Privacy and Cookie Policy

Last updated: March 4, 2025 

At Ernest Leoty, we are committed to protecting your personal data and ensuring full transparency in how we collect, use, and store your information. This policy explains the types of data we collect, how we process it, and your rights regarding its management.

1. Data Controller

Personal data collected on ernestleoty.com is processed by Ernest Leoty, acting as the data controller. Our headquarters are located at 198 boulevard Saint Germain, 75007 Paris, France , and for any inquiries regarding data protection, you can contact us at contact@ernestleoty.com.

We process your data in accordance with applicable laws, including the General Data Protection Regulation (GDPR)and the amended French Data Protection Act.

2. Data Collected and Processing Purposes

We collect various types of personal data to improve our services and meet your needs. This includes your name, surname, postal address, email address, and phone number when you place an order or create a customer account. We also collect your payment details and purchase history, but these are encrypted and never stored directly on our servers.

Additionally, we gather technical data, such as your IP address, browser type, and pages visited, to enhance the user experience and optimize our website.

The data we collect allows us to manage your orders, provide efficient customer service, optimize our marketing communications, and tailor our services to your preferences.

3. Legal Basis for Data Processing

Data processing is carried out based on different legal grounds, depending on the purpose of use. When we process your information for sales contract execution, such as handling and delivering your orders, we do so under the performance of a contract.

When we analyze your browsing behavior or send marketing communications, we rely on your consent, which you can withdraw at any time. Some data is processed based on our legitimate interest, particularly for service improvements and fraud detection.

4. Data Retention Period

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. Data related to orders and invoices is kept for 10 years, in compliance with legal accounting requirements. Customer account data remains accessible as long as it is actively used and will be deleted after 2 years of inactivity.

Marketing-related data is stored for a maximum of 3 years from your last interaction with us unless you choose to opt out. Browsing data used for website optimization is deleted after 13 months.

5. Data Sharing and Recipients

Your personal data may be shared with certain service providers strictly necessary for processing your order. These include our delivery partners, payment service providers, and email platforms. We ensure that these partners comply with high standards of data protection.

Your data will never be sold or rented to third parties. However, we may disclose your information if required by law or in response to legal requests from regulatory authorities.

6. Your Rights Regarding Your Data

Under the GDPR, you have several rights concerning your personal data. At any time, you can exercise your right of access to obtain a copy of your personal information. You may also request correction of your data, ask for its deletion, or object to its use for marketing purposes.

To exercise your rights or for any inquiries about data processing, you can contact us at contact@ernestleoty.com. We may require proof of identity for security reasons.

7. Data Security

We implement all necessary technical and organizational measures to protect your data against loss, alteration, or unauthorized access. Our website uses SSL encryption to ensure a secure connection during transactions.

Additionally, we require our service providers to adhere to high-security standards to safeguard your data from potential breaches or misuse.

8. Cookie Management and Tracking Technologies

Our website uses cookies and tracking technologies to ensure optimal functionality, improve your browsing experience, and measure the effectiveness of our marketing campaigns.

Cookies used on our site fall into the following categories:

• Essential cookies: Ensure the proper functioning of the website, such as shopping cart management and payment processing.
• Analytical cookies: Help us analyze website traffic and enhance user experience.
• Advertising cookies: Allow for the display of personalized content based on your browsing behavior.

You can manage your cookie preferences directly from your browser settings or via our cookie consent banner, displayed upon your first visit.

9. Updates to This Policy

This policy may be updated to reflect regulatory changes or adjustments in our data processing practices. We encourage you to review this page regularly to stay informed of any modifications.

10. Contact and Complaints

If you have any questions regarding this policy or wish to exercise your rights, you can contact us at contact@ernestleoty.com. If you believe your data protection rights have been violated, you may also file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) via its official website: www.cnil.fr.