Privacy and Cookie Policy – Online Sales

Privacy and Cookie Policy – Online Sales

 

At Aqualung Group, as data controller, we are making the protection of our customers’ and users’ data a priority. We are proud of the work provided to ensure that our data processing is carried out in accordance with applicable data protection laws.

It is important for us that you understand how we process your Personal Data and how we fulfil our obligations under applicable data protection laws (including related guidelines and directives) (hereinafter the “Data Protection Laws”) including the Data Protection Act of 6 January 1978 as amended and the General Data Protection Regulation (EU) of 27 April 2016 (hereinafter “GDPR”).

This policy applies to the processing of data that we perform on your Personal Data when you browse, order products or transmit such data via the website www.aquasphereswim.com and its sub-domains (hereinafter the “Website”) and describes how your Personal Data is collected and processed by our company via its Website.

1. DEFINITIONS

Account” refers to a User’s personal space on the Website managed by the User with a username and password.

Personal Data” or “Data” refers to any information or directly or indirectly identifying a natural person (e.g. name, registration number, telephone number, photograph, date of birth, municipality of residence, etc.).

Data Controller” means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing.

User” means any natural person who has an Account on the Website.

Data Subject” means any natural person whose Personal Data are collected and processed through the Website.

The expressions defined above can be found in the plural in this Policy and retain the same definition.

2. IDENTITY OF THE DATA CONTROLLER

In this privacy and cookie policy, the terms “we” and “our” are used to refer to

Aqualung Corporate

300 Rue du Vallon, Les Vaisseaux – Bâtiment C

06560 Valbonne – Sophia Antipolis (France)

Hereinafter “Aqualung”.

We are Data Controllers, which means that we are responsible for your Personal Data. We will only use these data in a fair, legal, transparent manner and in compliance with the Data Protection Laws.

3. PERSONAL DATA COLLECTED ON THE WEBSITE

When you browse, order products (if applicable) or contact us on our Website, we collect and process your Personal Data.

Below you will find an information table regarding the processing carried out using your Data.

Purpose of the processing

Type of data collected

Legal basis

Responses to information requests

Identification Data*

The legal basis is the performance of the contract or pre-contractual measures or our legitimate interest.

Product registration and warranty

Identification Data*

The legal basis is your consent or the performance of the contract or pre-contractual measures.

Product release alert

Identification Data*

The legal basis is your consent

User manual communication

Identification Data*

The legal basis is your consent

Participation in marketing operations (promotion, etc.)

Identification Data*

Consent of the data subject

The legal basis is your consent.

Giveaway product shipping

Identification Data*

Mailing address

The legal basis is your consent and the performance of the contract

Subscription to the newsletter

Identification Data*

Consent of the data subject

The legal basis is your consent.

Creation and administration of customer account

Identification Data*

Customer account data**

The legal basis is the performance of the contract

Store finder

IP address via cookie storage

The legal basis for this processing may be either your consent or our legitimate interest.

Data profiling related to personal preferences, interests, behaviour ****

Identification Data*

Customer account data**

The legal basis is your consent (if you are a test team member, if you have an account or if you filled in our forms at a specific event.)

Site administration (troubleshooting, statistics, etc.)

IP address via cookie storage

The legal basis is our legitimate interest.

On-site user tracking for service improvement and user knowledge

IP address via cookie storage

The legal basis for this processing may be either your consent or our legitimate interest.

Measure, understand or monitor the effectiveness of advertising, promotions

IP address via cookie storage

The legal basis of this processing is your consent.

Suggestions or recommendations regarding services/items that may interest you

Identification Data*

The legal basis of this processing is your consent.

Management of the exercise of individual rights

Identification Data*

 

Type of request

The legal basis for this processing is compliance with our legal obligations

Where applicable, a copy of the identity documents

The legal basis for this processing is compliance with our legal obligations

 

*The identification data includes the User’s first and last names and email address.

**Account data includes the User’s password and username.

***Bank details are the details relating to the payment method used.

**** ” Article 4 of GDPR defines profiling as: “any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements”

The mandatory or optional nature of the Personal Data requested from you, as well as the consequences if no response, are specified at the time of data collection with an asterisk (*).

Each time you visit our Website, we may also automatically collect information and Personal Data on your computer by storing cookies and similar technologies there. You can find more information about this by consulting our cookie policy in sections 10 and 11 of this privacy and cookie policy.

4. STORAGE OF YOUR PERSONAL DATA

We will keep your Personal Data for the time necessary to accomplish the purposes for which it was collected.

You will find a table detailing the retention period of the corresponding Personal Data for each of the purposes:

Purpose of the processing

Retention period

Responses to information requests

Until the request is fully processed

Participation in marketing operations (promotion, etc.)

Until withdrawal of consent

Subscription to the newsletter

Until withdrawal of consent

Creation and administration of customer account

Until request for account deletion

Site administration (troubleshooting, statistics, etc.)

Duration of the analysis

On-site user tracking for service improvement and user knowledge

Duration of the analysis

Measure, understand or monitor the effectiveness of advertising, promotions

Duration of the analysis

Suggestions or recommendations regarding services/items that may interest you

Until withdrawal of consent

Management of the exercise of individual rights

Identification data: duration of processing life

Copy of identity documents: duration of processing of the request

When we no longer need to keep your Personal Data, it will be deleted or anonymised so that you can no longer be identified.

5. PRIVACY POLICY FOR MINORS

We are particularly committed to protecting the privacy of minors who access or use our online services.

We strongly recommend that parents regularly monitor their children’s online activities.

If you have reasons to believe that a minor under 15 years of age has provided us with Personal Data, please contact us at the email address below and we will do everything possible to answer your questions or to delete this information from our databases:

GDPR@aquasphereswim.com

6. DIGITAL WILL

In accordance with French law, you have the right to define guidelines relating to the storage, erasure and communication of your Personal Data after your death.

In order to exercise this right, you can send us your instructions to the following address:

GDPR@aquasphereswim.com

7. RECIPIENTS OF YOUR PERSONAL DATA

Sharing data within Aqualung

Within the framework of this policy, the Subsidiaries of Aqualung designate all companies controlled directly or indirectly by Alizé Capital (300 Rue du Vallon, Les Vaisseaux – Batiment C, 06560 Valbonne – Sophia Antipolis, France) and Aqualung Corporate (300 Rue du Vallon, Les Vaisseaux – Batiment C, 06560 Valbonne – Sophia Antipolis, France).

We may share your Personal Data with the Subsidiaries of Aqualung, but only for the purposes listed in this privacy and cookie policy.

Sharing Personal Data with third parties:

In addition, we may transmit your Personal Data:

We do not share your information with third parties for marketing purposes.

8. WHERE WE STORE YOUR PERSONAL DATA

All information that you send to us is stored on our secure servers, or those of our group, within the European Economic Area (“EEA”).

When we have assigned you or when you choose a password that allows you to access certain parts of our websites, you are responsible for the confidentiality of this password. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your Personal Data, we cannot guarantee the security of your Internet connection when transmitting your data to our Website; this transmission is therefore at your own risk.

We comply with the GDPR’s confidentiality and security rules. Once we have received your Personal Data, we will use strict security procedures and devices to prevent unauthorised access, including updating security patches whenever possible, and constantly searching for new ways to secure the data.

Transfers outside the European Economic Area:

The Personal Data that we collect may occasionally be transferred to and stored in a destination outside the EEA, for example an Aqualung entity based in the United States.

We will take all reasonable steps to ensure that your Personal Data is processed securely and in accordance with this privacy policy.

In particular:

9. EXERCISING YOUR RIGHTS

Under the GDPR, you have the right to access, correct, limit and, if applicable, delete your Personal Data. You also have the right to the portability of data.

You can also have the right, for legitimate reasons, to object to the processing of Personal Data concerning you.

You have the right to request access to your Personal Data

You have the right to request confirmation of the processing of your Personal Data, access to such Personal Data (by providing a copy) and other information on how we process your Personal Data.

You have the right to ask us to correct your Personal Data.

You have the right to ask us to correct your Personal Data if they are inaccurate or incomplete.

You have the right to ask us to delete your Personal Data.

You have the right to ask us to delete or remove your Personal Data when there is no reason for us to continue processing them. This right would apply if the Personal Data that we process is no longer necessary with regard to the purpose for which it was collected, if you withdraw your consent to the processing of specific categories of your Personal Data or if you object to the way in which we process your Personal Data (see the section “You have the right to object to the processing of your Personal Data” below).

You have the right to ask us to limit the processing of your Personal Data.

You have the right to ask us to limit the processing of Personal Data that we hold about you.

This right applies when:

·       you think that the Personal Data are not accurate,

·       the processing is unlawful and you prefer that we block the processing of your Personal Data rather than delete it,

·       when we no longer need to use your Personal Data for the purposes for which we have collected it, but they are still necessary for you to establish, exercise or defend legal rights,

·       you wish to check if the legitimate reasons we pursue and if they prevail over yours.

You have a right to portability.

You have the right to obtain from us and reuse your Personal Data (in a structured, commonly used and machine-readable format) in order to reuse them for your own needs as part of other services. This allows you to easily transfer Personal Data to another organisation or to ask us to do so for you.

You have the right to object to the processing of your Personal Data.

You have the right to object to the processing of your Personal Data based on our legitimate business interests, unless we are able to demonstrate that, overall, our legitimate interests outweigh your rights or if we need to continue to process your Personal Data for the establishment, exercise or defence in legal proceedings. However, you also have the absolute right to object to the processing of your Personal Data for direct marketing purposes.

You have the right not to be subject to automated decisions.

You have the right to object to any automated decision-making, including profiling, when the decision has a legal or significant impact on you.

You have the right to withdraw your consent.

You have the right to withdraw your consent to the processing of your Personal Data at any time.

You may exercise these rights, upon presentation of a copy of your identification document, by simple written request sent by email to the following address:

GDPR@aquasphereswim.com

Or by mail to the following address depending on the company with which you are in contact:

Aqualung Corporate

300 Rue du Vallon, Les Vaisseaux – Bâtiment C

06560 Valbonne – Sophia Antipolis (France)

We will respond to any request received from you within one month from the date of the request. If your request is not sufficiently precise or does not include all the information required to respond to your request, Aqualung may ask you to provide additional information.

You also have the right to refer the matter to the French Data Protection Authority [Commission Nationale de l’Informatique et des Libertés] (CNIL -www.cnil.fr), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, or any other competent authority of any claim relating to the way Aqualung collects and processes your data.

10. COOKIES

We store various cookies on your system when you browse our Website to analyse and improve the website.

What is a cookie?
A “cookie” is a small text file placed in your browser software and facilitating browsing on our website.

Different types of cookies can be placed:

You can find below the list of cookies registered by Aqualung or by third party publishers as well as their purpose and storage period:

Mandatory Cookies

Titre

Objectif

Durée

__hs_opt_out

This cookie is used to remember to stop asking to accept cookies.

6 mois

__hs_do_not_trackdwsid

This cookie prevents tracking code.

6 mois

__hs_initial_opt_in

This cookie is used to prevent the banner from displaying visitors who are browsing in strict mode.

7 jours

__hs_cookie_cat_pref

This cookie is used to record categories to which a visitor has consented.

6 mois

__hs_gpc_banner_dismiss

This cookie is used when the Global Privacy Control banner is disabled.

180 jours

__hs_notify_banner_dismiss

This cookie is used when the website uses a Notify consent banner type.

180 jours

hs_ab_test

This cookie is used to systematically offer visitors the same version of an A/B test page they have already seen.

Session

<id>_key

When visiting a password-protected page, this cookie is set so that visitors do not have to log in again if they return to the same page using the same browser.

14 jours

hs-messages-is-open

This cookie is used to determine whether the chat widget is open and to save the information for future visits.

30 minutes

hs-messages-hide-welcome-message

This cookie is used to prevent the welcome message from reappearing on the same day after being rejected the first time.

1 jour

__hsmem

This cookie is saved when visitors log on.

7 jours

hs-membership-csrf

This cookie is used to ensure that content members' connections cannot be falsified.

Session

hs_langswitcher_choice

This cookie is used to record the language chosen by the visitor when viewing pages in multiple languages.

2 ans

__cfruid

This cookie is set by the provider of the broadcast network, due to its flow limitation policies.

Session

__cfuvid

This cookie is set by the provider of the broadcast network because of its flow limitation policies.

Session

__cf_bm

This cookie is set by the provider of the broadcast network and is necessary to protect bots.

30 minutes

Analysis cookies

Titre

Objectif

Durée

__hstc

Le cookie principal de suivi des visiteurs.
Il contient le domaine, hubspotutk, l'horodatage initial (première visite), le dernier horodatage (dernière visite), l'horodatage actuel (visite en cours) et le numéro de session (augmente à chaque session ultérieure).

6 mois

hubspotutk

Ce cookie garde une trace de l'identité d'un visiteur et est utilisé lors de la déduplication de contacts.

6 mois

__hssc

Ce cookie assure le suivi des sessions.

30 minutes

__hssrc

Lorsque le cookie de la session est modifié, ce cookie est également défini pour déterminer si le visiteur a réinitialisé son navigateur

Session

Google Analytics

Cookies de performance & mesure d'audience : https://policies.google.com/privacy

26 mois

Functionality Cookies

Titre

Objectif

Durée

messagesUtk

Ce cookie est utilisé pour reconnaître les visiteurs qui discutent via l'outil chatflows.

6 mois

Advertising Cookies

Titre

Objectif

Durée

Facebook Ads

Cookies publicitaires : https://facebook.com/privacy

12 mois

Google Ads

Cookies publicitaires : https://www.google.fr/intl/fr/policies/technologies/ads

13 mois

11. COOKIE MANAGEMENT

During your first visit to the Website, a banner informs you of the use of cookies on the Website and invites you to accept such cookies. Cookies will only be added if you accept them.

You can configure the cookies used on the Website at any time.

Your browser can also be configured to inform you of cookies placed on your browser and ask you to accept or not accept them.

You may accept or refuse cookies one by one or systematically refuse them.

We remind you that the configuration of cookies is likely to change the way in which you access our content and services requiring the use of cookies.

Please also note that the deletion of certain cookies may change the way you access our services.

Each browser has its own cookie management settings. The procedures are described in the Help menu of the software:

 

12. CHANGES TO THE PRIVACY POLICY

We will take all necessary steps to communicate you any changes to this privacy and cookie policy, and we will display any updated privacy and cookie policy on this page.

This policy was revised and updated in January 2024.