Privacy Policy
This version is in force since August 1st, 2023.
The terms ”Espoir”’ or ”us” or ”we” refer to the owner of the website whose name is L’ATELIER ESPOIR S.R.L. and is a limited liability company headquartered in Cluj-Napoca, Giordano Bruno Street, No. 13, Cluj County, Romania, registered at the Trade Registry from Cluj-Napoca, under the number J12/6070/2022, ROONRC.J12/6070/2022, sole identification code 46922661.
This Privacy Policy sets out how ESPOIR uses and protects any information that you submit to ESPOIR when you use the website (www.espoirlatelier.com).
With this in mind, we’re providing this Privacy Policy to explain our practices regarding the collection, use, safety and disclosure of information that we receive through our Services. It applies to any Espoir web or mobile view where this Privacy Policy appears.
Therefore, we are particularly concerned and act with the utmost diligence when processing your personal data, in accordance with the principles provided by the data protection legislation applicable in Romania, including the provisions of the General Data Protection Regulation 2016/679/ EU regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“RGPD”).
Personal data means any information relating to an identified or identifiable natural person, and an identifiable person is that person who can be identified directly or indirectly, in particular, by reference to an identifier or to one or more specific factors for its physical, physiological, mental, economic, cultural or social identity.
The purpose of this policy is the confidentiality of the personal data of the Website users.
What personal data do we collect?
We collect and process in this context only the data that is required to allow us to provide our services to you, We collect, process and retain personal information from you and any devices you may use when you navigate to www.espoirlatelier.com web or mobile view, by transacting, by registering an account or by participating in promotional activity and otherwise interacting with us but also personal data collected automatically, respectively personal data collected through cookie technology and Google Analytics. We may also collect personal information from you if you physically enter one of our stores or attend an event.
By registering and/or submitting personal information on our website, you are also agreeing to the use of this information in accordance with this Privacy Policy. Your personal information is not used for other purposes, unless we obtain your permission, or unless otherwise required or permitted by law or professional standards.
We collect the following data when you browse or shop at www.espoirlatelier.com:
• We process the personal data required to complete and dispatch your purchase, including your name, billing address, delivery address, payment details, mobile number, telephone number and email address. We collect your email address in order to send you confirmation of your order; we collect your telephone number so that we can contact you if there are any issues with the order.
• We collect your email address when you sign up to receive Espoir Newsletter.
• If you register for a Espoir account, we collect your name, email address, password, country, day and month of birth and additional information regarding your favorite styles and your marketing preferences.
• When you contact our Customer Care team, we may collect additional data to help us resolve any queries relating to your order, delivery, payments, marketing, the website or any other queries.
• We collect and process data about your browsing on www.espoirlatelier.com, including the pages you visit and how you interact with these pages. If you have registered for an account, we collect browsing data about your access to the dedicated areas of the website. This is so we can optimize and personalize your experience with us. Content we generate via machine learning algorithms as they apply to personalizing your experience by curating more specifically the items you have an interest in, as well as supporting general service optimization including bid / markdown automation
• If you are a customer of www.espoirlatelier.com, or if you have given us your consent, we collect and process your personal data for direct marketing activities.
• If you provide us with someone else’s data – for example, if you purchase a product to be delivered to a friend or as a gift we will collect and process the personal data required to complete the transaction such as the name, delivery address and other contact details for your friend. If you are receiving an item as a gift, we will process your data only to fulfil the gift request and our contractual obligations.
• When you call our Customer Care team, your call may be recorded for training and fraud prevention purposes.
• Device identifiers such as IP addresses, cookie IDs, IDFAs and other device identifiers, as well as geo location information, IoT technologies and connection information such as statistics on your page views, traffic to and from the sites, referral URL, ad data, your browsing history, hashed email addresses, and your web log information.
Espoir respect confidentiality in these matters:
• take appropriate measures to protect your personal data;
• provide a transparent process of information collection;
• manage all the information with responsibility and professionalism;
• ensure the accuracy and updating of personal data;
• limit the access to personal data disclosure;
• process your personal data only under an agreement by your side or in accordance with the legislation in order to comply with contractual obligations and the maintenance of contractual relationship;
• respect your decision regarding the collection, use and sharing of your personal information
DURATION OF PROCESSING
Espoir keeps your personal data for a period of a limited period of time, in accordance with our internal policies, but also with other relevant legal provisions. After the expiration of the storage period, our data will be permanently erased or otherwise irreversibly rendered anonymous.
Your personal data are retained in accordance with the following criteria:
When you have purchased goods from www.espoirlatelier.com , we will retain the billing data until the end of the relevant accounting period, normally seven years from the billing date;
When you make a payment, we will retain your payment details up to the certification of the payment and the completion of the relevant administrative-accounting formalities regarding your right of withdrawal and the terms applied for the disputing of the payment;
When you provide us with personal data in order to use the services of www.espoirlatelier.com, such as marketing communications subscription, we will keep your data for this purpose until the termination of the service or until you cancel your subscription to the service;
When you give us your consent to send you marketing communications, you can withdraw your consent at any time. We will consider your consent to be current for five years from your last interaction with any email that we send you, or with www.espoirlatelier.com
When we use your personal data and browsing history to analyze your behavior in order to customize the website and to show you personalized sales offers, we will keep the data for analytical purposes until you ask us to delete it;
When we use personal data for market research and satisfaction surveys, we will keep the data until you ask us to stop.
When you contact our Customer Care team, we will keep any additional personal data you provide that is specific to your enquiry for as long as you remain an active customer of www.espoirlatelier.com
When you contact our Customer Care team, we will keep the call recording for 6 months. Credit card details are not recorded as part of the call.
HOW DO WE USE THE PERSONAL DATA WE COLLECT AND PURPOSE OF COLLECTING
Espoir collects your personal data for the following purposes:
• to fulfil our contract with you, including taking payment, shipping and delivery;
• to evaluate and improve the shopping experience;
• to process your orders or the returns, including sending e-mails and/or text messages to inform you of the status of delivery/refund;
• to manage your account;
• to send commercial information by e-mail, to inform you about new products and services, newsletters and catalogs, offers and news related to the website and/or Espoir in general and / or Espoir partners.
• to monitor website traffic and also to improve the e performance of our website and our promotion of the website;
• to allow our Customer Care team to help you with queries and requests;
When you purchase something from our store, as part of the buying and selling process, we collect the personal information mentioned above. and store them for a limited period of time.
CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting and using of data for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity refuse.
Your obligations in case of registration on our website is to provide true, accurate, current and complete information about yourself as prompted by the service`s registration form, maintain and promptly update the registration data to keep it true, accurate, current and complete. If you provide any information that is untrue, inaccurate, not current or incomplete, Espoir has the right to suspend or terminate your account and refuse any and all current or future use of its services.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at contact@espoirlatelier.com or mailing us at: Espoir L’Atelier, Cluj-Napoca, Giordano Bruno Street, No. 13, Cluj County, Romania.
RIGHTS REGARDING YOUR PERSONAL DATa
As a data subject, the GDPR gives you a number of rights, such as:
• the right of access – which allows you to obtain a confirmation of whether your personal data is being processed by us and, if so, relevant information regarding data processing activities. In some cases, you may ask us to provide you with a copy of your personal data that we process;
• the right to rectification – which allows you to correct your personal data, if it is inaccurate;
• the right to delete personal data (the right to be forgotten)– which allows you to have your personal data deleted, except where the law provides otherwise. You can make such a request at any time, and Espoir will evaluate the possibility of resolving your request, taking into account the legal rights and obligations according to which we may need to retain such data.
• the right to restriction of processing – which allows you to obtain the restriction of the processing of your personal data in certain cases (for example, in the situation where you dispute the accuracy of the personal data, for a period that allows us to verify the correctness of the data);
• the right to object – which allows you to object to the processing of your personal data under the conditions and limits provided by law;
• the right to data portability – which allows you to receive your personal data that you have provided to us in a structured, commonly used and computer-readable format or to transmit this data to another data controller .
• the right to withdraw your consent at any time: which allows you to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out based on consent granted prior to receipt of withdrawal.
In addition, you also benefit from the right to file a complaint with the National Authority for the Supervision of Personal Data Processing, but also with the courts.
You can exercise these rights by sending a written request, either in hard format, to L’ATELIER ESPOIR S.R.L., headquartered in Cluj-Napoca, Giordano Bruno Street, No. 13, Cluj County, Romania, with the mention Data Protection, either in electronic form, to the e-mail address contact@espoirlatelier.com, with the subject Data Protection.
Espoir will respond to your request as soon as possible, but no later than 1 month after receiving it. This period can be extended by 2 months when necessary, taking into account the complexity and number of requests.
DISCLOSURE
Your personal data will be processed by the internal staff of Espoir who have been specifically trained and authorized for this processing.
In order to fulfil the processing purposes, Espoir may disclose certain or all categories of personal data to some or all of the following categories of recipients: representatives of Espoir, contractual partners, companies from the same group, employees, collaborators.
Under some circumstances we may be required to disclose or share your data without your consent, for example if we are required by the police, the courts or for other legal reasons. Your data may be transmitted to the police, judicial and administrative authorities, in accordance with the law, for the investigation and prosecution of crimes, the prevention of and protection from threats to public security, to allow Espoir to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
DISCLOSURE FOR PAYMENT PURPOSE
If you choose a direct payment gateway to complete your purchase, then we store also your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
THIRD-PARTY SERVICES
Espoir may provide your personal information to other companies that are in partnership, but only under a confidentiality commitment on their part, which ensures that data is kept secure and that the provision of personal information is in accordance with the legislation in force, as follows: marketing service providers, delivery, payment or banking services, telemarketing or other services providers, other companies with which we can develop joint programs on the market offering our products and services, insurers, social media organizations; companies specializing in market research and data processing; companies offering contact center services; companies providing publishing and distribution services. Your personal information may be also provided to the prosecution, police, courts, and other authorities of the state, under and within the law and following specific requests made. Also, your personal information may be transferred abroad, including in countries which do not ensure an adequate level of protection. In all cases, Espoir will try to ensure an adequate protection of data transferred.
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
We protect your personal data with specific technical and organizational security measures aimed at preventing your personal data from being used illegitimately or fraudulently.
In particular, we use security measures that guarantee: pseudonymization or encryption of your data; the confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. Furthermore, Espoir undertakes to test, verify and regularly evaluate the effectiveness of technical and organizational measures in order to guarantee continuous improvement in the safety of processing.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
Some of the third parties listed in the previous paragraphs may be located in countries outside the European Union that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en)
AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
You can contact the Espoir Data Protection Officer at contact@espoirlatelier.com
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
