PERSONAL DATA
Processing of personal data
The communication of personal information (civility, identification data, telephone, e-mail and postal address but also other information such as the IP address, shopping habits, preferences, such as hobbies and centers of interest) in the framework of a purchase at North Star is obligatory, this information being necessary for the management of the commercial relations.
The data controller is the company that defines for what use and how the personal data is used, either for the North Star site:
The North Star Company
SARL with a capital of 3000 €,
210 Avenue de Bredasque,
13090 Aix-en-Provence - France,
RCS of Aix-en-Provence 499 069 961,
North Star uses the data of these customers within the framework and for the following purposes: management of orders, deliveries, execution of the sales contract, customer relations and exercise of legal and commercial guarantees, detection of fraud and security, assistance and management of feedback, site improvement, configuration of default options (languages and currency), article recommendation. The data collected by North Star is always collected for the purposes mentioned herein.
The duration of the conversation
The required data will be kept for the time necessary for the processing, without being able to exceed 5 years. Your data will then be archived with restricted access for an additional period, in connection with the periods of limitation and legal retention for reasons strictly limited and authorized by law (payment, guarantee, disputes, etc.). After this time, they will be anonymized.
Recipient of personal data
Group: North Star does not sell personal information entrusted by its customers to unaffiliated and non-partner third parties. However, in order to be able to provide all the appropriate services, this information may also be communicated to other brands, subsidiaries of North Star, which may use it for the purposes of statistical studies, quality of service monitoring and, under subject to the prior and express consent of the customer, commercial prospecting and management of the loyalty account. This data is also likely to be communicated and collected to independent companies, under brand name and affiliated to the North Star group through a Partnership contract. North Star certifies that this data cannot be used for purposes other than those referred to herein and ensures that the processing is carried out in compliance with the regulations and more specifically with the provisions of European Regulation n ° 2016/679 to the Data Protection of April 27, 2017. Subcontractors: Due to the partial subcontracting of the processing, in particular within the framework of the delivery of the products or companies approved by the customer, such as social networks, data required may be transferred outside the European Union. In this case, North Star ensures that this transfer complies with the legal framework: transfer to a country providing a sufficient level of protection, signature of standard contractual clauses issued by the European Commission. For more information: http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32010D0087
Privacy
This information is strictly confidential and processed in compliance with the law "Informatique et Libertés" of January 6, 1978 amended in 2018 (for France), the law of December 8, 1992 relating to the protection of privacy with regard to processing of personal data (for Belgium) and carried out in accordance with the provisions of European Regulation No. 2016/679 on Data Protection, of April 27, 2017.
Personalization of advertisements
The information that the customer receives from North Star may be personalized based on the data that North Star collects on social networks. The use of North Star services (site, order, delivery) or affiliation to a North Star social network page, North Star is likely to receive information about the customer, including his public profile and his interests. social media communications or other data that you have authorized North Star to receive in connection with these applications. North Star advertisements related to the profile and information that customers publish or share (your areas of interest) may be broadcast on social networks. If the customer does not want social networks or third parties, including North Star, to collect or use information based on their profile or their activity on websites, devices or applications outside of social networks for the purpose of serving advertisements, he must refer to the conditions of these social networks in order to know the methods of setting up, unsubscribing or controlling the distribution of advertisements.
Customer rights
In accordance with the aforementioned provisions, the customer has a right of access, correction, limitation of data processing, opposition to processing, rectification and also: Right to data portability: From May 25, 2018, the Customer may, in certain circumstances, obtain personal data that it has communicated to North Star (in a structured, common and machine-readable format) in order to be able to reuse it elsewhere. Right to be forgotten: The customer can request to delete or erase his personal data in certain cases, for example if he wishes to withdraw his consent. If the personal data has been shared with third parties, North Star will notify them of the deletion where possible. At the customer's written request and within the limits of the regulations, we may indicate the subcontractors to whom we have communicated the data so that the Customer can contact them directly. Right not to be the subject of a fully automated individual decision (“profiling”): The customer has the right not to be the subject of a decision based solely on automated data processing, including profiling and which produces legal effects against him or affects his situation in a similar way, unless this type of profiling is necessary for the conclusion or performance of a contract with North Star. The customer can exercise these rights according to one of the following methods: On the website www.northstarjewellery.fr, via his customer account, the customer can modify at any time his billing and delivery address, his civility and his pass or any other requests relating to the exercise of the rights guaranteed to him by the regulations. He can also exercise any requests or requests relating to these rights by telephone or by email to Customer Service at the following number and address: northstar.aix@gmail.com /04 42 38 83 45, specifying in the subject of the letter "Right of persons". As part of certain requests, and in order to ensure the security of your personal data, you may be asked to attach proof of identity.
Payment Data Information
For the purposes of payment of your orders, bank information and data are collected by STRIPE, our payment service provider. The solution for processing your payment is outsourced to STRIPE, which is PCI-DSS certified by Visa and Mastercard. This standard is an international security standard whose objective is to ensure the protection of credit card data. The information relating to the personal data of the cardholders necessary for the management of your order and any complaints are kept for 13 months for immediate debit cards and 15 months for deferred debit cards, from the date of processing of the payment.
Loyalty Program
Subject to his consent, the Customer may subscribe to the North Star loyalty program. He can do this during his purchase journey on the site or at any time in his personal account, section "Loyalty program".
Withdrawal of consent
When consent constitutes the legal basis for the processing of personal data, the customer can always withdraw it, more particularly in the following cases: To marketing communications (newsletter type): by logging into their account, section "My Subscriptions", or by using the link in our marketing communications to automatically unsubscribe. For other purposes, such as loyalty: by sending an e-mail to or by calling Customer Service whose contact details appear in article 8. Withdrawal of consent will not affect the lawfulness of the processing carried out after this withdrawal.