PERSONAL DATA MANAGEMENT



When you browse our site, you may provide us with personal data. We undertake to proceed prudently and fairly with the use and sharing of this data. We thank you for your trust and would like to inform you here about the use of your data and your rights.


1. Data controller


The person responsible for processing this data is:
The company WEEMATCH
Customer Relationship Service e-shop
45-47 rue Paul Bert
92100 Boulogne-Billancourt
France

If you have any questions about the operation of the data hosting service, you can contact this address by post or at the following e-mail address: escpeurope@weematch.fr.

2. Data Protection Officer


The personal information collected on the Site is processed by WEEMATCH for the purposes of customer relationship management and sales.
The Customer may contact the person in charge of personal data protection at any time at the following email address: escpeurope@weematch.fr.


3. Data collected and purposes of the processing operation


3.1 Data directly provided by the User and purpose of the processing


WEEMATCH collects the data you provide when you complete a customer account form, fill in the information for the delivery of your products.


The personal data collected by WEEMATCH may include the following data (non-exhaustive list):
- Data to identify the Customer:
Name, first name, postal address, e-mail address, telephone number, gender, and date of birth to which WEEMATCH associates a membership number.


- Data relating to the follow-up of the commercial relationship with the Client:
Product purchased, quantity, amount, delivery and/or billing address(es), telephone number, digicode, as well as any other relevant information on the delivery (tracking numbers, shipment status, etc.), purchase and service history, product returns, correspondence and/or telephone exchanges with you and our after-sales service, exchanges and comments from members, person(s) in charge of customer relations, customer reviews etc.

- Banking and financial data
During an order, PAYGREEN also collects personal data concerning your means of payment (credit card number, expiry date of the credit card, visual cryptogram, the latter not being kept, etc.).
To secure the data during online payment, WEEMATCH uses advanced encryption techniques such as TLS 1.2. TLS is a standard protocol that ensures the secure exchange of data. All data provided by the Customer during the order will be subject to encryption by PAYGREEN and WEEMATCH.


We collect information relating to the transaction carried out (transaction number, purchase details, etc.), or relating to the payment of invoices issued from or via the Site (payment terms, discounts granted, receipts, balances and unpaid).
If the Customer has previously accepted it, he/she may receive marketing e-mails from WEEMATCH for which he/she can unsubscribe by clicking on the unsubscribe link at the bottom of each e-mail received or in the "My Account" > "My Personal Information" area.
Under no circumstances does WEEMATCH ask you to confirm by e-mail the account details or those of a credit card. If the Customer receives an email allegedly sent by WEEMATCH requesting such information, he should not reply to it.
You agree to provide accurate, not fanciful, information about your identity.


3.2 Data indirectly provided by the User


Other personal data is automatically collected indirectly when you visit the Site.
This includes technical information such as your IP address and cookies, related to your browsing on the Site (for more information, please refer to the cookie management policy), traffic data and location data.
This data is necessary for the technical aspects, the proper functioning of the Site, to improve your browsing experience or to enable WEEMATCH to carry out analyses enabling it to personalise the services offered online.

4. Purposes of the Processing


We process your personal information in order to operate, provide and improve the services of "La boutique ESCP Europe" that we offer to our customers.


The purpose of this processing operation is to:
- allow you to browse the Site and use your account;
- allow you to make your purchases on the site (order, delivery of products and provision of services);
- allow you to file complaints (problem solving, service improvement);
- establish statistics relating to user navigation on the Site;
- improve your user experience (recommendation and customization).


5. Legal basis of the processing operation


The legal basis for the Processing is the consent of the data subjects and the legitimate interest of the controller, namely the performance and improvement of our services and the maintenance of the security of the Site.


6. Shelf life


Your personal data concerning your member profile as declared and/or completed on the site, as well as those concerning your browsing and/or your behaviour on the site which are communicated to you on the site will be kept for a period of three 3 years from the date of your last activity on the site or on an electronic communication medium (in particular an e-mail) of WEEMATCH as a member. At the end of this period, your member profile is considered "inactive" and will be automatically deactivated. It will therefore be up to you to create a new one for any new order.
Audience measurement statistics and your site traffic data are also kept for 3 years.
Otherwise, we retain your personal data for as long as necessary to provide you with the requested services or for other essential purposes such as fulfilling our legal obligations, resolving disputes and ensuring compliance with our regulations.


7. Recipients


WEEMATCH undertakes not to transfer, sell, or otherwise transfer Members' Personal Data to any third party without the prior written consent of the Member.
WEEMATCH will inform members in advance of any use of personal data for commercial prospecting purposes on behalf of third parties, and, if required by law, your consent will be obtained or a possibility of refusal will be offered to you before any data is transmitted.
In the course of its activity, WEEMATCH may communicate personal data only to persons linked to the operation of the site (logistics, marketing and technical subcontractors and providers of payment methods or payment security).


8. Rights of the data subjects


In accordance with the Data Protection Act of 6 January 1978 amended by Act No. 2018-493 of 20 June 2018, any person concerned by the processing of personal data has the right, under the conditions and within the limits provided for by the regulations, to request the controller to give access to his personal data, to rectify or delete them, to limit the processing concerning him, and to organise the fate of his data after his death, to oppose the processing of his data, to the right to portability.


You may withdraw your consent at any time, it being specified that the withdrawal of consent does not have a retroactive effect on the processing already carried out.
If you request the limitation or deletion of some or all of your personal data, we may not be able to provide you with all the services offered to our users.
You can exercise your rights by proving your identity and contacting:
WEEMATCH
Customer Relationship Service e-shop
45-47 rue Paul Bert
92100 Boulogne-Billancourt
France

Or to the following e-mail address: escpeurope@weematch.fr


In addition, if you consider that the processing operation concerning you constitutes a violation of the regulations, you have the right to lodge a complaint with the CNIL or the supervisory authority of the State where you are habitually resident, your place of work, or the place where the violation was allegedly committed.