Privacy Policy

In force at 15/02/2024


ARTICLE 1: PREAMBLE


The purpose of this privacy policy is to inform users of the site www.xtramarine.com in relation to the following aspects relating to personal data:


  • How their personal data is collected. Any information allowing a user to be identified is considered personal data. As such, this may include: their first and last names, their age, their postal or email address, their location or even their IP address (non-exhaustive list); 
  • Their rights in relation to this data;  
  • Who is responsible for the processing of personal data collected and processed;  
  • Who are the recipients of this personal data;  
  • Information on this site's cookie policy.  


This information supplements the legal information and the General Terms and Conditions of Sale that can be consulted by users at the following addresses:  https://www.xtramarine.com/cgv and https://www.xtramarine.com/mentions-legales


ARTICLE 2: PRINCIPLES REGARDING THE COLLECTION AND PROCESSING OF PERSONAL DATA   


Pursuant to Article 5 of the European Regulation 2016/679, personal data are:   


  • Processed lawfully, fairly and transparently with regard to the data subject; 
  • Collected for specific purposes (see Article 3.1 hereof), explicit and legitimate, and not further processed in a manner incompatible with those purposes;
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
  • Accurate and, if necessary, up-to-date. All reasonable steps must be taken to ensure that inaccurate personal data, having regard to the purposes for which they are processed, are promptly erased or rectified;
  • Stored in a form that allows the identification of the data subjects for a period of time not exceeding that necessary for the purposes for which they are processed;
  • Processed in a manner that ensures adequate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.


Processing is lawful only if and to the extent that at least one of the following conditions is met:


  • The data subject has consented to the processing of his/her personal data for one or more specific purposes;
  • The processing is necessary for the performance of a contract to which the data subject is a party or for the execution of pre-contractual measures adopted at the request of the data subject;
  • The processing is necessary for compliance with a legal obligation to which the controller is subject;
  • The processing is necessary for the protection of the vital interests of the data subject or of another natural person;
  • The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular if the data subject is a child.


ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF BROWSING THE SITE


Article 3.1: Data collected


The personal data collected in the course of our business are as follows:


  • Surname, first name, postal address, telephone number, and email address.
  • Financial data relating to the Customer's/user's bank account or credit card

The collection and processing of this data serves the following purposes:


  • Contract management,
  • Management of the customer area,
  • Monitor the quality of services,
  • Carry out product recalls,
  • Sending Promotional Materials.

Article 3.2: How Data Is Collected


When you use our site, certain data is collected automatically as described in the Cookie Policy​.

Other personal data is collected when you perform the following operations on the platform:


  • Surname, first name, postal address, telephone number, and email address. They are collected when the Customer/user account is created on the website https:www.xtramarine.com  .
  • Financial data relating to the Customer's bank account or credit card. They are collected as part of the payment of the Products offered on the website https:www.xtramarine.com  .

They are stored by the data controller under reasonable security conditions, for a period of 5 years.

The Company may retain certain personal data beyond the deadlines announced above in order to comply with its legal or regulatory obligations.


Article 3.3: Data Hosting


The website www.xtramarine.com is hosted by:  


Odoo SA  

Chaussée de Namur, 40  

1367 Grand-Rosière, Belgium. 

VAT: BE0477472701

Tel.: +32 81 81 37 00

E-mail: info@odoo.com


Article 3.4: Disclosure of data to third parties


When you make payments through the  www.xtramarine.com, website, we share your Personal Data (e.g. name, contact details and payment information) with the platform that provides the online payment service whose references are set out below:


Stripe Technology Europe, Limited 

The One Building, 1

Lower Grand Canal Street, 

Dublin 2, Ireland  


Stripe's privacy policy can be found at: https://stripe.com/fr/privacy


When the customer makes the payment, the personal data (name, address, telephone number) are finally shared with the carrier that will take care of the transport.


Article 3.5: Cookie Policy


The website's Cookie Policy is www.xtramarine.com described on the Cookie Policy​.


ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER


Article 4.1: The Data Controller


Personal data is collected by Xtramarine SAS, with a capital of 10000 euros, whose registration number is 908 157 886 R.C.S. Nice (FR).


The person responsible for the processing of personal data can be contacted at the following addresses:


  • By post to: 5 rue Tonduti de l'Escarène, 06000 Nice;
  • By phone : +33 (0)4 23 35 58 567;
  • By mail : info@xtramarine.com .  


Article 4.2: The Data Protection Officer


The data protection officer of the company or data controller is:


Dr Giuliana Ucelli, 5 rue Tonduti de l'Escarène, 06000 Nice, tel. +33 (0)4 23 35 58 567, e-mail: ucelli@xtramarine.com   


If you believe, after contacting us, that your “Computer and Liberties” rights are not respected, you can send information to the CNIL.


ARTICLE 5: YOUR RIGHTS IN RELATION TO DATA COLLECTION AND PROCESSING


Any user interested in the processing of their personal data may exercise the following rights, pursuant to European Regulation 2016/679 and the Data Protection Law (Law 78-17 of 6 January 1978):


  • Right of access, rectification and right to erasure of data (referred to in Articles 15, 16 and 17 of the GDPR respectively);
  • Right to data portability (Art. 20 GDPR);
  • Right to restriction (Art. 18 GDPR) and objection to data processing (Art. 21 GDPR);
  • Right not to be subject to a decision based solely on an automated process;
  • Right to determine the fate of data after death;
  • Right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR).


To exercise your rights, please send an email to Dr. Giuliana Ucelli at  ucelli@xtramarine.com .

In order for the data controller to comply with the request, the user may be asked to provide some information such as: name and surname, e-mail address and account, etc.


Visit the cnil.fr website for more information about your rights. 


ARTICLE 6: CONDITIONS FOR MODIFYING THE PRIVACY POLICY


The site publisher www.xtramarine.com reserves the right to modify this Policy at any time in order to ensure that users of the site comply with applicable law.  


Any changes will not affect purchases previously made on the site, which remain subject to the Policy in force at the time of purchase and as accepted by the user at the time of purchase.


You are invited to read this Policy each time you use our services, without the need to give formal notice.


This policy, published on 15/02/2024, was last updated on 15/02/2024.