Privacy Policy

At Fincut, respecting your privacy and protecting your personal data are our priority.

This privacy policy (the “Privacy Policy”) is intended to inform you about how your personal data is processed in connection with the use of the website www.fincutmen.com (the “Site”) in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and Law No. 78-17 of 6 January 1978 relating to data processing, files and freedoms in its latest version in force (together, the “Applicable Regulations”).

Personal data is data that makes it possible to identify an individual directly or by cross-referencing it with other data.

We collect personal data falling into the following categories:

• Identification data (surname, first name, email and postal address, telephone number);
• Data relating to your orders;
• If you choose to log in using a third-party authentication service (for example, Shop), certain data such as your name and email address may be retrieved from that service. By choosing this method, you agree that said service may communicate this data to us. We do not collect the password for your third-party account;
• Browsing data (IP address, pages viewed, date and time of connection, browser used, operating system, user ID, MAID);

Mandatory data is indicated when you provide us with your data. It is indicated by any means.

Will have access to your personal data:

• (i) Our company's personnel;
• (ii) Our processors: hosting provider, newsletter distribution provider, audience measurement and analytics provider, email service provider, after-sales service management provider, secure payment provider, billing tool, cookie management tool;
• (iii) To any authority legally entitled to access them, in particular judicial, law enforcement, or administrative authorities, if they so request.

Your data are retained and stored for the entire duration of the processing on Shopify's servers, located in the European Union, but Shopify may carry out international transfers to countries outside the European Union. In this context, the transfers are secured through the following tools:

• either the data are transferred to a country covered by an adequacy decision of the European Commission, in accordance with Article 45 of the GDPR: in this case, that country provides a level of protection deemed sufficient and adequate under the provisions of the GDPR;
• either the data are transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, these transfers are based on appropriate safeguards indicated in Article 46 of the GDPR, adapted to each service provider, including, without limitation, the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules, or pursuant to an approved certification mechanism;
• either the data are transferred on the basis of one of the appropriate safeguards described in Chapter V of the GDPR.

As part of the tools we use (see the section on recipients concerning our processors), your data may be transferred outside the European Union. The transfer of your data in this context is secured through the aforementioned tools.

You may obtain a copy of the tools used to transfer your data outside the European Union by contacting us at the contact details indicated in the section “What are your rights regarding your data?” below.

You have the following rights concerning your personal data:

• Right to information: this is precisely why we have drawn up this Privacy Policy. This right is provided for by Articles 13 and 14 of the GDPR.
• Right of access: you have the right to access all of your personal data at any time, pursuant to Article 15 of the GDPR.
• Right to rectification: you have the right to rectify your inaccurate, incomplete or outdated personal data at any time in accordance with Article 16 of the GDPR.
• Right to restriction: you have the right to obtain restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
• Right to erasure: you have the right to require that your personal data be erased and to prohibit any future collection of it for the reasons set out in Article 17 of the GDPR.
• Right to define directives concerning the retention, erasure and communication of your personal data after your death.
• Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you may withdraw your consent at any time. This withdrawal will not affect the lawfulness of processing carried out before the withdrawal.
• Right to data portability: subject to certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to require its transfer to a recipient of your choice.
• Right to object: pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue processing it despite this objection, on legitimate grounds or for the establishment, exercise or defence of legal claims.

You may exercise these rights by writing to us at the following address: support@fincutmen.com

On this occasion, we may ask you to provide us with additional information in the event of reasonable doubt, or even any document capable of substantiating your identity if the doubt persists.

For any question or request that remains unsuccessful, you have the right to lodge a complaint with the competent supervisory authority, in France, the Commission Nationale de l'Informatique et des Libertés ("CNIL"), located at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.