Privacy Policy

 

Karmafeel respects your privacy.

 

We ask you to read this privacy policy carefully to understand how your personal data is collected, processed and stored during your use of this website Karmafeel, accessible via l’url https://karmafeel.com. 

The term “personal data” refers to any information relating to a natural person and allowing them to be identified, directly or indirectly, from a single piece of data or from the cross-referencing of a set of data.

All personal data collected on this website are processed under the responsibility of the company Karmafeel SARL (LLC, OÜ), LLC registered in the Trade and Companies Register of Lyon under the number 882833585, and having its France office at 4 rue de la République, 69001 LYON and its head office at Mannimae/1 Pudisoo Kula Harju County, 74626 KUUSALU VALD, ESTONIA and in compliance with Law No. 78-17 of January 6, 1978 relating to computing, files and freedoms, in its current version, as well as Regulation (EU) 2016/679 of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data.

Within the meaning of the regulations applicable to personal data, Karmafeel SARL (OÜ) is therefore responsible for the data processing.

This privacy policy describes:

  1. How Karmafeel uses your personal data
  2. How Karmafeel shares your personal data
  3. How Karmafeel protects your personal data
  4. Where Karmafeel hosts and transfers your personal data
  5. How you can exercise your rights relating to your personal data
  6. Cookies management
  7. Privacy Policy Updates
  8. How to contact us

 I. How Karmafeel uses your personal data 

Karmafeel may use your personal data for the following purposes:

  1. Create your customer account on this website
  2. Manage orders for products and/or services
  3. Carry out the actions necessary for the management of contracts, invoices and customer relationship monitoring
  4. Publish and manage your reviews and/or comments left on the website
  5. Send you our newsletter, if you are subscribed to it
  6. Respond to your contact request made from our website
  7. Establish a loyalty program
  8. Offer you advertisements and tailored content
  9. Create a file of users, prospects and customers
  10.  Develop commercial and attendance statistics
  11.  Manage unpaid debts and possible disputes
  12.  Comply with our legal obligations

 

The data collected is necessary for the execution of the contract concluded with Karmafeel when you use our website to order the products and/or services available for sale on the site.

When you voluntarily provide us with personal data, the collection of your personal data is based on the following legitimate interest: to better respond to your requests for information.

The processing of your personal data in order to send you our newsletter is, however, based solely on your consent to receive our newsletter, which you can withdraw at any time. If you do not consent to the sending of the newsletter, please note that this will not prevent you from creating your customer account and placing orders on our website.

 

II. How Karmafeel shares your personal data

Within Karmafeel , and with regard to each processing purpose, personal data concerning you are collected, processed and stored by authorized personnel of Karmafeel, only within the framework of their respective skills, and in particular by customer service, the marketing department and the IT department.

We do not share personal data with other companies, organizations and individuals unless one of the following circumstances applies:

(1) Sharing with prior consent: after obtaining your consent, Karmafeel will share the information you have authorized with the specific third parties or categories of third parties provided when collecting your consent.

(2) Sharing with our service providers : Karmafeel may also disclose your information to companies that provide services for us or on our behalf. These service providers include companies that offer IT services, such as our hosting provider or our email sending service provider, delivery services for our products, or that offer marketing activities on our behalf. These service providers may use your information solely for the purpose of providing services to you on behalf of Karmafeel.

(3) In fulfillment of a legal obligation, sharing in accordance with laws and regulations : Karmafeel, may share your information as required by law and regulation, to resolve legal disputes, or as required by judicial or administrative authorities under the law.

Karmafeel will ensure the legality of any sharing of personal data via data processing clauses with the companies with which your personal data is shared, requiring them to comply with this privacy policy and take appropriate security and confidentiality measures when processing personal data.

 

III. How Karmafeel protects your personal data

Karmafeel attaches great importance to the security of your personal data and has adopted industry standard practices to protect your personal data and prevent unauthorized access, disclosure, use, modification, damage or the loss of this information.

We have also taken the necessary precautions toof preserve, through our host, the security and confidentiality of the data, and in particular prevent it from being distorted, damaged or communicated to unauthorized persons.

Karmafeel also adopts the following organizational measures:

(1) We take reasonable and feasible measures to ensure that the personal data collected is minimal and relevant as necessary, having regard to the purposes for which it is processed.

(2) We retain your personal data for the period strictly necessary for the purpose of the processing, unless retention of your data is required or permitted by law. For example, we keep data related to the execution of your orders for the period required by law for the retention of accounting records, namely a maximum of 10 years from the financial year concerned.

(3) We deploy access control mechanisms to ensure that only authorized personnel can access your personal data.

In the event of a personal data breach, Karmafeel will comply with the legal and regulatory requirements applicable to the notification of personal data breaches to the competent supervisory authorities and/or data subjects.

 

IV. Where Karmafeel hosts and transfers your personal data

Your personal data will be hosted within the hosting infrastructures of our host, FastComet, located in Germany.

 

V. How you can manage your rights relating to your personal data

You have a right of access, rectification, erasure, limitation, opposition concerning the processing of your personal data as well as the right to define directives relating to the fate of your data after your death and the right to the portability of your personal data.

The CNIL defines personal data as “any information relating to an identified or identifiable natural person. But because they concern people, they must retain control over them.”

You also have a right of appeal to the Commission Nationale Informatique et Libertés for France and to a competent supervisory authority for any other Member State depending on your habitual residence, your place of work or the place where the violation of your rights would have been committed if you consider that the processing of your data does not comply with the applicable texts. This recourse may be exercised without prejudice to any other recourse before an administrative or judicial court which also constitutes a right available to you.

You can contact us at any time at the addresses indicated in the “How to contact us” section below in order to exercise your rights regarding personal data under the conditions set by the applicable regulations. You must indicate which right you intend to exercise as well as all the necessary details so that we can respond to your request.

These rights are exercised under the conditions set by the applicable regulations.

  • The permission to access means that you can ask us at any time to tell you whether we are processing personal data concerning you and, if so, to tell you which personal data are concerned as well as the characteristics of the processing(s) carried out.
  • The right of rectification means that you can ask us to rectify your personal data when it is inaccurate. You can also request that your personal data, if incomplete, be completed to the extent that this is relevant to the purpose of the processing in question.
  • The right to erasure means that you can request to erase your personal data in particular when:
  1. Their conservation is no longer necessary in view of the purposes for which they were collected;
  2. Your personal data is processed on the basis of your consent, you wish to withdraw this consent, and there is no other legal basis which could justify the processing;
  3. You have objected to the processing of your personal data and you therefore wish them to be erased;
  4. Your personal data has been subject to unlawful processing;
  5. Your personal data must be erased to comply with a legal obligation which is provided for either by European Union law or by French law.
  • The right to limitation means that you can ask us to restrict the processing of your personal data:
  1. When you contest the accuracy of your personal data for a period allowing us to verify the accuracy thereof;
  2. When following processing established as non-compliant, you prefer limitation of processing to complete erasure of your personal data;
  3. When we no longer need your personal data for the purposes of processing but they are still necessary for the establishment, exercise or defense of legal claims;
  4. When you have objected to the processing of your personal data and you wish to limit the processing for the period allowing us to verify whether the legitimate reason you invoke is justified.

Restriction of processing means that the processing of your personal data will then only mean the storage of your corresponding personal data. We will then no longer carry out any further operations on the personal data in question.

  • The right to object means that you can object to the processing of your personal data, when this processing is based on the pursuit of the legitimate interest of Karmafeel. The right to object is exercised subject to providing a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons justifying continuation in accordance with the applicable regulations.
  • The right to define directives relating to the fate of your data after your death allows you to make known your instructions regarding the retention, erasure and communication of your personal data after your death.
  • The right to portability means that you can ask us, under the conditions set by the applicable regulations, to receive your personal data in a structured, commonly used and machine-readable format, and to transmit them to you, or to ask us to transmit them directly to a third party of your choice when legally and technically possible.

When we process your personal data on the basis of your consent, you finally have the option to withdraw your consent at any time by contacting the addresses indicated in the ‘How to contact us’ section or by clicking on the unsubscribe link present in each of our communications.

However, the withdrawal of your consent does not call into question the validity of the processing carried out before this withdrawal.

 

VI. Cookies management

The Site may use the technique of “cookies” defined by the CNIL as follows:

“A cookie is a small file stored by a server in a user’s terminal (computer, telephone, etc.) and associated with a web domain (that is to say in the majority of cases to all pages of the same website). This file is automatically returned on subsequent contacts with the same domain.

Cookies have multiple uses: they can be used to memorize your customer identifier with a merchant site, the current content of your shopping cart, the language in which the web page is displayed, an identifier allowing your navigation to be traced for statistical or advertising purposes, etc. “.

Information from the official CNIL website (https://www.cnil.fr/fr/glossaire)

These cookies aim to facilitate user navigation and improve the quality of the service offered, by collecting statistical and traffic information.

The use of these cookies is brought to the user’s attention through a banner asking for their consent. If the user consents, this consent is considered valid for a maximum period of thirteen (13) months.

If the user does not consent to the use of cookies, the Publisher cannot guarantee an optimal experience on the Site.

 

VII. Updates to this privacy policy

Karmafeel reserves the right at any time to modify or update, in whole or in part, this confidentiality policy, due to the modification of the regulations applicable to the protection of personal data or the data processing carried out.

Any substantial modification of the confidentiality policy will be notified to you by e-mail when you have provided us with a valid e-mail address and will be published on the website. We recommend that you regularly read this confidentiality policy in order to have full knowledge of our commitments in terms of security and protection of your personal data.

 

VIII. How to contact us

If you have any questions, comments or suggestions, please contact us by visiting the contact us page or submitting them to contact@karmafeel.com.

Or by postal mail to 

Karmafeel France, 4 rue de la République, 69001 LYON

Karmafeel OÜ, Mannimae/1 Pudisoo Kula Harju Maakond, 74626 KUUSALU VALD, ESTONIA.

If you are not satisfied with the response provided by Karmafeel to a request to exercise rights in accordance with article V above or you wish to report a violation of the applicable data protection regulations, you have the right to lodge a complaint with the CNIL by mail (CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or with the data protection authority of the country in which you usually reside or work.