The purpose of this privacy policy is to explain the rules surrounding the various personal data processing operations that may be carried out when you use our website. This privacy policy also aims to explain how data is used, shared and protected, as well as the choices and rights you have and how to contact us.

About us

The processing of personal data carried out on our website is the responsibility of two joint controllers. Those responsible for processing your personal data are:

  • The company THE OZ (hereinafter “THE OZ”), registered in the Paris Trade and Companies Register under no. 508 514 494, which manages the website of the Company Des Petits Hauts website, available at https://www.despetitshauts.com/ (hereinafter “the Site”).

Its head office is located at 1 boulevard Victor 75015 Paris. THE OZ's business is the creation, production and commercial operation of merchant websites, including sales and back-office activities, in its own name on behalf of its customers, as well as associated activities such as the promotion of these websites and the products sold on them. THE OZ has therefore been entrusted with the creation and management of the Site in its own name but on behalf of the company Des Petits Hauts.

  • The company Des Petits Hauts, registered in the Lille Trade and Companies Register under no. 422 390 989 (hereinafter referred to as “the Company”). Its head office is located at 11 rue Dieu 75011 Paris, France.

THE OZ and the Company are hereinafter together referred to as the “Data Controller”. The terms “we”, “us” and “our” in this Privacy Policy refer to the Data Controller. 

If you have any questions about this Privacy Policy and/or the use of your personal data on the Site, please contact us at the following e-mail address: eshop@despetitshauts.com.

Identity of our Data Protection Officer

Our Data Protection Officer (hereinafter referred to as “DPO”) is available to respond to all requests, including the exercise of rights, relating to your personal data..

You can reach our DPO:

  • By e-mail to the following address:
  • Or by mail to: CABINET BOUCHARA & AVOCATS, 17 rue du Colisée – 75008 PARIS.

What is personal data?

Personal data is any information relating to a natural person who is identified or can be identified, directly or indirectly, by reference to an identification number or to one or more elements that are specific to that person, such as surname, first name, date of birth, customer or order number, photo, etc...

When may we collect your personal data?

We may collect your personal data for:

  • Creating your customer account on our Site;
  • Placing an order on our Site;
  • Your agreement to receive commercial communications from us by email, telephone, or post, depending on your choice;
  • Surveys or satisfaction surveys about your customer experience;
  • Interaction with Des Petits Hauts via its official page on social networks or when we offer to reuse content that you have published on a social network;
  • Your exchanges with our customer service ;
  • Your inquiries to Des Petits Hauts;
  • Your navigation on Internet via cookies or similar technologies or when you click on advertisements relating to our products.

For what purposes are your personal data collected and used?

We collect your data in order to:

  • Enable you to create a customer account on our Site and in our stores;
  • Manage access to your customer account online;
  • Process and manage your online orders and deliveries;
  • Record purchases made in our stores;
  • Ensure the security of online transactions, prevent fraud and payment incidents, and manage debt collection (see our General Terms for more details);
  • Manage customer relations in the context of requests for information or complaints that you may send to us via our website, our customer service department or our pages on social networks;
  • Manage and optimize your customer experience through better customer knowledge;
  • Offer adapted and personalized services, in particular in the context of the development of our products and services;
  • Carry out statistical analyses to develop steering, measurement and reporting tools to adapt and improve our sales, marketing and product production activities;
  • Manage your registration to events;
  • Subject to your consent: to send you information on our offers, news and events via the communication media you have selected.;
  • Subject to your consent: send you personalized newsletters and use third-party services to personalize your profile;
  • Manage your requests for rights arising from the GDPR.

What personal data may we collect?

(i) In the course of our activities, we may need to collect certain data directly from you via electronic forms on our Site, our mobile applications and in some of our stores, or in paper format, for various purposes.

The information we may collect is as follows:

  • Your identity (first and last name);
  • Your contact details (email address, telephone number, postal address);
  • Your personal preferences in relation to the products we sell or to our website (language);
  • Information relating to your orders, their follow-up and purchase invoices;
  • The information you may be asked to provide to our customer service department;
  • If necessary, proof of identity to exercise your rights under the GDPR;
  • Your bank details when placing an order on our Site.

Note that your bank details are not transmitted unencrypted on Shopify's servers. Payments are made via a secure payment platform, supplemented by control measures to guarantee the security of purchases made on https://www.adyen.com and to combat fraud.

Your payment card details are never transmitted unencrypted over the network.

The personal data required by Des Petits Hauts is indicated by an asterisk on each personal data collection form on our Site. If you do not fill in these mandatory fields, Des Petits Hauts will probably not be able to respond to your requests and/or provide you with the requested services. Other information is optional and allows us to get to know you better and improve our communications and services to you.

(ii) We may also collect certain data from your purchases of products or services, whether online or in-store, and in particular information relating to the amount and nature of your purchases.

(iii) Finally, we may collect information relating to the use of our website, in particular your browsing habits (pages visited, links clicked, etc.). Some of this information may be collected via cookies placed on your terminal as you browse our website. To find out more about cookies, please consult the cookie section of this policy.

What are the legal basis for processing your data?

We process your personal data:

  • For the performance of the contract entered into between you and Des Petits Hauts in order to manage your access to your customer account, as well as to process and track your orders;
  • As part of its legitimate interest in marketing management, the security of its digital media (websites, applications, etc.) and the fight against fraud;
  • When you have given us your consent to process your data, in particular for the purposes of managing our sales prospecting, your browsing data via cookies, etc.
  • To comply with legal obligations, in particular tax obligations (retention of purchase invoices). 

Who receives your personal data?

We ensure that only authorized persons have access to your personal data when this is necessary to manage our commercial relationship or to meet our legal obligations.

We may also communicate your personal data to:

  • Processors such as :
    • Providers of hosting and maintenance services for the Site and our dematerialized solutions for collecting personal data in stores;
    • Payment service providers;
    • Fraud prevention and control services;
    • Logistics providers;
    • Marketing solutions providers;
    • Providers of sales prospecting management and communication via social networks;
    • Customer service providers;
    • Event organizers;
    • Providers of analysis, tag management and ad personalization services, such as Google. For more information, please consult Google's Privacy Policy and Terms of Use.
    • Third parties wishing to know your centers of interest so that they can build up similar audiences and target prospects corresponding to your profile. In the context of this specific processing, we are not the data controller for prospecting and you will not be the subject of prospecting, your data being used solely to create profiles similar to yours.

Finally, we may need to communicate your data to third parties in order to comply with legal, regulatory or contractual obligations, or to respond to requests from legally authorized authorities.

Data transfers abroad

Some recipients of your personal data may be located abroad, including outside the European Union.

Any transfer of your data to a third country is subject to appropriate guarantees, in particular contractual, technical and organizational guarantees, in compliance with applicable regulations on the protection of personal data..

How long do we keep your data?

Des Petits Hauts has set the retention period for your personal data at 3 years from: 

  • The date of last contact with us for prospects (who have never made a purchase from Des Petits Hauts);
  • The date of the last purchase for customers (who have already made a purchase).

However, for certain types of data processing, specific retention periods apply, for example:

  • Personal data relating to payments may be kept in intermediate archiveing for evidence purposes for a period of thirteen (13) months following the debit date (extended to 15 months for deferred debit cards). Information relating to the PAN and visual cryptogram is not kept,
  • Cookies and other commercial markers may be stored on your terminal for up to 13 months. Personal data collected via cookies and tracers is stored for 25 months,
  • Personal data related to requests to exercise rights arising from the GDPR are kept for the entire period necessary to process the request, and then archived for the applicable criminal limitation period (6 years). If a copy of an identity document is requested, it may be kept for one (1) year after receipt of the request.

Security of your personal information

If you have created an account, you have chosen a password. You are responsible for keeping this password confidential. We therefore recommend that you choose a strong password and do not share it with anyone.

We recommend that you only connect to secure networks, preferably private ones. Be aware of the risks involved on public wifi networks.

If you receive an email claiming to be the brand we work for and asking you to provide personal information, please do not reply and forward the email to us so that we can take the necessary action.

What are your rights and how can you exercise them?

In accordance with the regulations in force, in particular the GDPR, you have the right to access and rectify your personal data, as well as the right to request its deletion, to object to its processing on legitimate grounds and to obtain its limitation or portability insofar as applicable.

You also have the right to formulate specific or general directives concerning the post-mortem conservation, deletion and communication of your data.

These rights can be exercised directly via our contact form for computer or mobile or by mail to the address:

THE OZ
E-boutique Des Petits Hauts
1 bd Victor
75015 Paris
France

You can unsubscribe from our offers, news and events at any time by using the hypertext link provided in each email we send you. You can also contact us by telephone, by calling 01 80 05 15 48.

You also have the right to lodge a complaint with the French authority, Commission Nationale Informatique et Libertés (CNIL).