.png)
PERSONAL DATA
Date of last update : 11/08/2022
SUMMARY :
1. Definitions
2. Who is the Controller ?
3. Where do we collect your Personal Data ?
4. What categories of Personal Data do we process?
5. What Personal Data do we process and for what purposes?
6. Will you receive commercial offers?
7. Do we collect Personal Data from minors under the age of 16?
8. Who are the recipients of your Personal Data?
9. Is your Personal Data transferred outside the European Union?
10. How long do we keep your Personal Data ?
11. What security measures are applied to your Personal Data ?
12. What are your rights regarding your Personal Data ?
13. How can you exercise your rights regarding your Personal Data?
14. How to contact our Data Protection Officer?
15. Update of our Privacy Policy ?
1-Definitions :
| What is a « Personal Data » ? | It is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, geolocation data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity. |
| What is a « Personal Data Processing » ? | This is any operation or set of operations that may or may not be carried out by automated means on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction |
| What is a « Controller » ? | It is the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of processing. |
| What is a « Processor » ? | It is the natural or legal person who processes personal data on behalf of the controller. |
| What is a « Consent » ? | It is any free, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or a clear positive act, that personal data concerning him/her be processed. |
2-Who is the Controller ?
OKAIDI simplified joint stock company with a capital of 6 483 008 euros, registered at the trade and company register under the n°398 110 445, whose head office is located at 162 boulevard de Fourmies 59100 ROUBAIX represented by Grégoire DUFOREST in its capacity as general manager.
And
Idéee Zenfant Ltd with a capital of 225 euros, registered in the Mauritius Trade and Companies Register under number C188244, whose registered office is located at 4th Floor, Hennessy Tower, Pope Hennessy Street, Port Louis, Mauritius represented by Tahora Chabit Houssen in his capacity as Director
Both companies are joint Controllers (“the Joint Controllers”) they determine together the purposes and means of the processing operations defined below.
3. Where do we collect your Personal Data ?
Your Personal Data may be collected through multiple channels, such as, our network of stores, our websites, our mobile applications, or by phone or social networks.
4. What categories of Personal Data do we process?
The table below identifies the main categories of Personal Data that we may process about you :
| Personal data categories | Description of the categories |
|---|---|
| Prospecting Data | This is the data we use to send you messages about our brands. This data includes: name, first name, e-mail address, telephone number. |
| Contest Participation Data | This is the data that you provide to us to participate in the contests that we organize. This data includes: name, first name, e-mail address, answers to the contest. |
| Customer Experience Data | This is data that you provide to us as feedback on our products and services. |
Among the Personal Data collected, some are mentioned with an asterisk in order to specify the mandatory nature of the collection.
5-What Personal Data do we process and for what purposes?
| Why do we collect your Personal Information? | What are the categories of data concerned by this processing? | What is the legal basis for processing your Personal Data? |
|---|---|---|
Manage your subscriptions and send you brand news electronically. Allow us to set up and send you electronically advertising adapted to your needs. | Prospection Data | Consent In accordance with article L. 34-5 of the French Post and Electronic Communications Code, if the canvassing messages we send you concern products similar to those you have already purchased and if you have not objected to the sending of such messages. |
To improve our products and our website based on your experience | Customer Experience Data | Legitimate interest of the data controller |
| Fight against Fraud | Prospection Data, Contest Participation Data | Legitimate interest of the data controller |
6-Will you receive commercial offers?
We may use your Personal Data in the context of a commercial approach towards you, by e-mail and/or by SMS.
We respect the rules relating to the prior and express collection of the customer's consent for the sending of commercial prospecting.
When you create your account on the site, you are expressly asked to give your consent to receive promotional offers and news from us. Therefore, you will not receive any commercial prospecting if you have not consented to it.
More information on your rights in section n°12 "What are your rights on your Personal Data?”.
7-Do we collect Personal Data from minors under the age of 16?
We may collect Personal Data relating to children under 16 years of age. As such, the member agrees to be the holder of parental authority of the latter.
8-Who are the recipients of your Personal Data?
The Joint Controllers OKAIDI SAS and XXX will only transmit your Personal Data to third parties for canvassing purposes if you have given your consent in this respect.
| Internal recipient | Commercial Partners : “IDKIDS’ community” brand marks : Okaidi, Obaibi, Oxybul éveil et jeux, Idkids, Jacadi, N’Joy, Rigolo Comme La Vie, Bubblemag, Idtroc |
| External recipient | Authorized personnel of : Service Providers Subcontractors, within the framework of the following missions: management of the customer service, management of the online chat, processing and delivery of the order on the e-commerce site, routing of SMS and commercial emails, detection and prevention of fraud. The subcontractors act only on our behalf and on our instructions. |
9-Are your Personal Data transferred outside the European Union?
Personal Data could be transferred outside the European Union, especially in the case of social networks exploitation.
10-How long do we keep your Personal Data ?
Find below the Data retention Period of the Processings :
| Data's categories | Data retention Period |
|---|---|
| Prospection Data | 3 years from the last contact we had with you |
| Contest Participation Data | Period of the Contest and 1 year in active base, then 4 years in archive |
| Geolocation Data | 1 month after the Data’s registration |
11-What security measures are applied to your Personal Data ?
The Joint Controllers OKAIDI SAS and Idée Zenfant Ltd take the necessary measures to ensure the security and the confidentiality of the Personal Data given, respecting the legal regulations in force.
12-What are your rights regarding your Personal Data ?
In accordance with the European Regulation 2016/679 of 27 April 2016 on the protection of Personal Data, you have the following rights :
| Right of Access | You have the right to access your Personal Data. A copy of your Personal Data would be sent to you. |
| Right to request the rectification | You have the right to request the rectification of your Personal Data, if these need an update |
| Right to Object | You have the right to Object, anytime, to a process of your Personal Data, unless it is a legal obligation. |
| Right to erasure | You have the right to erase your personal data. |
| Right to Consult | You have the right to consult your personal Data in a structured format, frequently used and readable by machine.You can require the transmission of your Personal Data directly to the Controller when it is technically possible. |
| Right to limitation | You can obtain the limitation of a process, Vous avez le droit d’obtenir la limitation du traitement, including when your Personal Data are not correct. |
| Right to make advance directives | You can communicate your directives concerning your Personal Data after your death. You just have to address your wishes. |
13-How can you exercise your rights regarding your Personal Data?
You can exercise your rights :
Online : customercare@okaidi.mu or via the contact form
By mail, writing to : OKAIDI FRANCE 162 boulevard de Fourmies 59100 ROUBAIX FRANCE
Please note, in the exercise of rights by applicants, our Customer service could check your identity by asking for a valid identity card copy, if and only if there was reasonable doubt as to the identity of the applicant.
To facilitate the process of your request, it is easier to communicate your name, surname, email address and, if you have one, your fidelity account number.
The Joint Controllers commit to answer your request within a month from the date of the exercise of your right.
Moreover, to facilitate the access to your rights :
Every newsletter sent by the company OKAIDI, propose you an unsubscribe link, that let you in a click, to unsubscribe easily to the newsletters and actualities of the trademark or/and its Partners ones ;
Every SMS sent by the company OKAIDI propose you a « STOP SMS » ;
You can manage your preferences about the commercial prospection by logging your Customer Account, in « My newsletters et alerts » section.
Finally, we remind you that you have the possibility of seizing at any time the Commission Nationale Informatiques & Libertés (CNIL) : https://www.cnil.fr/fr/agir
14-How to contact our Data Protection Officer ?
The company OKAIDI has names a DPO, that you can contact anytime by :
- Mail at the address : OKAIDI 162 boulevard de Fourmies 59100 ROUBAIX,
- or by using the "contact form" by choosing the section (Personal Data Protection)
15-Update of our Personal Data policy
The Joint Controllers could have to amend her Personal Data Policy. This modification is specified on the top of the section by writing the last date of update.