Privacy and Cookie Policy

The website available at the following address www.myzah.com or www.myzah.fr (hereinafter referred to as the "Website"), is the property of MYZAH, a simplified joint stock company, with a capital of 20.000 euros, registered in the R.C.S of PARIS under the number 898 592 803, whose head office is located 25 rue de Ponthieu - 75008 PARIS, France (hereinafter referred to as "MYZAH") which, as the person responsible for the processing of of the processing of personal data, attaches great importance to the protection and respect of the private life.
The purpose of this privacy policy is to inform, when browsing the Website, any person using the website (hereinafter referred to as the "Users" or the "User") of MYZAH's practices regarding the conditions of collection, use and sharing of the information that Users are asked to provide as well as their rights. The Website complies with French and European norms relating to the protection of privacy and personal data and in particular to the law n°78-17 known as "Informatique et Libertés" of 6 January 1978 relating to data processing, files and freedoms, amended by Law 2004-801 of 6 August 2004 and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the "RGPD", on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

1. Responsible for the processing of the collected personal data

The person responsible for the processing of personal data is MYZAH.

2. Nature of the data collected

The data collected on the Website in the context of using the Website are those that allow MYZAH to identify the Users directly or indirectly.
This may include the following categories of data concerning its Users:
• identity and identification data such as name or company name, first name, pseudonym, email address, postal address, date of birth, telephone number
• connection data such as IP address and navigation data such as cookies;
• banking data necessary for the purchase of Products and Services offered by MYZAH;
Users who would transmit the personal data of a third party must confirm that they consent of this third party to the use by the Website, to the publication and/or to the distribution on the Website of the latter's personal data.

3. Purpose of the personal data collected

3.1. The personal data collected on the Website are used only for and during the execution of the services for the following purposes:
• registration and authentication of the User ;
• allow the User to consult the history of orders, transactions, complaints and/or incidents;
• sending notifications to the User for :
o keep informed about the progress of their deliveries;
o to keep the User informed about the news of "followed" and/or "favourite" articles;
o send targeted content to the User, corresponding to his/her interests, items consulted and/or purchased;
o communicate with the User ;
In addition, MYZAH may use the data to meet its legal and/or regulatory obligations, if any.
3.2. Aggregation with non-personal data
MYZAH retains the right to publish, disclose and use aggregated information (information about Users or specific groups or categories of Users combined in such a way that an individual User can no longer be identified or referred to) and non-personal information for the purposes of industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes.

4. Time of collection

The data collected by MYZAH are freely communicated by the Users when they register on the Website.
It can also be collected automatically during the use of the Website, in particular when the User :
• browses the pages of the Website without having created an account;
• creates an account on the Website; and/or
• buys a product on the Website; and/or
• subscribes to the newsletter; and/or
• sends a request to MYZAH via the messaging tool provided to contact the MYZAH "Chat" teams; and/or
• participates in contests and/or lotteries organized by MYZAH.
Whatever the case, the personal data collected :
• will be fairly and lawfully collected and processed;
• will be recorded for specified and legitimate purposes;
• will be used in accordance with those purposes;
• are adequate, relevant and not excessive in relation to those purposes; and
• will be subject to precautions to ensure the security and confidentiality of the data in order to security and confidentiality of the data in order to prevent it from being damaged, altered, destroyed or communicated to unauthorised third parties.

5. Consent

The current confidentiality policy is systematically provided to the Users when they register on the Website. Indeed, the creation of an account implies the full and entire acceptance by the User of this privacy policy. By checking the box: "I acknowledge that I have read and understood the privacy policy and I accept it", the User consents to the storage and processing of his/her personal data by MYZAH and/or its possible partners.
IMPORTANT: NOTE TO USERS
ANY NAVIGATION ON THE WEBSITE AFTER THE PUBLICATION OF THIS PRIVACY POLICY CONSTITUTES ACCEPTANCE OF THIS POLICY WITHOUT RESERVATION.
If the User wishes to withdraw his/her consent to the processing of his/her data, he/she can do so by going on his/her account and make the request using the forms provided on the Website or directly by email to to the following address: contact@myzah.com. Furthermore, in case it is required by law and/or in certain circumstances, the User's consent will be obtained or a possibility of refusal will be provided before any transmission of data.

6. Recipients of personal data

6.1. The recipient of the personal data collected on the Website is primarily MYZAH. 6.2. Personal data is not disclosed to third parties. However, other recipients may have access to the personal data, These are, where applicable, the service providers in charge of the website (administration, sales, marketing, legal etc.) of MYZAH and its external service providers (technical service providers, access providers, communication agencies etc.). communication agencies etc.).
6.3. In the event of a change of control of MYZAH through a merger, acquisition, insolvency or other form of asset disposal, the data collected by MYZAH may be transferred to third parties. Nevertheless, MYZAH undertakes to guarantee the confidentiality of the personal data collected and inform the Users before the data is transferred or subjected to new confidentiality rules. If required by law, the User's consent will be obtained or an opt-out option will be provided before any data is transferred.

7. Users' rights

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 known as the "RGPD" on the protection of individuals with regard to the processing of personal data and the free movement of such data and the personal data and the free movement of such data, and to the law n°78-17 known as "Informatique et Libertés" of 6 January 1978, amended by Law 2004-801 of 6 August 2004 on information technology, files and freedoms, the User has :
• a right of access to their personal data;
• a right to modify personal data
• a right to rectification of their personal data;
• a right to delete and erase their personal data;
• a right to object to the use of their personal data;
• a right to limit their data; and
• a right to portability of their data.
The User wishing to assert one of his rights may send his request by e-mail or by post to the following addresses :
• Postal mail : 25 rue de Ponthieu - 75008 PARIS
• Email : contact@myzah.com
In case of exercising one of these rights, the User shall provide MYZAH with the necessary information necessary to identify him/her: name, first name and/or company name, e-mail and possibly postal address.
Furthermore, in accordance with the regulations in force, the request must be signed, accompanied by a photocopy of an identity document bearing his signature, be clear and specify in detail the right they wish to exercise and the address to which they wish to receive the reply in case of implementation of one of the rights listed above.
MYZAH undertakes to respond within a maximum of one (1) month following the receipt of the User's complete complete request from the User.
Due to the complexity of the request and/or the number of requests, this period may be extended to two (2) months, provided that MYZAH informs the User within one (1) month of receipt of the request of the reasons for the delay. MYZAH shall inform the User within one (1) month after receipt of the request of the reasons for the postponement.
MYZAH informs the Users of their right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés.
Commission Nationale de l'Informatique et des Libertés (hereinafter the "CNIL") in one of the following ways:
• By phone: +33 1 53 73 22 22
• By fax: +33 1 53 73 22 00
• Via the CNIL website: www.cnil.fr/fr/plaintes or www.cnil.fr
• By post:
Commission Nationale de l'Informatique et des Libertés - CNIL
3 Place de Fontenoy
TSA 80715 - 75334 PARIS CEDEX 07.

 

8. Duration of data retention

8.1. Retention of data for the duration of the contractual relationship The personal data of the Users collected are not kept beyond the time necessary to fulfil the obligations defined at the time of the conclusion of the contract or for the contractual relationship, except for data that MYZAH needs to keep as evidence, for the purpose of for legal or administrative purposes or in accordance with the applicable legislation.
8.2. Retention of anonymised data beyond the contractual relationship / after the deletion of the account
MYZAH keeps the personal data of the Users collected for the period of time strictly necessary to achieve the purposes described in this privacy policy. In case of termination of the contract or closing of the User's account, MYZAH will keep for one (1) year from the date of termination of the contract or closure of the account, the information provided at the time of the creation of an account, namely :
• the user ID used to create the User's account;
• the first and last name or the company name;
• the related postal addresses;
• the pseudonyms used;
• associated e-mail or account addresses;
• telephone numbers;
• the password and the data enabling it to be checked or changed, in their last updated version; and last updated version; and
• information submitted by Facebook.
The navigation data will be kept for a maximum of six (6) months in accordance with the recommendations of the CNIL.
Beyond this period, it will be anonymised and kept exclusively for statistical purposes and will not be used in any way whatsoever.
8.3. Deletion of data after deletion of the User's account
Means of purging the personal data of Users collected are put in place
in order to provide for the effective deletion of such data as soon as the retention or archiving period necessary for the achievement of the determined or imposed purposes is reached. 8.4. Deletion of data after a period of inactivity
For security reasons, if the User has not logged on to the Website for a period
of one (1) year, the User will receive an e-mail inviting him/her to log in as soon as possible, otherwise the User's personal data will be deleted from the
MYZAH's databases.

9. Links

On the Site, Users may have access to various links to third party websites.
MYZAH shall not be responsible for any information that is sent to or collected by such third parties.
This Privacy Policy does not govern third party websites or third party content accessed by the User of the Website.
MYZAH has no control over hypertext links and/or other promotional formats.
Consequently, MYZAH does not give any guarantee concerning in particular the practices in terms of protection of personal data of the indexed websites and cannot be held responsible in case of a dispute between a website indexed on the Site and one of the Users, in particular because of losses or damage suffered, the operators of the websites indexed being solely responsible for their practices in terms of personal data protection.

10. Cookies

A cookie is a text file that may be stored in a dedicated space on the hard disk of the User's computer when consulting an online service thanks to their browsing software.
In practical terms, cookies are small text files that are placed on the User's computer by the websites that the User visits.
They are used to operate the websites and improve the usability of these websites.
The cookie is transmitted by a website's server to the User's browser.
Each cookie is assigned an anonymous identifier.
A cookie cannot be traced back to an individual. When consulting the Website, Users are informed that cookies or other means of recording navigation data are used by the Website, in particular Google Analytics or by third parties, service providers for the Website and deposited on the User's terminal (computer, mobile or tablet).
MYZAH or its partners such as Google Analytics may install, subject to the User's acceptance, various cookies and in particular :
• session cookies, which disappear as soon as the User leaves the Website
• permanent cookies, which remain on the User's terminal until their lifetime expires or until the User or until the User deletes them using the functions of his browser; and browser; and
• statistical cookies (used to measure the audience of the Website).
Only the issuer of a cookie can read or modify the information contained in it.
In application of the recommendations of the CNIL, when connecting to the Website for the first time, the User will be expressly asked to accept the website's cookies.
10.1. Purpose of cookies
The cookies used by MYZAH or its partners allow to identify the Users, to recognize the browser of the latter when they connect to the Website, to record their access frequencies (traffic measurement) and display preferences of the Users' terminal, to adapt and/or personalise the presentation of the Website to improve the experience of Users and to optimise the Website for the sole purpose of providing the services requested by the User.
In addition, the cookies used on the Website are based on the International Chamber of Commerce's guide by category:
• - strictly necessary;
• - functionalities.
10.1.1. Strictly necessary cookies
Strictly necessary cookies allow the User to navigate the Website.
These cookies do not collect any information about the User that could be used for marketing marketing purposes.
MYZAH uses these cookies to :
• ensure the functioning of the Website;
• to secure the forms and protect them against malicious scripts.
MYZAH does not use these cookies to :
• collect information that could be used to promote products or services to the User; or services to the User; or
• remember the User's preferences or name after the visit.
10.1.2. Functionality cookies
These cookies are used to provide services or to remember the User's settings in order to improve their visit to the Site. settings to enhance the User's experience on the Website.
MYZAH does not use cookies to collect personal information that could be used to promote products or services for the User on other websites.
10.2. Cookie retention period
In accordance with the recommendations of the CNIL, the maximum duration of conservation of cookies is thirteen (13) months maximum after their first deposit in the User's terminal, as well as the duration of the validity of the User's consent to the use of these cookies.
The lifetime of the cookies is not extended with each visit. The User's consent must therefore be renewed at the end of this period.
10.3. User's right to refuse cookies
When browsing the website for the first time, a banner explaining the use of cookies appears. It allows the User to activate or deactivate certain cookies. It will only disappear when the User has accepted, or not, the use of cookies to continue browsing. The registration of a cookie is subject to the will of the Users.
In accordance with legal and regulatory provisions, MYZAH collects the prior consent to the deposit of cookies.
Users can therefore configure their browsing software in order to to oppose, totally or partially (depending on the issuer) to the registration of cookies. The configuration also offers the possibility of accepting or refusing cookies on an ad hoc basis, before they are recorded in the Users' terminal.
Therefore, Users who wish to prevent the recording of cookies can follow the specific procedure to each browser and described in the browser's help menu.
• Chrome https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=fr
• Internet Explorer https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-managecookies
• Edge https://privacy.microsoft.com/fr-fr/windows-10-microsoft-edge-and-privacy
• Safari https://support.apple.com/fr-fr/guide/safari/manage-cookies-and-website-data-sfri11471
• Firefox https://support.mozilla.org/fr/kb/activer-desactiver-cookies-preferences
• Opera http://help.opera.com/Windows/9.20/fr/cookies.html
However, in the event of opposition to the recording of cookies or the uninstallation of a cookie, Users are informed that certain services may no longer function correctly.

11. Transfer of personal data abroad

MYZAH processes User data only within the European Union and does not transfer such data outside the outside this area.
Nevertheless, in case of international transfer outside the European Union, it is necessary to distinguish :
• countries that have been the subject of an adequacy decision by the European Commission: in this case, the Data is transferred to a country ensuring a level of protection deemed sufficient and adequate to the provisions of the European regulations on data protection; and protection; and
• countries whose level of data protection has not been recognised as adequate:
In this case, in order to guarantee a transfer in compliance with the European regulations, and in particular to security of the data, MYZAH will base its transfer on protection mechanisms protection mechanisms adapted to each service provider and subcontractor, such as the conclusion of contractual clauses approved by the European Commission, the application of or under an approved certification mechanism.

12. Security

MYZAH undertakes to implement appropriate technical and organisational measures that are reasonably necessary reasonably necessary with regard to the regulations applicable to the protection of personal data, including including protection against unauthorised or unlawful processing and against loss, destruction or against accidental loss, destruction or damage in order to ensure a level of security appropriate to the risks to to the risks to the rights and freedoms of natural persons in connection with the processing operations referred to in this privacy policy.
Where personal data is transferred to third parties for processing, MYZAH ensures that such third parties implement all appropriate technical and organisational measures to ensure the protection of personal data in accordance with the applicable laws.
These measures are determined by taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing and the risks identified.
Depending on the needs, risks, costs and purpose of the processing, these measures may include pseudonymisation and encryption of data.
This protection can be ensured by the mention of "https" in the browser's URL address as well as by the representation of a closed padlock at the bottom of the screen.
Finally, in the event of a violation of rights concerning personal data likely to result in a risk for the User's rights and freedoms, MYZAH undertakes to inform the User of this violation within a maximum of seventy-two (72) hours.

13. Changes to the Privacy Policy

MYZAH reserves the right to modify and update this privacy policy at any time, in particular to take into account any legal and/or jurisprudential developments and to to meet the requirements of the regulations applicable to the protection of personal data.
MYZAH will notify Users of significant changes or updates to this Policy by email.
The version that prevails is the one that is accessible online on the day of the consultation of the Website. Any consultation of the Website after the publication of the modified privacy policy shall constitute unreserved acceptance of the new privacy policy.

14. Contacts

14.1. For any enquiries or to find out more about the processing of their personal data, including the exercise of their rights as indicated above, the User may contact
MYZAH by using the contact form or by e-mail or postal mail to the following address :
Email : contact@myzah.com
Regular mail: 25 rue de Ponthieu – 75008 PARIS
14.2. For any complaint or dissatisfaction regarding the use of personal data by MYZAH, the
User may contact MYZAH using the contact form or by e-mail or post at the following address :
Email : contact@myzah.com
Regular mail: 25 rue de Ponthieu – 75008 PARIS
14.3. When contacting MYZAH, the User will be asked to identify himself.