The purpose of this Privacy Policy is to provide you with clear and transparent information on how OR FINE ART collects, processes, and protects your personal data when you use the website www.editions.richardorlinski.com.
OR FINE ART processes your personal data in accordance with the applicable regulations, in particular the French Data Protection Act no. 78-17 of 6 January 1978, as amended, and Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data (GDPR).
In this respect, OR FINE ART undertakes to process personal data:
• In a lawful, fair, and transparent manner;
• To serve specified, explicit, and legitimate purposes;
• In a way that is adequate, relevant, and limited to what is necessary;
• While ensuring appropriate data security.
1. WHO IS THE DATA CONTROLLER?
The data controller is OR FINE ART, a limited liability company (SARL) with share capital of €2,000, registered with the Paris Trade and Companies Register under number 834 045 189, with registered office located at 4 rue François 1er, 75008 Paris, represented by its manager, Mr Richard Orlinski.
2. WHY IS YOUR DATA PROCESSED? WHAT IS THE LEGAL BASIS USED?
Purpose
Processing of requests submitted via the contact form
Response to requests received by email, telephone, or post
Sending out newsletters
Sending out marketing communications regarding similar products
Creation of a customer account
Tracking of orders, deliveries, invoicing, payment
Storage of the payment method for future purchases
Compliance with tax and accounting obligations
Management of disputes (pre-litigation and litigation)
Legal basis
Consent
Legitimate interest
Consent
Legitimate interest
Contractual performance
Contractual performance
Consent
Legal obligation
Legitimate interest
3. WHAT DATA DO WE COLLECT?
We collect the following data:
• Identification data: last name, first name, email address, telephone, postal addresses, login details;
• Payment data: bank card number, expiry date, security code (deleted immediately after payment);
• Commercial data: history of purchases, orders, invoices, interactions with customer service;
• Browsing data: IP address, logs, cookies (see our Cookie Policy).
Mandatory data are marked with an asterisk (*).
The absence of this data may prevent the service from being carried out.
4. WHO CAN ACCESS YOUR DATA?
4.1 The authorized staff of OR FINE ART
Only authorized persons have access to your data to carry out their duties.
4.2 Our subcontractors (hosting providers, technical service providers)
These are located in the European Union and offer the guarantees required by the GDPR.
4.3 Our commercial partners (with your consent)
Examples:
• GlitM LLC
• STRIPE
• FUTURLOG
4.4 Competent authorities
Your data may be sent to judicial or administrative authorities where required to do so by law.
5. HOW LONG IS YOUR DATA STORED?
Purpose
Commercial relationship
Payment
Contact form/newsletter
Dispute management
Period of storage
Duration of the relationship + 3 years (canvassing) + 10 years in legal archiving
Until the end of the cancellation period. Bank data stored with consent (excluding security code)
3 years after last contact
Duration of the procedure + statutory limitation period
6. YOUR RIGHTS
In accordance with the GDPR, you have the following rights:
• Right of access to your data;
• Right to rectification of your inaccurate data;
• Right to erasure in the cases provided for by the GDPR;
• Right to restriction of processing;
• Right to data portability;
• Right to object, in particular to canvassing;
• Right to withdraw your consent at any time.
Before processing your request, we may ask you for proof of identity.
You can exercise your rights by sending an email to [address@email.com] or by post to:
OR FINE ART – 4 rue François 1er, 75008 Paris – France
If you believe your rights have not been respected, you may refer the matter to the CNIL:
CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07 – France
https://www.cnil.fr/
7. DATA SECURITY
OR FINE ART implements technical and organizational measures to ensure the security and confidentiality of your data (access control, backup, encryption, etc.).
In the event of a breach of your data presenting a high risk to your rights, we undertake to:
• Notify the CNIL within 72 hours;
• Inform you as soon as possible;
• Take all necessary measures to limit its effects.