Privacy Policy

The data controller is the company SHB SAS, registered in the R.C.S. of Fort de France under the number 534 548 656 and whose registered office is located at 2 lot POINSETTAS - PETER MAILLET - 97270 SAINT ESPRIT, hereafter KADALYS.

This charter details Kadalys' privacy policy on our commercial site www.kadalys.com, hereafter the "site".

Kadalys is committed to respecting the privacy of its users browsing our site and to respecting the legal provisions in force. The information presented in this charter allows you to read the Kadalys policy concerning the confidentiality of information and personal information processed during the consultation of our site and your rights. We invite you to read it before sending us your personal data.

This personal data protection policy supplements our "Legal Notice" and our "General Terms and Conditions of Sale" relating to our site and applies to personal information and navigation data collected and processed during your visit to our site. This privacy policy may be updated by us according to changes in regulations. We invite you to consult it regularly. The latest version is permanently available on our website www.kadalys.com. For any information, you can also contact us by e-mail using the address contact@kadalys.com.

1 - DEFINITIONS

Personal data" or "Data" means any information relating to an identified or identifiable natural person.

Processing of Personal Data" shall mean any operation, or set of operations, relating to such Data, whatever the process used (collection, recording, organisation, storage, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, alignment or interconnection, blocking, erasure or destruction...).

Data controller" shall mean the person who determines the purposes and means of the processing.

Subcontractor" means the person processing personal data on behalf of the Controller, who acts under the authority of and on the instructions of the Controller.

2 - COLLECTED DATA

We may collect and process all or part of the following Data:

Information relating to your identity (in particular surname, first name, e-mail address, telephone number, data relating to your skin);
Data relating to your personal and professional life that you choose to communicate to us;
Data relating to the follow-up of your commercial relationship with Kadalys ;

We may also use cookies, which are small letter and number files downloaded to your terminal when you access our website (see cookie policy).
In all cases, we limit ourselves to collecting and processing Data that is relevant, adequate, not excessive and strictly necessary for the purposes listed below.

3 - PURPOSES OF PROCESSING AND LEGAL BASES

We collect Data for some or all of the following purposes:

General administration and improvement of our site ;
Management of your orders (orders, deliveries, invoices, etc.) necessary for the execution of a contract to which you are a party ;
Managing our relationships with our clients: loyalty program, newsletters, personalized commercial offers, promotional operations, Kadalys news, new products, invitations to events, contests...).
Market analysis and anticipation (profiles based on your browsing habits, purchasing behaviour, statistics, reporting, etc.).
Management of your specific requests (sample request, complaints, right of access to your data...) ;

Your Data is collected at several levels on our site, for example when you :

browse our site ;
create an account on our site;
place an order on our site;
subscribe to our newsletters ;
join our loyalty program;
take part in operations: contests, product tests, surveys ... ;
give your opinion on our products;
have given your consent to third parties to send us data about you;
make your skin diagnosis.

The Data collected are used on the basis of the following legal bases:

Performance of the contract: This is the legal basis applicable when the collected Data is necessary for the supply of its products by Kadalys.
Legitimate interest: Kadalys is also likely to collect Personal Data for purposes of legitimate interest, in particular when the processing takes place in the context of a commercial relationship with a client or to prevent fraud or to guarantee the security of our network and information of our computer systems. You may at any time oppose the processing of your Data on this basis.
Consent: In certain circumstances, and in particular when the legal bases mentioned above are not applicable, we are required to obtain your express consent to the processing of your Data. You may withdraw your consent at any time.

4 - DATA SHARING

The collected Data are for internal use within KADALYS and access to this Data is strictly limited to the members of KADALYS in charge of the treatment of the relationship with the customers.

Your Data may be transmitted to service providers chosen for their expertise and reliability who act on our behalf and according to our instructions, in particular to provide you with services (IT subcontractor for newsletters, customer service, etc.). We only allow these subcontractors to use your Data to the extent necessary to perform services on our behalf or to comply with legal requirements and we endeavour to ensure that your Data is protected at all times.

We require our partners, whether they are subcontractors or joint processors, to act in accordance with applicable data protection laws.

KADALYS may also disclose/transfer your Personal Data to third parties in the following special circumstances:

as a result of the law, in the context of legal proceedings, litigation and/or a request from the public authorities of your country of residence or otherwise;
if disclosure is necessary for national security, law enforcement or other public interest purposes ;
if we dispose of a business or assets, in which case we may disclose your personal data to the potential purchaser of the business or assets.

In the event that your Data is transferred outside the European Union, we ensure that :

Personal Data are transferred to countries recognised as offering an equivalent level of protection,
Personal Data is transferred to entities certified under the Privacy Shield,
For Personal Data transferred outside countries recognized by the CNIL as having a sufficient level of protection, recourse is made to one of the mechanisms ensuring appropriate guarantees as provided for by the applicable regulations, and in particular the adoption of standard contractual clauses.

Finally, given the state of technology, in particular those generally applied to telecommunications networks, we cannot guarantee the confidentiality, integrity or authentication of emails that you send to or receive from Kadalys.

5 - STORAGE PERIOD OF PERSONAL DATA

We retain your personal data for no longer than is required by applicable law or necessary for the purposes for which it was collected:

Prospect and/or customer data are kept, unless you object, for a period of three years from their collection or from the last contact. At the end of this period, we may contact you again to offer you the possibility of continuing to receive commercial solicitations. If you refuse, your data will be deleted or archived in accordance with the provisions in force.
The banking data are managed by our service providers (CIC -PAYPAL) in accordance with the provisions in force. We do not keep any bank data.
Data which serve as proof of a right or contract, or which are kept in order to fulfil a legal obligation, are archived in accordance with the applicable provisions and limitation periods.