The General Data Protection Regulation (GDPR) is a European Union regulation that governs how organisations collect, store, and process personal data. At Cadeau Élégant, we are committed to full compliance with GDPR and to protecting your fundamental right to data privacy.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Be Informed
You have the right to know how your personal data is being collected and used. This information is provided in our Privacy Policy and at the point of data collection.
Right of Access
You can request a copy of all personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will make corrections within one month of notification.
Right to Erasure
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, including:
- When the data is no longer necessary for its original purpose
- When you withdraw consent
- When you object to processing and there are no overriding legitimate grounds
- When the data has been unlawfully processed
Right to Restrict Processing
You can request that we limit how we use your data while any concerns are being investigated or resolved.
Right to Data Portability
You can request your personal data in a structured, commonly used, machine-readable format, and have it transferred to another data controller.
Right to Object
You can object to processing based on legitimate interests, direct marketing, or processing for research and statistical purposes.
Rights Related to Automated Decision Making
You have rights regarding automated decision-making and profiling. We do not currently use automated decision-making that produces legal effects concerning you.
How We Comply
Our GDPR compliance measures include:
- Data minimisation: We only collect data necessary for our services
- Purpose limitation: Data is used only for specified, explicit purposes
- Accuracy: We keep personal data accurate and up to date
- Storage limitation: Data is kept only as long as necessary
- Security: Appropriate technical measures protect your data
- Accountability: We document our compliance measures
Data Processing Activities
We process personal data for the following purposes:
- Service delivery and consultation management
- Order processing and delivery coordination
- Customer communication and support
- Website analytics and improvement
- Legal and regulatory compliance
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this by up to two additional months, but we will inform you of any extension within the first month.
There is no fee for exercising your rights in most cases. However, we may charge a reasonable fee for manifestly unfounded or excessive requests, or refuse to comply with such requests.
Supervisory Authority
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the relevant supervisory authority. In France, this is:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
Contact Us
For any GDPR-related enquiries or to exercise your rights:
Cadeau Élégant
15 Rue de la Paix
75002 Paris, France
Email: [email protected]