Privacy Policy

1. Purpose of this Policy

The purpose of this policy is to inform users of the Site about how SERENDIPITY JEWELLERY collects and processes their personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended Data Protection Act.

2. Data Controller

The controller for the data collected via the Site is:

SERENDIPITY JEWELLERY
Address: 16 Place Vendôme, 75001 Paris, France
Phone: +33 (0)1 42 36 17 04

Contact Channel
Email for personal data inquiries and rights requests: [email protected]
To protect your data security, we may reasonably request proof of identity to verify your identity.

3. Data Collected

In the context of using the Site, the following categories of data may be collected:

• Via the "Contact" form:
  • Identity: surname, first name;
  • Contact details: email address, telephone number;
  • Message content and any information voluntarily communicated.
• Navigation data (technical logs):
  • IP address, date and time of connection, pages consulted, browser type, etc., collected for security and proper functioning of the Site.

Anonymized or pseudonymized statistical data relating to Site traffic (page views, visit duration, origin, etc.), collected using cookies or trackers.

Fields marked as mandatory in the "Contact Us" form are necessary to process your request; if not provided, we may be unable to reply or follow up on your inquiry. Optional fields are provided voluntarily by you.

4. Purposes and Legal Bases of Processing

Data is processed for the following purposes:

• Management and follow-up of requests sent via the contact form: Receipt and processing of questions, requests for information. Legal basis: execution of pre-contractual measures and/or legitimate interest.
• Management of relationships with prospects and partners: Follow-up of exchanges. Legal basis: legitimate interest.
• News communications: Only with consent. Legal basis: consent.
• Site Security: Fraud prevention. Legal basis: legitimate interest.
• Audience measurement: Traffic analysis. Legal basis: consent (if applicable).

When processing is based on our legitimate interests, such interests include: replying to and managing customer/prospect inquiries, maintaining commercial communication, preventing fraud and ensuring website security, and improving website service quality.

When processing is based on your consent (e.g., newsletter subscription, non-essential cookies), you may withdraw your consent at any time via email; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

5. Data Retention Period

• Contact form data: processed and then archived for up to 3 years.
• Prospecting data: until withdrawal of consent or 3 years after last contact.
• Technical logs: max 12 months.

6. Data Recipients

Accessible only to authorized personnel of SERENDIPITY JEWELLERY and its technical service providers (GoDaddy, webmaster), bound by confidentiality. Authorities if legally obliged.

7. Transfers outside the EU

Hosting via GoDaddy may involve transfers outside the EU (notably USA), covered by appropriate safeguards.

In the event of data transfer to countries outside the EU/EEA, we will implement appropriate safeguards in accordance with the GDPR (e.g., European Commission Standard Contractual Clauses), and may provide relevant information upon your request.

8. Rights of Data Subjects

You have the right of access, rectification, erasure, limitation, opposition, and portability. Contact: 16 Place Vendôme, 75001 Paris or by email. Complaint possible to the CNIL.

9. Cookies

The Site uses cookies for operation, security, and audience measurement. You can manage your preferences via the cookie banner or your browser.

For strictly necessary cookies (used for website security and basic functions), consent is not required.

For audience measurement/statistical cookies: if the solution used meets the exemption conditions prescribed by the CNIL, consent may not be a prerequisite, but we will still provide information and an objection/opt-out method; otherwise, they will only be enabled after your consent.

10. Update

Policy subject to change at any time. Version in force at the time of consultation applies.