Privacy Policy

ARTICLE 1: PREAMBLE

The purpose of this privacy policy is to inform users of the website cassyshoes.com (hereinafter "the Site") about how their personal data is collected, used, protected, and stored. The Site is published by CASSY, whose head office is located at 45 rue d'Armagnac 33800 Bordeaux, registered with the Bordeaux Trade and Companies Register under number 888 347 820 00043.

By using this site, you accept the practices described in this policy.

On how their personal data is collected. Personal data is considered to be any information that allows a user to be identified. This may include: their first and last names, age, postal or email address, location, or even their IP address (non-exhaustive list);
On the rights they have regarding this data;
On the person responsible for processing the personal data collected and processed;
On the recipients of this personal data;
About the site's cookie policy.

This policy supplements the legal notices and the General Conditions of Use.

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of European Regulation 2016/679, personal data are:

Processed lawfully, fairly and transparently with regard to the data subject ;
Collected for specific purposes (see Article 3.1 of these terms), explicit and legitimate, and not to be further processed in a manner incompatible with these purposes;
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
Kept in a form which permits identification of the persons concerned for a period not exceeding that necessary in relation to the purposes for which they are processed;
Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing shall be lawful only if and to the extent that at least one of the following applies:

The data subject has consented to the processing of his or her personal data for one or more specific purposes;
The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
The processing is necessary for compliance with a legal obligation to which the controller is subject;
The processing is necessary to protect the vital interests of the data subject or of another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING BROWSING THE SITE

Article 3.1: Data collected

The personal data collected as part of our activity are as follows:

Identification data : surname, first name, title, date of birth
Contact and delivery details : telephone number, email address, postal address (residence, billing and delivery), country of residence
Information related to orders and customer tracking : products ordered, quantities, amounts, payment method, any discounts applied
Personal data related to the order : size, shoe size, gender
Data relating to participation in competitions or promotional operations : dates of participation, frequency, answers provided, any winnings won
Technical identifiers : IP address, MAC address, cookies and other digital trackers
Connection data : connection and usage history, connection identifiers (login),
Information on the equipment used : type of device, browser, as well as geolocation data that may be collected

The collection and processing of this data responds to the following purpose(s):

Processing and delivery of orders
Customer account management
Sending commercial communications (if you have given your consent)
Customer Service
Improved user experience
Fight against fraud
Compliance with legal and tax obligations

CASSY may collect your personal data on various occasions, including:

When you browse the site or create a customer account
When making a purchase, requesting a return, or performing any action related to the management of your order
When you register for our online services (e.g. newsletter, social networks)
When you contact our customer service or interact with our team
If you are applying for a job offer within CASSY
When you leave a review or comment on a product
When you share a product or review with a loved one via email from a product page
Or, when you share an article via a social platform (Facebook, Google+, Twitter, Pinterest, etc.)

They are kept by the data controller under reasonable security conditions.

CASSY, a company established in France, provides the primary hosting of your personal data on servers located in France.

Some data, such as payment information, may be transferred to and stored outside of France. This means that your data may be subject to the laws in force in these jurisdictions, which may offer a different level of protection than that applicable in France or the European Union. In some cases, local authorities (courts, law enforcement, regulatory bodies) may be able to access this data under local law.

They may also be communicated to the following external service providers, only to the extent necessary for the performance of their services:

Shopify (e-commerce website hosting),
Stripe, PayPal (secure payment),
Omnisend (sending newsletters and marketing communications),
Carriers and logistics partners (shipping and delivery of orders),
Administrative or judicial authorities within the framework of legal obligations.

These providers are required to respect the confidentiality and security of your data.

Personal data is kept only for the period necessary for the purposes for which it was collected, based on legal obligations and CASSY's operational needs. This period varies depending on the type of processing:

Contractual performance : Data is retained for the duration of the contractual relationship, particularly for the management of your customer account. When the account is closed, the data is deleted, unless otherwise required by law.
Customer support : We retain your data for as long as necessary to respond to your requests or resolve any disputes. Some data may be retained if required by a legal or contractual obligation.
Marketing activities : Your data will be processed for as long as you are subscribed to our marketing communications. You can unsubscribe at any time, and your data will then no longer be used for this purpose.
Promotional operations (competitions, etc.): data is kept for the time necessary for the proper management of the operation and compliance with the related legal obligations.
Legal compliance : For certain legal obligations, the retention period depends on the nature of the data, the purpose of the processing and local legal requirements.

After these periods, the data is either permanently deleted or irreversibly anonymized. It is important to note that these operations are final, and CASSY will not be able to restore deleted data.

Article 3.2: Data hosting

The CASSY website is hosted by: Shopify, whose head office is located at 126 York St. Ottawa, ON K1N 5T5 in Canada. Tel: 1-613-241-2828

Article 3.3: Cookies Policy

When you browse our website cassyshoes.com, cookies may be placed on your device (computer, tablet, smartphone).

A cookie is a small text file stored on your device that allows us to:

to ensure the proper functioning of the site (essential cookies),
to improve your user experience (personalization cookies),
to analyze site traffic (analysis and audience measurement cookies),
to offer you personalized content or advertisements tailored to your interests (advertising cookies).

You can accept, refuse or configure cookies at any time via our cookie management banner or directly from your browser settings.

We use the following cookies in particular:

Shopify (site operation and cart management)
Google Analytics (audience analysis)
Facebook Pixel (targeted advertising)

ARTICLE 4: DATA CONTROLLER

Personal data is collected by CASSY, SAS with capital of €4,000, whose registration number is 888 347 820 00043.

The person responsible for processing personal data can be contacted as follows:

By mail to the address: 45 rue d'armagnac 33800 Bordeaux ;

By email: contact@cassyshoes.com

If, after contacting us, you believe that your “Data Protection and Freedom of Information” rights have not been respected, you can send information to the CNIL.

ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

In accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) , you have specific rights regarding the use of your personal data. These rights allow you to maintain control over the information you entrust to us.

Right of access (Article 15 GDPR): You can request at any time to know whether we hold personal data concerning you, and obtain a copy of this data as well as the following information: The purposes of the processing, The categories of data concerned, The recipients of the data (or categories of recipients), The retention period, The existence of a transfer outside the European Union, Your rights relating to this data.
Right of rectification (Article 16 GDPR): If your personal data is inaccurate, incomplete or obsolete, you have the right to request that it be updated or corrected.
Right to erasure or “right to be forgotten” (Article 17 GDPR): You can request the deletion of your personal data in the following cases: The data is no longer necessary in relation to the purposes for which it was collected, You withdraw your consent (if the processing was based on it), You object to the processing, Your data has been processed unlawfully, A legal obligation requires its deletion. However, certain data may be retained if a legal obligation or a legitimate interest justifies it (e.g.: tax obligations, accounting, fraud prevention).
Right to restriction of processing (Article 18 GDPR): You have the possibility to request the temporary freezing of the use of your data, in particular when: You contest the accuracy of the data, The processing is unlawful but you do not want them deleted, You need to keep the data to assert, exercise or defend a legal right.
Right to object (Article 21 GDPR): You can object at any time to the processing of your data for commercial prospecting purposes, to any processing based on our legitimate interest, unless we demonstrate that there are compelling and legitimate reasons to continue this processing.
Right to portability (Article 20 GDPR): You have the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, and/or to request their direct transmission to another data controller, where technically feasible.

To exercise any of these rights, you can contact us at any time at the following address: contact@cassyshoes.com

For security reasons and to prevent identity theft, we may ask you for proof of identity before responding to your request.

If you believe that your rights are not being respected or that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the competent supervisory authority: CNIL – Commission Nationale de l'Informatique et des Libertés Website: www.cnil.fr

ARTICLE 6: CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY

The publisher of the CASSY site reserves the right to modify this Policy at any time in order to ensure that users of the site comply with current law.

Any changes will not affect purchases previously made on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user when confirming the purchase.

The user is invited to read this Policy each time he uses our services, without it being necessary to formally notify him.

Privacy Policy

Subscribe to our newsletter