IDENTIFY
The website www.daydream1820.com is published and operated by the company DAYDREAM 1820, a simplified joint stock company under French law with share capital of €1,000, whose registered office is located at 57 rue Judaique 33000 Bordeaux, France, registered in the Bordeaux Trade and Companies Register under number 938 189 016,
Legal representative: Manuel Tocanne
Intra-community VAT number: FR25938189016

CONTACT
Our customer relations department can be reached at contact@daydream1820.com

ACCOMMODATION
The site is hosted by Shopify.

PERSONAL DATA - PRIVACY POLICY

PREAMBLE
This privacy policy (hereinafter the "Policy") is addressed to you, as a user of the website https://daydream1820.com (hereinafter the "SITE"), and aims to inform you of the manner in which your personal information may, where applicable, be collected and processed by DAYDREAM 1820.
Respect for your privacy and your Personal Data is a priority for us and we undertake to process your Data in strict compliance with the Data Protection Act of 6 January 1978 (hereinafter the “LIL Act”) as amended and the General Data Protection Regulation (EU) of 27 April 2016 (hereinafter the “GDPR”).
Personal data (“Personal Data” or “Data”) means any information relating to an identified or identifiable natural person:
- directly (name, first name, email address) or
- indirectly (IP address, geolocation).
In any event, we undertake to respect the following two essential principles:
- You remain in control of your Personal Data;
- Your Data is processed in a transparent, confidential and secure manner.
DAYDREAM 1820 may modify the Policy at any time, and therefore invites you to consult it regularly. In the event of a substantial modification to the Policy concerning your rights, DAYDREAM 1820 will bring them to your attention as soon as possible.

1. IDENTITY & CONTACT DETAILS OF THE DATA CONTROLLER
The person responsible for processing your data is the company DAYDREAM 1820, a simplified joint stock company with share capital of €1000, registered in the Bordeaux Trade and Companies Register under number 938 189 016.
When using these services, DAYDREAM 1820 is required to process, as data controller, personal data relating to visitors to the website, as well as customers and prospects of the service (the “Personal Data”).

2. COLLECTION & ORIGIN OF DATA
DAYDREAM 1820 collects Personal Data in several ways:

• directly from you
- when creating a customer account, we record all the information necessary to place an order: name, first name, email address, postal address, telephone number;
- when you subscribe to our newsletter.
- when you use our contact form: data appearing on the form (email address, as well as any personal data that you choose to include in the free text field)
- when you use our website: data enabling us to identify and authenticate you (connection logs, IP address), data relating to purchases, your browsing history on the site, dates and times of consultation of the site, location data;

• indirectly:
- by social networks such as Facebook, Instagram, Twitter: data exchanges may occur between DAYDREAM 1820 and social networks, for example when you consult the website while connected to these social networks on your device. These exchanges can be avoided by disconnecting from social networks before consulting the DAYDREAM 1820 website;
- by cookies and trackers. To learn more about this, please contact us at contact@daydream1820.com for more information about our cookie policy.

3. LEGAL BASIS & PURPOSE OF PROCESSING
DAYDREAM 1820 uses your data:

• where necessary for the performance of our contract with you or the performance of pre-contractual measures taken at your request, including:
- creation of your customer account;
- management of your orders, their tracking and their invoicing;
- product availability alert.
- management of communications and monitoring of exchanges, particularly in the context of possible disputes;
- management of the sending of newsletters and commercial solicitations by electronic means and to your mobile phone number;
- monitoring your satisfaction;
- management of your possible requests relating to the exercise of the rights available to you under the GDPR.

• Where necessary to enable us to comply with our legal and regulatory obligations, including:
management of the risk of fraudulent use of your data. DAYDREAM 1820 may take any measures that we deem useful for securing your data and our information systems as well as for defending our interests. These measures may lead, where appropriate, to the suspension of your online account;
management of any disputes, in particular relating to the recovery of sums that you may owe us and the management of payment incidents;
meet our applicable legal or regulatory obligations such as requests from the administration (for example, from the tax administration).

• When we have a legitimate interest in promoting and improving our services, for operations relating to commercial prospecting or carrying out studies, while respecting your rights, and in particular:
When you have visited our site, we record your visits to display advertising to you when you browse other websites. Neither the advertising network nor the third-party sites displaying our advertisements have access to your personal data. If you no longer wish to see our advertisements, you can delete the cookies from your web browser: https://www.comment-supprimer.com/les-cookies/
In order to improve our service and the relevance of the offers we propose, we use software and services operated by third-party providers that allow us to better understand our activity. As such, we provide these tools with data on our customer base, your browsing history on our site and information on the products ordered.

• When you have given your consent. In this case, you can withdraw your consent at any time, without this having retroactive effect. This is particularly the case for our newsletters, from which you can unsubscribe at any time by clicking the “unsubscribe” link located at the bottom of the newsletters or directly on the site in your my account / your personal data area. The effective date is immediate.

4. RECIPIENTS OF YOUR DATA
Your data is accessible to authorized persons within DAYDREAM 1820.
Within the limits of their respective attributions and for the purposes recalled in article 3, the main persons who will be likely to have access to your Data are the following:
DAYDREAM 1820’s authorized internal staff (administrative, accounting, marketing, sales, logistics and IT services);
External service providers responsible for managing the SITE and its hosting
External service providers responsible for the transport and delivery of the products you have ordered;
External service providers responsible for customer relations
External service providers managing the SITE's payment methods
External service providers sending confirmation emails following product orders
External service providers in the context of DAYDREAM 1820’s commercial prospecting
If applicable, the relevant courts, mediators, accountants, auditors, lawyers, bailiffs, debt collection companies, police or gendarmerie authorities in the event of theft or judicial requisition, assistance;
External service providers may place cookies on your devices (computers, tablets, mobile phones, etc.) when you consent to this.
Your Data is not communicated or exchanged with any person other than those mentioned above.

5. DATA RETENTION DURATION
We only keep your Data for the time necessary to carry out the operations for which they were collected, except when the law provides for a different retention period.
You acknowledge that the Data that you communicate to us and which are stored in our information systems are accurate and constitute proof of your identity.
For the management and monitoring of your ACCOUNT, your contracts, orders, deliveries and invoices: for the duration of the contractual relationship and then for 3 years from the end of the commercial relationship in the archive database, for evidentiary purposes.
To ensure the proper functioning and continuous improvement of our website and its features: 1 year. Beyond this period, the raw traffic data associated with an identifier is either deleted or anonymized.

6. YOUR RIGHTS
In accordance with the Data Protection Act and the GDPR, you have the following rights:
right of access (article 15 GDPR), rectification (article 16 GDPR), updating, completeness of your Data: right to the erasure of your Personal Data (article 17 GDPR), when they are inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or conservation is prohibited
right to withdraw your consent at any time (article 13-2c GDPR)
right to limit the processing of your Data (article 18 GDPR)
right to object to the processing of your Data (article 21 GDPR)
right to portability of the Data that you have provided to us, when your Data is subject to automated processing based on your consent or on a contract (article 20 GDPR)
right to define the fate of your Data after your death and to choose whether or not we communicate your Data to a third party that you have previously designated.
In the event of death and in the absence of instructions from you, we undertake to destroy your Data, unless their retention proves necessary for evidentiary purposes or to meet a legal obligation, in which case we will keep them in the form of archives.
You can exercise your rights by sending an email to the following address: contact@daydream1820.com

In order to allow us to identify you quickly and respond to you, you will attach to your request all elements allowing us to establish your identity (in particular customer number or request made directly via your customer account). A response will then be sent to you within 1 month following receipt of the request. In certain cases, linked to the complexity of the request or the number of requests, this period may be extended by 2 months.
You can also contact the National Commission for Information Technology and Civil Liberties (CNIL), the regulatory authority responsible for enforcing regulations on the protection of personal data in France, online at https://www.cnil.fr/fr/agir or by post at the following address: National Commission for Information Technology and Civil Liberties, 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX.

7. CONNECTION DATA AND COOKIES
We use connection data on our website (date, time, Internet address, your telephone protocol, pages consulted) and cookies (small files saved on your computer) allowing us to identify you, to memorize your consultations, in particular relating to the pages consulted, to measure the uses of our website.
You can consent, refuse or choose the type of cookies you accept to be stored on your computer terminals.

8. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
Given the nature of its activity, DAYDREAM 1820 is required to transfer your Data to subcontractors located outside the European Union.
We implement security measures to control any transfer outside the EU and ensure that our service providers respect the confidentiality of your Data.

9. SECURITY
DAYDREAM 1820 and its potential subcontractors undertake to implement all technical and organizational measures to ensure the security of our processing of personal Data and the confidentiality of your Data, in application of the Data Protection Act and the European General Data Protection Regulation (GDPR)