PRIVACY POLICY AND COOKIES
Concerned about protecting your privacy, La Redoute is committed to ensuring the highest level of protection for your personal data.
As part of its activities, La Redoute provides its customers with an e-commerce service accessible via the www.laredoute.ch website, a mobile site m.laredoute.ch and an application compatible with smartphones and tablets on iOS and Android.
To deliver its service, La Redoute collects personal data on individuals. Data is collected on the La Redoute website, on mobile applications, by telephone, in stores or when receiving paper orders.
The purpose of this section is to provide you with full information on how La Redoute uses the personal data of its customers.
La REDOUTE, as Data Controller, undertakes to comply with the regulations governing the protection of personal data.
In the personal data collection forms on the site or in paper format, the Customer is informed whether or not data collection is mandatory. If a mandatory data field is not provided, La Redoute will not be able to provide its services.
1. WHO COLLECTS PERSONAL DATA?
The company that collects personal data and implements data processing is :
La Redoute Suisse SA, with capital of CHF 2,000,000, registered with the Registre du Commerce du canton de Vaud under number CHE-106.841.381, whose registered office is located at rue de la Gare 13, Montreux (1820).
2. WHY AND FOR WHAT PURPOSES DO WE COLLECT YOUR PERSONAL DATA?
2.1 Legal basis for processing
Users' privacy is protected by regulations. Under data protection regulations, La Redoute is only authorized to use the personal data of its users if it has a valid legal basis. La Redoute must ensure that it has one or more of the following legal bases:
- the performance of a contract (for example, to process and fulfill an order for goods or to open and manage a La Redoute account), or ;
- the fulfilment of a legal obligation (e.g. keeping invoices), or ;
- when it is in the legitimate interest of La Redoute, or ;
- When the user has given his consent.
A “legitimate interest” of La Redoute must not run counter to the rights and freedoms of users. Examples of legitimate interests mentioned in the RGPD include fraud prevention, direct marketing and data sharing within a group of companies (such as La Redoute).
2.2 Legal basis of La Redoute
La Redoute collects and records personal data from its customers for the following purposes:
xxx
For processing operations requiring consent, the data subject may withdraw his or her consent by sending a request to info@redoute.ch.
xxx
For processing operations requiring consent, the data subject may withdraw his or her consent by sending a request to info@redoute.ch.
3. TO WHOM IS YOUR DATA TRANSMITTED?
Your data is transmitted to La Redoute's partners who may process the data on their behalf (recipients) or solely on behalf of and in accordance with La Redoute's instructions (subcontractors).
The recipients of the data are :
- banking institutions
- Police authorities in the context of judicial requests concerning the fight against fraud
- Commercial partners, in particular marketing and advertising agencies.
La Redoute also uses subcontractors for the following operations:
- secure payment on websites and mobile applications
- fraud prevention and debt collection
- custom furniture manufacturing
- shipping your orders and parcels
- management of chat, telephone calls, any recordings thereof and the sending of postal mail
- Personalization of site content and mobile applications
- Technical maintenance and development of La Redoute's website, internal applications and information system.
- Collecting customer reviews
- Dispatch of sales prospecting emails and mobile notifications
La Redoute may also share personal data if the structure of the La Redoute group changes in the future:
- In the event of a sale, transfer or merger of the business or part of it, or if La Redoute acquires or merges with another company.
- If such a transaction takes place, La Redoute will ensure that the other party complies with data protection legislation.
4. WHAT ARE MY DATA RIGHTS?
4.1. What are my rights?
Any individual using the service may exercise the following rights:
- A right of access
- A right of rectification,
- A right to object to and delete the processing of his/her data
- A right to object to profiling
- A right to limit processing,
- A right to data portability
Finally, when La Redoute detects a personal data breach likely to generate a high risk for your rights and freedoms, you will be informed of this breach as soon as possible.
4.2 How to exercise these rights
These rights may be exercised by contacting the Redoute company that collected the personal data in the following manner:
By post, by writing to us at the following address:
La Redoute Suisse, Service Relations Clients - Rue de la Gare 13, 1820 Montreux , indicating your surname, first name, address, e-mail address and, if possible, your customer reference in order to speed up processing of your request.
By e-mail, by writing to us at info@redoute.ch
The request must be accompanied by proof of identity.
La Redoute will send you a reply within 1 month of exercising your right. In certain cases, due to the complexity of the request or the number of requests, this period may be extended by 2 months.
4.3. What are the consequences of exercising the right to object to profiling?
In the event of exercising the right to object to marketing profiling, the user is informed that he/she will continue to receive commercial solicitations, but these will be less relevant and will no longer be targeted according to the user's centers of interest.
4.4. What happens next?
In the event of no response or an unsatisfactory reply, the data subject may refer the matter to the supervisory authority in his or her country of residence:
- In France, the CNIL: https://www.cnil.fr/
- In the UK, the ICO: https://ico.org.uk/
- In Spain, the AEPD: http://www.agpd.es/portalwebAGPD/index-idfr-idphp.php
- In Portugal, the CNPD: https://www.cnpd.pt/index.asp
- In Belgium, the CPVP: https://www.privacycommission.be/fr
- In Switzerland, PFPDT: https://www.edoeb.admin.ch/edoeb/de/home.html
5. WHAT HAPPENS TO MY DATA AFTER MY DEATH?
The User may formulate directives concerning the conservation, deletion and communication of his/her personal data after his/her death.
6. WILL MY DATA BE SENT OUTSIDE SWITZERLAND?
You are informed that your personal data may be transferred for the purposes defined above to companies located in countries outside Switzerland that do not provide an adequate level of protection for personal data.
Prior to any transfer outside Switzerland, and in accordance with current regulations, La Redoute implements all procedures required to obtain the necessary guarantees for the security of such transfers.
Transfers outside Switzerland may be carried out in particular in the context of the following activities:
Activity Country of destination of data Supervision of data transfer
Logistical operations Australia Standard contractual clauses
Data processing for social networks
United States Privacy Shield / Standard contractual clauses
For further information on cross-border data flows, please contact our Data Protection Officer.
7. HOW LONG IS MY DATA KEPT?
La Redoute has established precise rules concerning the length of time it keeps Users' personal data.
7.1. General rules concerning the management of the commercial relationship:
To calculate the most appropriate retention period, La Redoute distinguishes between :
- persons referred to as “prospects” who have never made a purchase from La Redoute and its partners
- customers” who have made at least 1 purchase.
A separate retention period will be applied to prospects and customers.
For prospects, the starting point of the retention period is the creation of the account.
For customers, the starting point of the retention period is the customer's last purchase from La Redoute.
7.2. Specific rules concerning certain data processing operations:
For certain types of processing, data retention is subject to specific retention periods.
For more information on the retention periods applied by La Redoute, please contact the Data Protection Officer (see point 12).
8. WHAT SECURITY MEASURES ARE TAKEN TO PROTECT MY DATA?
8.1. General rules
As the data controller, La Redoute takes all necessary precautions to protect the security and confidentiality of data and, in particular, to prevent it from being distorted, damaged or accessed by unauthorized third parties.
La Redoute has deployed a robust security system to ensure the utmost security of the data collected and to detect data breaches. This includes the physical security of the buildings housing our systems, computer system security to prevent external access to your data, and having secure copies of your data.
When using subcontractors, La Redoute ensures that they comply with data protection rules.
8.2. Rules applicable to bank and credit card data
To ensure payment security, La Redoute uses the services of a PCI-DSS-certified service provider, Stripe. PCI-DSS is an international security standard whose objectives are to ensure the confidentiality and integrity of cardholder data, and thus to secure the protection of card and transaction data.
When you place a credit card order with La Redoute, our order-taking system connects in real time with the Stripe system, which collects your data and carries out various checks to prevent abuse and fraud. The data is stored on Stripe's servers and is not transmitted to La Redoute's servers at any time. Stripe requests authorization from the bank and sends us a transaction number, which enables us to carry out transactions up to the amount of the authorization.
To avoid having to re-enter your bank details for future orders, you can choose to have your bank cards associated with your online account by ticking the appropriate acceptance box. They are stored securely with Stripe. You can consult the list of your registered cards (in hidden mode), or delete all or part of their content, in the “Payment methods” section of the “My purchases” section of “My account”. In this case, your deleted cards will no longer appear in your online account or on future orders.
In order to be able to debit the account at the time of invoicing or to credit it following a return, Stripe keeps the bank details associated with the authorization number for the time necessary to complete the transaction (payments after shipment of goods) and to process any complaints (returns, disputes).
If you have chosen to register your credit cards, they are automatically deactivated when the card's validity date expires.
8.3. Fight against internet fraud
In order to ensure the security of payments and deliveries and to provide you with optimum quality of service, the personal data collected on the site is also processed by La Redoute to determine the level of fraud risk associated with each order and, if necessary, to help modulate the conditions of execution of the order.
9. WHAT SHOULD I KNOW ABOUT DATA COLLECTED BY SOCIAL NETWORKS?
La Redoute offers you the use of social networks to improve the commercial relationship and to provide you with targeted advertising offers on these networks.
The use of social networks to interact with La Redoute (including in particular Facebook Messenger, Facebook Connect, the “share” buttons on Facebook, Instagram or Twitter) is likely to result in exchanges of data between La Redoute and these social networks.
For example, if you are connected to the Facebook social network on your computer and you visit a page on the La Redoute website, Facebook may collect this information. Similarly, if you click on the “tweet” button on a page of the La Redoute site, Twitter will collect this information.
La Redoute invites you to consult the personal data management policies of the various social networks for information on the personal data that may be transmitted by them.
10. IS DATA COLLECTED ON MINORS UNDER THE AGE OF 16?
In accordance with the general terms and conditions of sale, you must be 16 years old to create an account on the La Redoute website and make purchases.
When creating an account, users have the option of communicating their children's data. The user may transmit to La Redoute data concerning minors under the age of 16. The user ensures that he/she is the holder of parental authority and expressly consents to the transmission of such data to La Redoute.
11. WILL I RECEIVE COMMERCIAL SOLICITATIONS?
11.1. Principles applicable to La Redoute
La Redoute uses your contact details to send you targeted advertising, in particular by email, post, SMS, mobile notification, on social networks or third-party websites.
In this context, La Redoute undertakes to comply with the rules applicable to each prospecting channel.
11.2. Prospecting by email and sms
La Redoute complies with the rules providing for the prior express collection of the User's consent for the sending of commercial prospecting by electronic means (e-mail or SMS).
Thus, when creating your account on the site, you are expressly asked for your consent :
- to receive offers from La Redoute by e-mail
- to receive offers from La Redoute's partners to whom your details may be sent
- to receive offers from La Redoute by sms
La Redoute will not send you personalized offers by email or sms if you have not given your consent.
There is an exception in the event that the User, without having given his prior consent, may nevertheless be canvassed if he is already a customer of the Redoute company and the purpose of the canvassing is to offer similar products or services.
In all cases, the User has the option of objecting to receiving such solicitations by taking the following actions:
- When creating an account, ticking “no” in the boxes relating to prospecting;
- For email, by clicking on the unsubscribe link provided in each email or by going to your Redoute account in the newsletter section;
- For SMS, by sending a stop SMS to the number indicated in the SMS or by going to your Redoute account in the newsletter section;
- By contacting customer service.
11.3 E-Mail Retargeting
After browsing our site, you receive an e-mail even though you have not entrusted your e-mail address to La Redoute. How can this happen?
La Redoute uses the services of companies whose role is to identify Internet users who have already visited our website and to send them personalized e-mails.
These companies use cookies to distinguish users and then personalize the advertisements they receive based on their browsing history.
Who collected my e-mail address?
This processing involves partners who have already collected your e-mail address, as well as your consent to authorize the sending of advertising.
You can object to this type of processing by sending us an e-mail to info@redoute.ch
11.4. Notifications on mobile applications
When you first open the La Redoute mobile application on your smartphone, you must give your consent to receive mobile notifications or “Push” notifications. La Redoute will then be able to contact you with offers.
You can deactivate these notifications at any time in your smartphone settings.
11.5. Commercial prospecting by telephone
La Redoute may contact you by telephone to offer you products or services.
12. DOES REDOUTE USE COOKIES, TAGS AND TRACERS?
When using our Service, information relating to the browsing of your terminal (computer, tablet, smartphone, etc.), may be recorded in “Cookies” files deposited on your terminal, subject to the choices you may have expressed concerning Cookies and which you may modify at any time.
12.1. What is a cookie?
The term “cookie” encompasses a number of technologies used to track the browsing habits or behavior of Internet users. These technologies are numerous and constantly evolving. They include cookies, tags, pixels and Javascript code.
A cookie is a small text file saved by the browser on your computer, tablet or smartphone, which stores user data to facilitate browsing and enable certain functions.
There are two types of cookies:
- first-party cookies, placed by La Redoute for the purposes of navigation and site operation;
- third-party cookies, placed by third-party partner companies in order to identify your centers of interest and send you personalized offers. These third-party cookies are managed directly by the companies that publish them, which must also comply with data protection regulations.
12.2. Why are cookies, tags and tracers used?
Cookies issued by La Redoute on the website and mobile application enable us to:
- compile statistics and volumes of visits to and use of the various elements that make up our services. To this end, we use audience measurement cookies.
- adapt the presentation of our Site according to the terminal used;
- adapt the presentation of our Site according to the affinities of each user;
- to store information relating to a form you have filled in on our Site (registration or access to your account, service subscribed to, contents of an order basket, etc.);
- to allow you to access reserved and personal areas of our Site, such as your account, using identifiers ;
- to implement security measures, for example when you are asked to log in to your account again after a certain period of time;
- to share information with advertisers on other websites in order to provide you with relevant advertisements in line with your interests. We use advertising cookies for this purpose.
- share information on social networks. To this end, we use cookies to share information on these networks.
12.3 How do I configure the placement of cookies, tags and tracers?
Redoute obtains your prior consent to the placement of advertising, audience measurement and social network sharing cookies.
You may choose at any time to express and modify your wishes with regard to cookies, by the means described below.
12.3.1. Configuring your browser software
You can configure your browser software so that cookies are stored on your terminal or, conversely, so that they are rejected, either systematically or depending on the sender. You can also configure your browser software so that you are offered the option of accepting or rejecting cookies from time to time, before a cookie is likely to be stored on your terminal.
How do you exercise your choices, depending on the browser you use?
Each browser has a different configuration for managing cookies and your choices. It is described in your browser's help menu, which will tell you how to modify your cookie wishes.
For Internet Explorer™: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies ,
For Safari™: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
For Chrome™: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,
For Firefox™: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,
For Opera™ : http://help.opera.com/Windows/10.20/fr/cookies.html
12.3.2. Settings for your smartphone's operating system
You can control the placement of Cookies on your smartphone using the operating system rules.
On iOS: https://support.apple.com/fr-fr/HT201265
On Android: https://support.google.com/chrome/topic/3434352
12.3.3. Setting cookies using a tool provided by La Redoute
In order to comply with the regulations, La Redoute uses a tool enabling Internet users to set the parameters for depositing cookies when connecting to the www.laredoute.ch website.
12.3.4. Opposition list for managing the placement of cookies
You also have the option of objecting to the placement of cookies by accessing the http://www.youronlinechoices.com/fr/controler-ses-cookies/ website.
13. WHAT IS LA REDOUTE'S DATA PROTECTION OFFICER?
13.1. What are his duties?
The Data Protection Officer appointed within La Redoute is responsible for ensuring compliance with the regulations and rules described in this document.
In particular, he/she shall draw up a register of personal data processing carried out within the company and ensure that such processing complies with the regulations and any changes thereto.
He/she raises awareness among teams and responds to users wishing to exercise their rights concerning the personal data collected by La Redoute.
13.2 How can I contact the Data Protection Officer?
You can contact the Data Protection Officer at dpo@redoute.ch.
To find out more about your rights, visit the website of your supervisory authority:
- In France, the CNIL: https://www.cnil.fr/
- In the United Kingdom, the ICO: https://ico.org.uk/
- In Spain, the AEPD: http://www.agpd.es/portalwebAGPD/index-idfr-idphp.php
- In Portugal, the CNPD: https://www.cnpd.pt/index.asp
- In Belgium, the CPVP: https://www.privacycommission.be/fr
- In Switzerland, the FDPIC: https://www.edoeb.admin.ch/edoeb/de/home.html