Privacy Policy

ARTICLE 1: PREAMBLE

This privacy policy applies to the site: Luuckk.

The purpose of this privacy policy is to explain to the site's users:

How their personal data is collected and processed. All data that can identify a user should be considered as personal data. This includes first name, last name, age, mailing address, email address, user location, and IP address;
What are the rights of users regarding these data;
Who is responsible for the processing of the personal data collected and processed;
To whom this data is transmitted;
Possibly, the site's policy regarding “cookies”.

This privacy policy complements the legal notices and the General Terms of Use which users can consult at the following address: https://luuckk.com/general-sales-conditions/

ARTICLE 2: GENERAL PRINCIPLES FOR DATA COLLECTION AND PROCESSING

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of data from site users respect the following principles:

Lawfulness, fairness, and transparency: data can only be collected and processed with the consent of the data owner. Every time personal data is collected, the user will be informed that their data is being collected, and for what reason;
Limited purposes: data collection and processing are carried out to fulfill one or more objectives specified in these general terms of use;
Data minimization: only data necessary for the proper execution of the site's objectives is collected;
Data retention for a limited period: data is kept for a limited duration, of which the user is informed. If this duration cannot be communicated, the user is informed of the criteria used to determine it;
Integrity and confidentiality of the collected and processed data: the data processing manager commits to ensuring the integrity and confidentiality of the collected data.

To be lawful, and in line with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data can only occur if they comply with at least one of the conditions listed below:

The user has expressly consented to the processing;
The processing is necessary for the proper execution of a contract;
The processing meets a legal obligation;
The processing is necessary for the safeguarding of the vital interests of the person concerned or another natural person;
The processing can be explained by a necessity linked to the performance of a public interest mission or which falls under the exercise of public authority;
The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING BROWSING THE SITE

COLLECTED DATA AND COLLECTION METHOD

The personal data collected on the Luuckk site are as follows:

- Name, Email address, Postal address, Bank details

These data are collected when the user performs one of the following operations on the site:

– when the user buys a product on the site
– when the user uses the contact form to send a request

Moreover, when making a payment on the site, a proof of the transaction including the order form and the invoice will be stored in the site editor's computer systems.

The data controller will keep all collected data in the site's computer systems, in reasonable security conditions, for a duration of: 10 years.

Data collection and processing serve the following purposes:

– processing orders, shipping packages
– responding to requests sent through the contact form.

The data processing is based on the following legal grounds:

– user consent
– legal obligation

DATA TRANSMISSION TO THIRD PARTIES

The personal data collected by the site is not transmitted to any third party and is only processed by the site's editor.

DATA HOSTING

The Luuckk site is hosted by: Shopify, located at the following address:

Shopify – 150 Elgin Street, 8th Floor, Ottawa, Ontario, Canada K2P 1L4

ARTICLE 4: DATA PROCESSING MANAGER

DATA PROCESSING MANAGER

The person responsible for processing personal data is: Madame Retail. She can be contacted in the following way: contact@luuckk.com

The data processing manager determines the purposes and means used for the processing of personal data.

OBLIGATIONS OF THE DATA PROCESSING MANAGER

The data processing manager commits to protect the collected personal data, not to transmit it to third parties without the user being informed, and to respect the purposes for which this data was collected.

The website has an SSL certificate to ensure the security of the information and data transfer via the site.

An SSL ("Secure Socket Layer") certificate aims to secure data exchanged between the user and the site.

Furthermore, the data processing manager commits to notify the user in case of data rectification or deletion, unless this implies excessive formalities, costs, and procedures for him.

If the integrity, confidentiality, or security of the user's personal data is compromised, the data processing manager commits to inform the user by any means.

ARTICLE 5: USER'S RIGHTS

In accordance with regulations concerning personal data processing, the user possesses the rights enumerated below.

For the data processing manager to respect his request, the user must communicate his first and last name and his email address, and if relevant, his account or personal space or subscriber number.

The data processing manager must reply to the user within a maximum of 30 (thirty) days.

OVERVIEW OF THE USER'S RIGHTS REGARDING DATA COLLECTION AND PROCESSING
Right to access, rectify, and erase

The user can access, update, modify, or request the deletion of their data by following the procedure mentioned below:

The user must send an email to contact@luuckk.com, specifying the subject of their request.

If they have one, the user has the right to request the deletion of their personal space by following this procedure:

The user must send an email to contact@luuckk.com, indicating their personal space number. The request will be processed within 10 working days.

Right to data portability

The user has the right to request the portability of their personal data held by the site to another site by following the procedure below:

The user must send an email to contact@luuckk.com, specifying the subject of their request.

Right to limit and oppose data processing

The user has the right to request the limitation of, or to oppose the processing of their data by the site. The site cannot refuse unless it demonstrates legitimate and compelling reasons that prevail over the user's interests, rights, and freedoms.

To request the limitation of their data processing or to oppose the processing of their data, the user must follow the following procedure:

The user must send an email to contact@luuckk.com, specifying the subject of their request.

Right not to be subject to a decision based solely on automated processing

In accordance with the provisions of regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision has legal effects concerning him or significantly affects him in a similar way.

Right to determine the fate of data after death

The user is reminded that they can organize what should become of their collected and processed data if they die, in accordance with law n°2016-1321 of October 7, 2016.

Right to seize the competent control authority

If the data processing manager decides not to respond to the user's request, and the user wishes to contest this decision, or if they believe one of the aforementioned rights has been infringed upon, they have the right to contact the CNIL (National Commission for Computing and Liberties, https://www.cnil.fr) or any competent judge.

PERSONAL DATA OF MINORS

In accordance with the provisions of article 8 of European regulation 2016/679 and the Computing and Freedom law, only minors aged 15 or over can consent to the processing of their personal data.

If the user is a minor under 15, the agreement of a legal representative will be required so that personal data can be collected and processed.

The site editor reserves the right to verify by any means that the user is over 15 years old or has obtained the agreement of a legal representative before browsing the site.

ARTICLE 6: USE OF "COOKIES" FILES

The site may use "cookie" techniques.

A "cookie" is a small file (less than 4 kb) stored on the user's hard drive by the site, containing information about the user's browsing habits.

These files allow the site to process statistics and information on traffic, facilitate navigation, and improve service for the user's convenience.

For the use of "cookie" files involving the saving and analysis of personal data, the user's consent is necessarily requested.

This user's consent is considered valid for a maximum period of 6 (six) months. After this period, the site will again ask the user for permission to save "cookie" files on their hard drive.

Opposition of the user to the use of "cookie" files by the site

Non-essential cookies for the functioning of the site are only placed on the user's terminal after obtaining their consent. The user can withdraw their consent at any time as follows:

Please click on the "withdraw consent" button.

In general, users are informed that they can oppose the recording of these "cookie" files by configuring their browser software.

For information, users can find the steps to follow to configure their browser software to oppose the recording of "cookie" files at the following addresses:

Chrome: https://support.google.com/accounts/answer/61416?hl=en
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: http://www.apple.com/legal/privacy/en-ww/
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Opera: http://www.opera.com/help/tutorials/security/cookies/

Once the user has deactivated the cookies, they have the possibility to refuse or withdraw their consent without affecting the access to the pages of the site.

Description of the cookies used by the site

The site editor draws the user's attention to the fact that the following cookies are used when browsing:

Google Analytics: used to collect website statistics.
Authentication cookie: used to authenticate the user when they have an account on the site.

By browsing the site, the user is informed that third-party cookies may be saved. In particular, the following third-party cookies:

Google AdSense: used to display targeted advertisements to the user based on the content of the pages on the site.
Facebook pixel: used to monitor the actions of users who have viewed or clicked on one of the Facebook ads.

The user has a period of 13 (thirteen) months from the placement of these cookies on their terminal to give their consent. Once this period has elapsed, consent will be requested again for the use and reading of these cookies.