PERSONAL DATA PROTECTION POLICY

Entry into force: 15 February 2022

KOSHI, a SASU with a capital of 400,000 euros, registered in the Perpignan Trade and Companies Register under number 811 504 653, whose registered office is located at 7 avenue de Madrid - 66270LE SOLER, in its capacity as data controller, undertakes to ensure that the collection and processing of personal data of individuals, carried out from the website www.koshi.fr (hereinafter the "Site") comply with the French Data Protection Act of 6 January 1978, as amended by Act No. 2004-801 of 6 August 2004 on the protection of individuals with regard to the processing of personal data and the European Regulation 2016/679 of 27/04/2016 on the protection of personal data.

As part of this commitment, KOSHI has established a Privacy Policy to provide you with information about our practices relating to the collection, use and disclosure of information about you obtained through the Site.

Only data relating to individuals are covered by this policy.

By using the Site, you consent to the collection, use and disclosure of your personal information as described in this Privacy Policy.

In the event of a change or update, the revised Privacy Policy will be posted on our Site, along with the date of the update.

We invite you to consult this Privacy Policy on a regular basis, to stay informed of any changes or updates that may occur.


What personal data is collected on the Site?

The personal data we may collect and process about you are as follows:

·          Data relating to your identity, in particular your title, your surname, your first name, your telephone number, your postal and e-mail addresses;

·          Your payment details, including your credit card number and expiry date;

·          Data relating to the follow-up of our commercial relationship, in particular your order number, the order history, your requests, your correspondence or your opinions left on a product offered for sale on the Site;

·          Your technical data, including your IP address or browsing information about your terminal.

When is your personal data collected?

The collection takes place when :

·          you create a customer account on our Site;

·          you place an order on the Site (management and follow-up of the order, delivery, invoice, customer complaint);

·          you subscribe to the newsletter;

·          you leave a review of a product sold on the Site (no page at the moment);

·          you contact us via the contact form;

·          you place products in your shopping cart, via functional cookies, to allow you to complete your order later.

 

For more information, please see our Cookie Usage Policy.

Is data collected on minors under the age of 16?

You must be at least 18 years old to create an account on the Site and make purchases.

As KOSHI does not collect data from minors under the age of 18, any user under the age of 18 should not create an account.

By ticking the box, I have read the general terms and conditions of sale, the Internet user who orders a product on the Site after having created a customer account acknowledges that he/she is of legal age.

 

What are the purposes of collecting your personal data on the Site?

 

Your personal data is collected, depending on the case, either on the basis of your explicit consent or on the basis of the execution of a sales contract.

Thus your personal data is collected in order to :

·          to manage the operation and optimization of the Site;

·          answer your questions sent by email via the contact form;

·          allow you to create and manage your personal account and thus purchase products offered for sale on the Site;

·          to manage and process your possible online orders and applicable guarantees (order management, invoicing, customer complaints);

·          ensure the security of online transactions, prevent fraud and payment incidents;

·          manage and optimise customer relations;

·          subject to your consent: to send you information about KOSHI offers, news and events (newsletters, invitations and other publications);

·          to improve the operation of the Site by displaying advertisements based on the user's browsing history, according to the user's preferences, subject to the user's consent;

·          provide personalized services and communications;

·          to carry out statistics, audience measurement and effectiveness of advertising campaigns subject to the user's consent;

 

The Personal Data required to fulfil the purposes described above are indicated by an asterisk on the various pages of our Site.

If you do not fill in these mandatory fields, we will not be able to respond to your requests and/or supply you with the products ordered on our Site.

The other information is optional and allows us to get to know you better and to improve our communications and services to you.

With regard to commercial prospecting in particular, in application of the ePrivacy Directive n°2002/58/CE of 12 July 2002, KOSHI may send you offers, news and invitations to events, in particular by email, post, on social networks or third party websites.

Thus, when you create your account on the Site, we expressly ask for your consent to receive the KOSHI newsletter.

You have the possibility of objecting to the receipt of such solicitations by taking the following actions:

·          When creating your account, do not check the box related to commercial sollicitation ;

·          By email, by clicking on the unsubscribe link provided in each email;

·          By contacting us by email or by post.

Who will receive your personal data?

Your personal data is collected and processed by KOSHI. They are stored on our server in France and will not be transferred outside the European Union.

Your personal data will not be transferred or made accessible to any third party and any subcontractors of KOSHI for exclusively technical and logistical reasons (in particular, hosting and maintenance service providers of the Site, payment and fraud management service providers, mailing service providers, delivery service providers).

In the event that we wish to disclose your personal data to partners in a way that is not set out in this Privacy Policy, we will notify you in writing beforehand and provide you with the opportunity to opt out of this new use or disclosure of your personal data.

In the event of a merger, acquisition, sale of assets or receivership of KOSHI, we may be required to sell or share some or all of its assets, including customer personal data.

In this case, you will be informed before the personal data is transferred to a third party.

In addition, KOSHI may use connectors developed by third parties, which may be recipients of personal data when you use them.

Finally, KOSHI may disclose your personal data to third parties where such disclosure is required by law, regulation or court order, or where such disclosure is necessary for the protection and defence of its rights.

How long will your personal data be kept?

KOSHI undertakes to use personal data only for as long as is necessary to achieve the purposes for which they were collected:

-          your order data will be available on your customer account as long as it remains active;

If you are inactive for a period of 3 years, your account will be deactivated.

At the end of this three-year period, we will contact you again to find out whether you wish to :

·          continue to receive newsletters and other publications from the KOSHI brand;

·          maintain your customer account on the Site.

Your data will be destroyed within a maximum of 2 working days from your request to unsubscribe.

In any case, you have the right at any time to close your account and/or to unsubscribe from the newsletters by contacting us via the contact form accessible online, by e-mail at contact@koshi.fr or by clicking on the unsubscribe link attached to each newsletter.

-          As soon as your customer account is closed, your personal data will be archived for accounting and evidentiary purposes for a period of three years from the end of the commercial relationship;

-          Your bank details will be kept securely for the time necessary to validate and pay for your order;

-          identification data for the purpose of sending newsletters and other communications will be kept for a period of three years from the date of collection or from the date of your last contact with the Site (for example, a request for documentation or a click on a hyperlink contained in an e-mail);

-          copies of communications with us may also be retained for archival purposes;

-          Orders and invoices for an amount greater than 120 euros will be kept for 10 years, 8 years of which will be stored in an archive (Article L.213-1 of the Consumer Code);

-          the connection logs collected, subject to your agreement, within the framework of the cookies and other tracers set up on our Site, will be kept in accordance with the applicable regulations for a period not exceeding six (6) months.

For more information, see our cookie policy.

 

What security measures does KOSHI take?

KOSHI implements organisational, technical, software and physical digital security measures to protect personal data against alteration, destruction and unauthorised access, including

  • implementing physical and electronic backup procedures for data collected on our Site;
  • setting up a secure consultation of personal data through the implementation of a complex password policy;
  • protecting all financial information you provide on the Site to place orders with SSL encryption.

 

Despite the measures taken by KOSHI, all information communicated online can potentially be intercepted and used by persons other than the intended recipient.

 

What are your rights regarding personal data?

In accordance with the regulations in force concerning personal data, any individual who transmits personal data to KOSHI via the Site has the right to access and rectify the Personal Data, as well as the right to request its deletion, to object to its processing and to obtain its limitation or portability insofar as applicable.

You may provide instructions regarding the retention, deletion or disclosure of your personal data after your death.

These rights can be exercised directly with KOSHI:

-          by e-mail to contact@koshi.fr or directly via our contact form on our website;

-          by registered letter with acknowledgement of receipt to the following address: 7 avenue de Madrid - 66270LE SOLER accompanied by proof of identity.

Furthermore, you may at any time request to no longer receive our offers, news and events by using the hyperlink provided in each email sent to you.

Your customer account allows you to consult your personal data kept by KOSHI via the "My personal data" section. A summary document can be printed out at your request by clicking on "GET MY DATA TO PDF" or "GET MY DATA TO CSV" depending on the desired format.

For any other request, you can contact us by phone by calling +33 4 11 64 53 33 (price of a call without surcharge) from Monday to Friday from 8am to 4pm or by email at the following address: contact@koshi.fr or directly via our contact form accessible on our website.

You can also register on the anti-demarketing list on the website www.bloctel.gouv.fr.

You must update your personal details, including your postal and/or email address, in order to enable us to dispatch your orders and to contact you about them if necessary.

 

What are the possible claims?

This Privacy Policy shall be governed by and construed in accordance with French law.

The French courts are territorially competent to hear any dispute relating to our Site, with the exception of the application of the rules of special jurisdiction, particularly in the event of a dispute with a consumer.

In the event of a dispute concerning the way in which KOSHI collects and processes your personal data, a complaint may be made to the CNIL (3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07).

 

Do not hesitate to contact us

If you have any questions about this Privacy Policy and KOSHI's data collection and protection practices, you can contact us by email at contact@koshi.fr, directly via our online contact form, or by telephone at +33 4 11 64 53 33.