Privacy Policy
El Badia's Personal Data Protection Principles
Requests to Modify Your Personal Data
- As a user of EL-BADIA services, you can modify your personal data from your customer account.
- If you wish to delete your customer account, you can also do so (please note this action is irreversible and you will lose access to your order history, loyalty points, promo codes, etc. However, you will be able to create a new customer account) from your customer account.
- You can export your personal data from your customer account.
- For any other request regarding access, retrieval, correction, or deletion of your personal data, please contact our data protection service.
Introduction
This page outlines the principles by which EL-BADIA collects various types of data about its customers. The elements described on this page are explained in detail in EL-BADIA's data protection principles.
This page also details the commitments regarding EL-BADIA's security and data protection policy to respect your privacy as much as possible.
Definitions
To avoid any imprecise interpretation, here are some clarifications of terms used:
- Personal data: any information relating to an identified or identifiable natural person is considered to be "an identifiable natural person" - a natural person who can be identified, directly or indirectly.
- Processing: any operation or set of operations performed or not using automated processes and applied to data or sets of personal data (collection, recording, transmission, storage, conservation, extraction, consultation, use, interconnection, segmentation, etc.).
Data Controller
All processing of personal information provided to EL-BADIA is carried out under the responsibility of EL-BADIA company, 75 rue Saint Denis 75001 Paris.
How Do We Collect Data About You?
The collection of your personal data (such as name and contact details) is most often based on your customer relationship or another relevant relationship with us. For example, we collect data when you take actions on our services, by registering as a user of our site, using EL-BADIA services, or providing us with other information.
When you use EL-BADIA's network and communication services, for example by making a call, creating your customer account, or sending an email, identification data is stored in our systems for service use.
When you visit EL-BADIA websites or load pages, you leave us various types of anonymous browsing data, such as your IP address and browsing history. Service operation is based on cookie usage.
We may collect data based on your consent.
We record customer service calls to verify the actual conversation, if necessary.
We also collect data from our potential customers when they participate in contests, draws, or customer events.
What Data Do We Collect?
This data includes your first name, last name, address, phone number, email address, date of birth, direct marketing information and consent, business contact person information, company name, self-provided information, customer classification information, order, delivery, agreement, and billing information. We store whatever can be connected to you.
Data created and collected during communication includes information about communicating parties, connection time, routing information, data transfer protocol, connection format, and location information.
During internet browsing, "measurement data" is collected using cookies. This data cannot be associated with an individual.
The customer information we collect helps us personalize and continually improve your shopping experience on EL-BADIA services. We use this information to process orders, deliver products and services, process payments, and communicate with you regarding your orders, products, services, and promotional offers, maintain and update our files and thus your accounts with us, provide you with content such as wish lists and customer reviews, and recommend products and services that may interest you. We also use this information to improve our shops and websites, prevent or detect fraud or abuse on our website, and enable third parties to provide technical, logistical, or other functions on our behalf.
List of Types of Information We Collect:
Information You Provide to Us
We collect and record all information you provide to us via our website or other means. You may choose not to provide us with certain information, but this decision may limit your use of our services. We use the information you provide to us, particularly to respond to your requests, personalize your future purchases, improve our services, and communicate with you.
Automatically Collected Information
Each time you interact with us, we receive and record certain types of information. Like many other websites, we use "cookies" and obtain certain types of information when your browser accesses the EL-BADIA site or advertisements and other content displayed on other websites by or on behalf of EL-BADIA.
Email-Related Information
To optimize the usefulness and relevance of our emails, if your computer allows it, we frequently receive confirmation that you have opened emails sent by EL-BADIA. If you do not wish to receive emails from us, simply notify us in your account.
How Do We Manage Your Information?
Please note that EL-BADIA staff, its subsidiaries, and their subcontractors act under an obligation of confidentiality when processing data concerning you.
We maintain the confidentiality of data concerning you and ensure it is only used for predefined purposes.
Your data is processed for the purpose of producing and delivering agreed communication and other services, developing services, billing, providing you with the best and most complete services possible, and informing you about our services.
We also use your data for customer communication, such as sending information about our services and for direct marketing purposes.
We also use data for customer profiling using billing, usage amounts, customer relationship duration, and external classifications. We use both summarized usage data and person-specific data to create target groups for marketing.
We process data from our potential customers for direct marketing purposes.
We strive to ensure customer data is up-to-date and accurate.
We delete obsolete and unnecessary data when possible.
We protect all data concerning you through task-based personal access rights and prevent third-party access to data.
Where Do We Send Your Data?
We only submit your data to the extent permitted by applicable legislation and as indicated in the file description to authorities and other telecommunications companies.
When we use subcontractors, we sign a security agreement with them that also covers the use of your data. We are also responsible for this type of handling on your behalf.
EL-BADIA's Data Protection Principles
The purpose of this data protection policy is to describe the principles and practices we observe at EL-BADIA to ensure privacy protection, communication confidentiality, and legal protection of our customers.
EL-BADIA regularly updates this policy as operations or services change or develop. For this reason, we encourage you to regularly consult the latest statement.
Important core values for EL-BADIA include customer data and communication confidentiality, as well as customer privacy protection in all company operations. When handling our customers' personal data, we follow French legislation, authority orders and instructions, and data processing best practices.
EL-BADIA implements a high level of data protection. Personal and identification data as well as location-related data are only collected for specific predefined and legal purposes and are not processed in a manner incompatible with these objectives.
We protect the security of your personal information during transmission using SSL (Secure Sockets Layer) software that encrypts the information you enter before it is sent to us.
We maintain physical, electronic security measures and backup procedures related to the collection, storage, and communication of customers' personal information. Our security procedures may require us to ask you for proof of identity before we can provide you with your personal information.
We constantly train our staff on data processing principles and monitor data use through appropriate means.
General Principles of Customer Data Management
The processing of personal data must always be justified for EL-BADIA operations. EL-BADIA has defined the objective of collecting, handling, and submitting personal data in the following section.
EL-BADIA only processes customer data necessary for its operations, as defined in the purpose of use indicated in the file description for the customer register. We strive not to process incorrect, incomplete, or obsolete data.
Customer data processing is generally based on a relevant relationship, information received when using or registering for a service, or your consent. We may also process your data for other reasons, for example at your request or when required by law. Your information may be processed within EL-BADIA. We encourage our customers to regularly update their contact details.
We record your conversations with our customer service to verify a business transaction, respond to your requests, and monitor and develop service quality.
Please note that as an EL-BADIA customer, you have the right to verify what data concerning you has been stored in our information systems, or that there is no data concerning you in our file. You may also refuse the use of your data in accordance with relevant legislation. Inspection can be performed once a year free of charge. The data inspection request must be made with a signed document between EL-BADIA and you.
Collection, Storage, Extraction, and Processing of Personal Data
Register of Data Transferred to Subcontractors via EL-BADIA Services:
Meta Platforms (Facebook / Instagram / Pixel)
- Service provider information: https://www.meta.com/
- Service provider location: United States
- Purpose: Login to your customer account via your Facebook account, targeted advertising and remarketing via Facebook, Instagram, and Pixel
- Is data stored or processed outside the EU: Yes
- Service provider's GDPR charter: https://www.facebook.com/privacy/policy/
Google Analytics 4
- Service provider information: https://analytics.google.com/
- Service provider location: United States
- Purpose: Website traffic analysis
- Is data stored or processed outside the EU: Yes
- Service provider's GDPR charter: https://policies.google.com/privacy
Brevo
- Service provider information: https://www.brevo.com/fr/
- Service provider location: France
- Purpose: Marketing emailing and transactional emails
- Is data stored or processed outside the EU: No
- Service provider's GDPR charter: https://www.brevo.com/fr/legal/privacypolicy/
Reelast
- Service provider information: https://www.reelast.com/
- Service provider location: France
- Purpose: Automatic reminders, product recommendations, and marketing scenarios
- Is data stored or processed outside the EU: No
- Service provider's GDPR charter: https://www.reelast.com/conditions-generales/
Avis Vérifiés
- Service provider information: https://www.avis-verifies.com/
- Service provider location: France
- Purpose: Collection and publication of customer reviews
- Is data stored or processed outside the EU: No
- Service provider's GDPR charter: https://fr.avis-verifies.com/politique-de-confidentialite/
KixellTag
- Service provider information: https://www.kixell.com/
- Service provider location: France
- Purpose: Cookie consent management (CMP - Consent Management Platform)
- Is data stored or processed outside the EU: No
- Service provider's GDPR charter: https://kixelltag.com/fr/cgv.html
GLS
- Service provider information: https://gls-group.com/FR/fr/home
- Service provider location: France / European Union
- Purpose: Order processing and delivery (access to necessary delivery data)
- Is data stored or processed outside the EU: No
- Service provider's GDPR charter: https://gls-group.com/FR/fr/protection-donnees/
Colissimo
- Service provider information: https://www.colissimo.entreprise.laposte.fr/
- Service provider location: France
- Purpose: Order processing and delivery (access to necessary delivery data)
- Is data stored or processed outside the EU: No
- Service provider's GDPR charter: https://www.laposte.fr/conseils-pratiques/donnees-personnelles-colissimo
DHL
- Service provider information: https://www.dhl.com/fr-fr/home.html
- Service provider location: Germany / European Union
- Purpose: Order processing and delivery (access to necessary delivery data)
- Is data stored or processed outside the EU: No
- Service provider's GDPR charter: https://www.dhl.com/content/dam/dhl/local/fr/core/documents/pdf/fr-core-legal-privacy-policy-fr.pdf
Data Sending and Sharing
EL-BADIA may only submit your data to third parties in accordance with applicable legislation. We submit information upon request to authorities, such as police and security authorities, as well as other authorities for reasons specified by legislation.
Information about our customers represents an important part of our business, and our profession is not to trade it. We only share this information in the cases previously expressed and for the purposes described in this privacy policy with EL-BADIA controls and which are either subject to this privacy policy or apply rules at least as protective as those described in this privacy policy.
Furthermore, we may submit your data to subcontractors, in which case we will ensure that data confidentiality is maintained, and we will also be responsible for data management in this case. If we process your data outside the EU region, we will protect your data by ensuring that the subcontractor guarantees appropriate data processing.
Processing of Identification and Location Data Related to Electronic Communication
EL-BADIA treats all data and messages created during communication as confidential. Our staff is bound by a confidentiality obligation and prohibition from using messages or other confidential information. When communication takes place via a network, it always leaves a trace. These network traces are called identification data if they can be connected to a person. Network traces are created, for example, during phone calls, sending electronic messages and SMS, and internet browsing, and may contain information about correspondents, the connection route or routing, the data transfer protocol used, the event, and the terminals used or their location.
EL-BADIA manages communication identification and location information in accordance with current law for purposes such as service implementation and use, billing, and technical development, consent, marketing. Data may also be used for billing other service providers to the extent necessary.
EL-BADIA may also manage identification data in case of misuse, data security breach, and fault repair.
In all the above situations, we only process identification and location data to the extent necessary to accomplish a specific task.
Use of Location Data
An actual location method where one person can track where another person is requires the consent of the person to be located. The customer may not be located at all if they refuse geolocation services.
If we submit location information to location service providers, we ensure by appropriate means that there is consent from the person to be located.
Persons Authorized to Manage Identification and Location Data
Only specific people at EL-BADIA whose work requires access to identification and location data can process this data.
In practice, authorization is only granted to people performing tasks related to billing, network or communication service maintenance or development, abuse prevention and investigation, customer service, and marketing. People with the right to handle data can only manage it to the extent required to perform individual tasks.
Duration of Identification and Location Data Processing and Data Storage
We process identification and location data for as long as necessary for billing, technical development, fault repair, marketing, misuse investigation, or data security purposes. However, handling only takes place to the extent required by actions and without unduly compromising message confidentiality and privacy protection.
We store billing-required data for at least one year from the invoice due date and for a period not exceeding three years from the invoice due date, unless it is necessary to retain data for a longer period related to invoice collection. Otherwise, data is stored to the extent permitted and required by relevant legislation.
Websites, Visit Tracking
We also collect data regarding website visits. This data includes the IP address and corresponding DNS name, the organization that registered the IP address, the name and address of the visited page, page loading time, and browser type.
Please note that the IP address is a required identification for internet operation, used to direct messages transmitted over the internet to appropriate places. Typically, the IP address is not connected to the person using the computer, but it can be connected to the organization that registered the IP address. IP address connection can be established at the request of authorities.
Cookies
As an EL-BADIA customer, you can view our websites anonymously. However, like most websites, we use cookie technology. When you view our website, the cookie sets a random number for the browser that does not indicate your identity. Cookies help EL-BADIA determine which sections of its websites are most popular, where visitors go, and how long they stay. Data is used to implement and develop services and target advertisements on websites.
You can prevent cookie storage by changing your browser settings. In some cases, prevention may slow down or make browsing pages or the website impossible.
Data Security
We ensure the security of our services' data using methods proportionate to the severity and sophistication of threats as well as the cost.
EL-BADIA takes care to carry out actions aimed at preventing data security breaches or eliminating disturbances affecting data security. Furthermore, we use all means to ensure that message confidentiality or privacy protection is not unduly compromised when carrying out the above actions.
We provide information about actions related to our services' data security and other matters concerning data security through appropriate channels, such as our website or customer bulletins.
To prevent data security breaches and eliminate disturbances affecting data security, we may, among other things, prevent electronic message reception, remove viruses and other malware from messages, and take other comparable technical measures necessary within the limits authorized and required specified in relevant legislation. We use physical, administrative, and technical protection measures to keep messages and identification data transmitted over the communication network secret. These actions reduce the risk that data concerning you is disclosed to third parties and prevent any misuse or other unauthorized access. Some of our services also use standardized encryption methods.
Please note that as a user of EL-BADIA services, you must also use the most appropriate methods to ensure your own data security. We encourage you to store and use our services and your terminals carefully and control their use, for example by using secure codes and unique passwords, and to use sufficient antivirus and firewall services and keep them as well as the operating system updated.
Customer Communication and Direct Marketing
EL-BADIA sends customer messages regarding its products and services to its customers via consent available in the customer account.
EL-BADIA also sends direct marketing messages in electronic format. You have the right to prohibit EL-BADIA from sending direct marketing messages. You can prohibit marketing by following the instructions included in the direct marketing message or via your customer account available on our website.