English
Français
Deutsch
Italiano
Español
Nederlands
Privacy Policy
This privacy policy explains how SCENTISSIME collects, uses, stores, and protects the personal data of users of the website. https://www.scentissime.com/en/.
1. Data controller
The data controller is:
SCENTISSIME SAS
Simplified joint-stock company
Créteil Trade and Companies Register: 978 157 667
Registered office: 17 Avenue Georges Clémenceau, 94360 Bry-sur-Marne, France
Email address: [email protected]
SCENTISSIME determines the purposes and means of the data processing carried out in connection with the use of the website, the creation of an account, and the processing of orders.
2. Personal data collected
Depending on the services used, SCENTISSIME may collect the following categories of data:
• identity: title, first name and last name ;
• contact details: email address, phone number, billing address, and shipping address ;
• customer account information: username, encrypted password, preferences, and account history ;
• Order-related information: products ordered, amount, delivery method, order status, returns, and refunds. ;
• information relating to loyalty programs, referral programs, and wish lists ;
• olfactory preferences and responses provided as part of product recommendation tools ;
• communications with customer service ;
• newsletter sign-ups and communication preferences ;
• technical data: IP address, connection logs, browser, device used, and security-related information ;
• information collected through cookies and similar technologies ;
• data transmitted when using Facebook Login.
Required data is indicated as such in the forms. If no response is provided, certain services, such as account creation, delivery, or order processing, may not be available.
SCENTISSIME does not store complete bank card details. These are processed directly by the payment provider selected by the customer.
3. Purposes and legal bases of processing
The data may be processed for the following purposes:
Creation and management of the customer account:
The data is used to enable account creation, authentication, access to order history, management of addresses, wish lists, and customer benefits.
Legal basis: performance of the contract or pre-contractual measures requested by the user.
Order processing and delivery:
The data is used to record orders, process payments, arrange delivery, manage returns, refunds, after-sales service, and issue invoices.
Legal basis: performance of the contract and compliance with legal accounting and tax obligations.
Payment and fraud prevention:
The data necessary for payment and securing transactions may be transmitted to payment service providers and fraud prevention tools.
Legal basis: performance of the contract and SCENTISSIME’s legitimate interest in securing transactions and preventing fraudulent use.
Customer service:
The information provided is used to respond to questions, requests, complaints, and support requests.
Legal basis: performance of the contract, pre-contractual measures, or SCENTISSIME’s legitimate interest in ensuring the quality of its customer service.
Personalized recommendations:
The user's responses and olfactory preferences may be used to suggest perfume or product recommendations.
These recommendations do not produce any legal effect and do not result in any decision that has a significant effect on the user.
Legal basis: performance of the service requested by the user or SCENTISSIME’s legitimate interest in personalizing its offer.
Newsletter and marketing communications:
When the user has given consent, their email address is used to send them information about SCENTISSIME’s new products, offers, brands, and news.
Legal basis: consent.
The user may withdraw their consent at any time by clicking the unsubscribe link included in each message.
Site security:
Technical data and connection logs may be used to protect the site, detect malicious activity, combat attacks, bots, fraud, and attempts at unauthorized access.
Legal basis: SCENTISSIME’s legitimate interest in ensuring the security of its services.
Audience measurement and advertising cookies:
Subject to the user’s consent, cookies may be used to measure site usage, improve its performance, and personalize content or advertising campaigns.
Legal basis: consent.
4. Sign in with Facebook Login
SCENTISSIME allows users who wish to do so to create an account or log in using their Facebook account.
When the user selects Facebook Login, Meta may transmit certain information to SCENTISSIME, depending on the permissions granted, including:
• a Facebook user ID specific to the application ;
• the first and last name associated with the Facebook account ;
• public profile information ;
• profile photo ;
• the email address, only when this authorization is requested and granted.
This information is used exclusively for:
• authenticate the user ;
• create or recover your SCENTISSIME customer account ;
• make it easier to connect to the site ;
• secure the authentication process.
SCENTISSIME never receives or stores the user's Facebook password.
Using Facebook Login is optional. The user can also create a SCENTISSIME account and log in with an email address and password.
Meta Platforms Ireland Limited also processes certain data in accordance with its own privacy policy. Users are invited to consult Facebook’s settings and privacy policy for further information.
5. Deletion of data associated with Facebook Login
The user can revoke the authorization granted to SCENTISSIME from their Facebook account:
1. open their Facebook account settings ;
2. go to the “Apps and websites” section ;
3. Select the SCENTISSIME application ;
4. Choose the option to delete or remove the application.
Removing the application from Facebook prevents future logins via that method, but does not automatically delete the customer account or the data already stored by SCENTISSIME.
To request the deletion of data received via Facebook Login or the deletion of the SCENTISSIME account, the user may write to: [email protected].
The request must specify the email address associated with the SCENTISSIME account. It will be processed as soon as possible and, in principle, within a maximum period of one month.
Data that must be retained in compliance with a legal obligation, in particular invoices and information relating to orders, will be placed in restricted archives for the legally required period.
6. Recipients and service providers
The data is accessible only to authorized persons within SCENTISSIME and to service providers involved in delivering the requested services.
These recipients may include, in particular:
• Infomaniak, for hosting the website and its data ;
• Cloudflare, for content delivery, performance, and protection of the site against attacks ;
• Meta Platforms Ireland Limited, as part of Facebook Login ;
• Stripe and/or PayPal, depending on the selected payment method ;
• the carriers and logistics service providers responsible for delivery ;
• email and newsletter service providers ;
• the technical service providers responsible for the maintenance and security of the site ;
• audience measurement or advertising service providers, only when the user has consented to it ;
• administrative or judicial authorities when required by a legal obligation.
These service providers are only authorized to use the data to the extent necessary to perform their services or in accordance with their own legal obligations.
SCENTISSIME does not sell its users' personal data.
7. International transfers
Some service providers, including Cloudflare, Meta, Stripe, or PayPal, may process data from countries located outside the European Economic Area.
When such transfers take place, they are governed by the safeguards provided for by the applicable regulations, such as:
• an adequacy decision of the European Commission ;
• the European Commission’s standard contractual clauses ;
• or any other legally recognized mechanism ensuring an appropriate level of protection.
8. Retention periods
The data is retained only for the period necessary for the purposes for which it was collected.
For reference:
· Customer account data: during use of the account, then for up to three years after the last activity or last contact ;
· data relating to orders and invoices: ten years from the end of the relevant financial year ;
· payment data: processed by the payment service provider according to its own retention periods ;
· Prospect data and newsletter: until consent is withdrawn or for three years after the last active contact ;
· requests sent to customer service: during the processing of the request, then for up to three years ;
· technical logs and security data: up to twelve months, unless a longer retention period is necessary due to an incident ;
· Data obtained through Facebook Login: for the duration of account use, until authorization is withdrawn or a deletion request is made ;
· Cookies and trackers: for the periods indicated in the cookie management tool, within the limits permitted by regulations.
At the end of these periods, the data are deleted, anonymized, or placed in restricted archives when a legal obligation requires their retention.
9. Cookies
The site uses cookies and similar technologies necessary for its operation, in particular to:
• maintain the user’s session ;
• save the cart and preferences ;
• secure the connection and payment ;
• allow the use of the requested features.
With the user’s consent, other cookies may be placed for:
• measure the site's audience and performance ;
• analyze navigation ;
• customize the content ;
• measure or personalize advertising campaigns.
The user can accept, refuse, or customize cookies from the banner or the cookie management tool available on the site. Refusing non-essential cookies does not prevent access to the site's main features.
Consent may be withdrawn at any time as easily as it was given.
10. User rights
In accordance with the applicable regulations, each user has, depending on the situation, the following rights:
• right of access to one’s data ;
• right to correct inaccurate or incomplete data ;
• right to erasure ;
• right to restriction of processing ;
• right to object ;
• right to data portability ;
• the right to withdraw consent at any time ;
• the right to define instructions regarding the fate of their data after their death.
To exercise these rights, the user may contact SCENTISSIME:
By email: [email protected]
By postal mail:
SCENTISSIME SAS
Data Protection Service
17 Georges Clémenceau Avenue
94360 Bry-sur-Marne
France
To protect the data concerned, SCENTISSIME may request information to verify the identity of the requester. A copy of proof of identity will only be requested in the event of reasonable doubt as to their identity.
SCENTISSIME will respond to the request within the time limits provided by the regulations.
If the user believes that their rights are not being respected, they may file a complaint with the French Data Protection Authority (CNIL):
CNIL
3 Place de Fontenoy – TSA 80715
75334 Paris Cedex 07
11. Data Security
SCENTISSIME implements appropriate technical and organizational measures to protect personal data against:
• unauthorized access ;
• disclosure ;
• alteration ;
• loss ;
• destruction ;
• or fraudulent use.
These measures include, in particular, encryption of communications, access control mechanisms, network security devices, backups, and monitoring of security events.
No computer system can guarantee absolute security, so SCENTISSIME regularly adapts its protective measures according to risks and technological developments.
12. Changes to the policy
SCENTISSIME may modify this policy to take into account legal, regulatory, technical, or functional changes to the site.
The date of the latest update appears at the top of this page. When the changes are significant, users may be notified by a message on the website or by email.
13. Contact
For any questions regarding this policy or the processing of personal data:
SCENTISSIME SAS
17 Georges Clémenceau Avenue
94360 Bry-sur-Marne
France
Email address: [email protected]
