Privacy Policy

At Fincut, respect for your privacy and the protection of your personal data are our priority.

This privacy policy (the “Privacy Policy”) is intended to inform you about how your personal data is processed in connection with the use of the website www.fincutmen.com (the “Site”) in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “RGPD”) and Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, in its latest version in force (together, the “Applicable Regulations”).

Personal data is data that makes it possible to identify an individual directly or by cross-referencing with other data.

We collect personal data falling within the following categories:

• Identification data (surname, first name, email and postal address, telephone number);
• Data relating to your orders;
• If you choose to log in using a third-party authentication service (for example Shop), certain data such as your name and email may be retrieved from that service. By choosing this method, you agree that the said service may communicate this data to us. We do not collect the password of your third-party account;
• Browsing data (IP address, pages viewed, date and time of connection, browser used, operating system, user ID, MAID);

Mandatory data is indicated when you provide us with your data. It is signalled by any means.

The following will have access to your personal data:

• (i) The staff of our company;
• (ii) Our subcontractors: hosting provider, newsletter sending provider, audience measurement and analysis provider, email service provider, after-sales service management provider, secure payment provider, invoicing tool, cookie management tool;
• (iii) To any authority legally entitled to be informed thereof, in particular judicial, police or administrative authorities, if they so request.

Your data is retained and stored throughout the duration of the processing on the servers of the company Shopify, located in the European Union, but Shopify may carry out international transfers to countries outside the European Union. In this context, the transfers are secured by means of the following tools:

• either the data is transferred to a country that has been the subject of an adequacy decision by the European Commission, in accordance with Article 45 of the RGPD: in this case, that country ensures a level of protection deemed sufficient and adequate to the provisions of the RGPD;
• either the data is transferred to a country whose level of data protection has not been recognised as adequate to the RGPD: in this case these transfers are based on appropriate safeguards indicated in Article 46 of the RGPD, adapted to each provider, including in a non-exhaustive manner the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules or by virtue of an approved certification mechanism;
• either the data is transferred on the basis of one of the appropriate safeguards described in Chapter V of the RGPD.

In the context of the tools we use (see the article on recipients concerning our subcontractors), your data is liable to be transferred outside the European Union. The transfer of your data in this context is secured by means of the aforementioned tools.

You can obtain a copy of the tools allowing the transfers of your data outside the European Union by contacting us at the details indicated in the article “What are your rights over your data?” below.

You have the following rights with regard to your personal data:

• Right to information: this is precisely the reason why we have drawn up this Privacy Policy. This right is provided for by Articles 13 and 14 of the RGPD.
• Right of access: you have the right to access all of your personal data at any time, by virtue of Article 15 of the RGPD.
• Right of rectification: you have the right to rectify at any time your inaccurate, incomplete or obsolete personal data in accordance with Article 16 of the RGPD.
• Right to restriction: you have the right to obtain restriction of the processing of your personal data in certain cases defined in Article 18 of the RGPD.
• Right to erasure: you have the right to require that your personal data be erased, and to prohibit any future collection thereof for the reasons set out in Article 17 of the RGPD.
• Right to define directives relating to the retention, erasure and communication of your personal data after your death.
• Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the RGPD indicates that you may withdraw your consent at any time. This withdrawal will not call into question the lawfulness of the processing carried out before the withdrawal.
• Right to data portability: under certain conditions specified in Article 20 of the RGPD, you have the right to receive the personal data that you have provided to us in a standard machine-readable format and to require its transfer to the recipient of your choice.
• Right to object: by virtue of Article 21 of the RGPD, you have the right to object to the processing of your personal data. Note however that we may maintain their processing despite this objection, for legitimate reasons or the defence of legal claims.

You can exercise these rights by writing to us at the following address: support-en@fincutmen.com

On this occasion we may ask you to provide us with additional information in the event of reasonable doubt, or even any document likely to justify your identity if the doubt persists.

For any question or request that has remained unsuccessful, you are entitled to lodge a complaint with the competent supervisory authority, in France, the Commission Nationale de l'Informatique et des Libertés (“CNIL”), located at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.