Article 1: Preamble
The purpose of this privacy policy is to inform users of the site:
- How their personal data is collected. Personal data is any information that identifies a user. As such, it can be: his full name, his age, his postal or email address, his location or his IP address (non-exhaustive list);
- The rights they have regarding this data;
- The person responsible for processing the personal data collected and processed;
- The recipients of this personal data;
- On the site’s cookie policy.
Article 2: Principles relating to the collection and processing of personal data
In accordance with Article 5 of European Regulation 2016/679, personal data are:
- Treated lawfully, fairly and transparently with respect to the data subject;
- Collected for specific purposes (cf. Article 3.1 hereof), explicit and legitimate, and not subsequently processed in a manner incompatible with these purposes;
- Adequate, relevant and limited to what is necessary for the purposes for which they are processed;
- Accurate and, if necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that is inaccurate, with regard to the purposes for which it is processed, is erased or rectified without delay;
- Kept in a form that allows the identification of data subjects for a period not exceeding that necessary for the purposes for which they are processed;
- Processed in such a way as to ensure appropriate security of the collected data, including protection against unauthorised or unlawful processing and against loss, destruction or accidental damage, using appropriate technical or organisational measures.
- Processing is lawful only if, and to the extent that, at least one of the following conditions is met:
- The data subject has consented to the processing of his personal data for one or more specific purposes;
- The processing is necessary for the performance of a contract to which the data subject is a party or for the execution of pre-contractual measures taken at the request of the data subject;
- The processing is necessary to comply with a legal obligation to which the controller is subject;
- The processing is necessary to safeguard the vital interests of the data subject or another natural person;
- The processing is necessary for the execution of a mission of public interest or within the exercise of the public authority of which the data controller is invested;
- The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, particularly where the person concerned is a child.
Article 3: Personal data collected and processed in the context of browsing the site
Article 3.1: Data collected
The personal data collected as part of our activity are as follows:
- Your email address
- Your first and last names
- Information if you are over 18 years of age
- Your delivery and billing addresses
- Your phone number
- Your purchase history
- The history of your contacts with us
The collection and processing of this data is for the following purpose(s):
- Keep you informed (e) of our news and promotions if you subscribe to our newsletter
- Send you the tracking elements of your orders
- Allow the processing, billing and delivery of your orders
When you use our site, the following data are automatically collected:
- Visit data (page views, time spent, etc.). This data is completely anonymized.
Article 3.2: Retention of data
They are kept by the controller under reasonable security conditions, for a period of 5 years.
The Company may retain certain personal data beyond the deadlines set out above in order to fulfil its legal or regulatory obligations.
Article 3.3: Data hosting
The website www.mira-luna.com is hosted by:
OVH SAS with capital of €10,059,500
RCS Lille Métropole 424 761 419 00045 Head office: 2 rue Kellermann – 59100 Roubaix – France
Article 4: Responsibility for data processing and protection
The personal data are collected by Domaine Mira Luna, SAS with a capital of € 50,000 whose registration number is Draguignan B 502 035 223.
The person responsible for the processing and protection of personal data may be contacted as follows:
By post to: Domaine Mira Luna, Lieu-dit Vireiguet, 83670 Chateauvert, France;
By email: contact( @ )mira-luna.com
Article 5: User rights in relation to data collection and processing
Any user concerned by the processing of his personal data may avail himself of the following rights, in application of the European regulation 2016/679 and the Data Protection Act (Law 78-17 of 6 January 1978):
- Right of access, rectification and right to erasure of data (laid down respectively in Articles 15, 16 and 17 of the GDPR);
- Right to data portability (Article 20 GDPR);
- Right to limitation (Article 18 GDPR) and objection to data processing (Article 21 GDPR);
- Right not to be the subject of a decision based exclusively on an automated process;
- Right to determine the fate of data after death;
- Right to refer to the competent supervisory authority (Article 77 GDPR).
To exercise your rights, please send your letter to Domaine Mira Luna, Lieu-dit Vireiguet, 83670 Chateauvert, France or by email to contact( @ )mira-luna.com
In order for the data controller to be entitled to his request, the user may be required to provide him with certain information such as: his first and last names, his e-mail address as well as his account, personal space or subscriber number.
Visit cnil.fr for more information on your rights.
Article 6: Conditions for changing the privacy policy
The publisher of the mira-luna.com website reserves the right to modify this Policy at any time to ensure that users of the website comply with the law in force.
Any changes may not affect previous purchases made on the site, which remain subject to the Policy in force at the time of purchase and as accepted by the user when validating the purchase.
The user is invited to read this Policy every time he uses our services, without it being necessary to inform him formally.
This policy was published on May 14, 2024.
