provided that this erasure request complies with the conditions required by applicable law,
- A right to limit the processing of your personal data, provided that this request for limitation complies with the conditions required by applicable law,
- A right to portability allowing you to receive your personal data in a structured, commonly used and machine-readable format, or to request that this personal data be transmitted to another data controller, provided that this portability request complies with the conditions required by applicable law,
- A right to object to the processing of your personal data for reasons relating to your particular situation provided that this opposition complies with the conditions required by applicable law,
- The right to withdraw at any time the specific consent given to the collection of your personal data, in particular when the processing of your personal data is used for commercial prospecting purposes,
- The right to define guidelines relating to the retention, erasure and communication of your personal data following your death.
These rights can be exercised by contacting us directly at the following email address: Contact@lelabdelendo.com or by using the following contact form: https://www.lelabdelendo.com/pages/contact. Regarding the withdrawal of your consent for commercial prospecting purposes, an unsubscribe link will also be provided in any commercial solicitation sent directly to you.
Complaints relating to the use of your personal data may also be addressed to the Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX.