Privacy policy

This Confidentiality Policy is intended to inform you about the way in which the personal information that you communicate to us, on our site, or by any other means is processed. Madura is committed to processing the data you entrust to us in a transparent, confidential and secure manner.

In the context of the processing of your personal data, Madura recognizes the importance of ensuring the protection and security of your privacy and your personal data, and has established this Privacy Policy in compliance with the strictest criteria for the protection of personal data, as well as any applicable regulations, in particular law n°2018-493 of June 20, 2018 and the General Data Protection Regulations (hereinafter “GDPR”) which came into force on May 25 2018. The manner in which your personal data is processed and collected is applicable to all users of the site and/or customers of Madura. We invite you to read the contents carefully. If you disagree with the process put in place by Madura, please do not provide any personal information about yourself and stop using the site. By continuing such communication, you acknowledge having been informed of the processing of your personal data and accept it.

This Confidentiality Policy may be modified by Madura at any time and without notice, in particular due to normative changes. The updated policy will apply immediately upon publication on our site. By providing personal information after these changes have been made, you agree to the new section. Consequently, in accordance with the GDPR adopted by the European Parliament on April 14, 2016 and the Data Protection Act of January 6, 1978 as amended, Madura informs you of the following points:

ARTICLE 1 – DATA PROCESSING RESPONSIBLE

The person responsible for processing personal data collected via www.madura.com is:

• Madura
• Simplified joint stock company with capital of 320,000.00 euros
• Registered with the Paris RCS under number 722 016 813 R.C.S. Paris
• Head office: 4 RUE TRONCHET 75008 PARIS
• Tel. : 01 42 34 99 59

For any questions relating to the processing of your personal data or to exercise your rights, you can contact the competent department at the following address: eshop@madura.fr.

ARTICLE 2 – INFORMATION COLLECTED AND USE OF YOUR PERSONAL DATA

We only collect information that is adequate, relevant and limited to what is necessary for the purposes for which it is processed (“data minimization”). We do not collect personal data from minors without parental authorization. Therefore, we thank you for ensuring that your children do not transmit any personal data to us without your permission.

Types of data collected:

• Personal data: Name, first name, postal address, email address, telephone number.
• Payment data: Information necessary to process your online purchases, managed by a secure third-party payment provider (e.g. PayPal, Stripe, Alma).
• Navigation data: IP address, browser type, pages viewed, session duration.
• Order data: Details of products purchased, order amount, delivery information.
• Marketing data: Consent for sending newsletters, SMS and other commercial offers.

Collection methods:

• When you browse our website, via cookies and other trackers (see Article 8).
• When you subscribe to our newsletter or create a customer account.
• When placing orders, for payment processing and delivery.

Legal bases for data processing:

• Execution of a contract: for order management, product delivery and payment processing.
• Consent: for sending newsletters, commercial offers or promotional emails.
• Legitimate interest: to improve the customer experience, personalize the offer, and analyze browsing behavior (in particular via cookies).

Madura does not collect sensitive data such as information relating to health, sexual orientation, or religion.

ARTICLE 3 – PURPOSES OF PROCESSING

Based on your prior consent, personal data concerning you are collected and processed by Madura for the following purposes:

• Processing your orders: Payment, preparation and delivery of your products.
• Managing and sending newsletters and SMS: Information about our products, special offers and promotions.
• Analysis of your use of our e-shop: Improvement of site performance, personalization of your experience, according to your preferences.
• Managing chat, phone calls and emails: Answers to your requests and questions.
• Collecting customer reviews: To improve our services and the quality of our products.

We use analytics and advertising tools to personalize your experience and target our communications (for example, via Google Ads or Facebook). These treatments are based on cookies, requiring your consent. You can refuse this type of processing by deactivating the corresponding cookies. (see article 8) In addition, we may collect information about you via promotions, competitions or satisfaction surveys in our physical or online stores. The data collected in these contexts will be used in accordance with this privacy policy.

ARTICLE 4 – RECIPIENTS OF YOUR DATA

Your data is exclusively accessible:

• To people from Madura who need access as part of their duties (customer service, logistics, marketing).
• To our service providers (host, analysis platform, payment provider, etc.).

Subcontractors:

We use the following services to process some of your data:

• Shopify Inc.: Hosting our site and managing payments.
• Klaviyo: Sending newsletters and managing marketing communications.
• Google Analytics and Hotjar: To analyze user behavior on our site.
• Google Ads and Facebook (Meta): For behavioral advertising and ad targeting.

International data transfer:

The personal data collected may be transferred to countries outside the European Union, such as the United States, as part of the services provided by our service providers (in particular Shopify). We ensure that these transfers comply with the data protection standards applicable under the GDPR, using Standard Contractual Clauses (SCCs), and take all necessary measures to ensure an adequate level of protection.

ARTICLE 5 – SERVICES PROVIDED BY THIRD PARTIES

Some third-party providers, such as payment gateways (PayPal, Stripe, etc.), have their own privacy policies. We recommend that you read their privacy policies carefully to understand how they treat your personal data.

Payment data (such as credit card information) does not pass through our site and is directly collected and processed by our secure payment providers: Stripe, PayPal and Alma. These providers manage transactions in accordance with their own privacy policies.

You can consult their privacy policies to learn more:

• Stripe Privacy Policy
• PayPal Privacy Policy
• Alma Privacy Policy
  
  

ARTICLE 6 – PERSONAL DATA STORAGE DURATION

Data related to orders and payments:

Data relating to orders and payments is kept for 10 years from their collection, in accordance with legal accounting and tax obligations.

Data from inactive customer accounts:

Inactive customer accounts (without order or connection) are deleted after 3 years, unless expressly requested by the user or otherwise legally required.

Marketing data:

Data collected for marketing purposes (newsletters, SMS) are kept until you withdraw your consent or after 3 years of inactivity.

ARTICLE 7 – SECURITY OF YOUR PERSONAL DATA

We employ all technical and organizational security measures to ensure the protection of information concerning you, in accordance with regulations.

Although we implement all necessary measures to secure your data (SSL encryption, secure servers, etc.), no method of transmission over the Internet or electronic storage is completely secure.

In the event of an incident, we undertake to inform you within the legal deadlines and to take the necessary corrective measures.

ARTICLE 8 – CONTROL FILES (COOKIES)

A cookie is a text file placed when you visit our site. We use technical, audience and advertising cookies to personalize your experience.

During your first visit to our site, an information banner is displayed to allow you to accept or refuse cookies, or to personalize your choices.

You can configure your browser to refuse cookies.

Types of cookies used:

• Technical cookies: necessary for the proper functioning of the site.
• Audience cookies (Google Analytics, etc.): to analyze browsing behavior and improve the user experience.
• Advertising cookies (Google Ads, Facebook): to personalize online advertisements.

Targeted advertising relies on the use of cookies and similar technologies requiring your explicit consent. You can withdraw this consent at any time by modifying your cookie preferences via our dedicated tool.

Madura does not make automated decisions based on personal data, including profiling, except in the context of targeted advertising and analysis of browsing behavior, in order to improve the user experience.

By accepting the use of cookies via the banner, you consent to their use. You can manage your cookie preferences at any time, either via your browser settings or by using our cookie management tool available on our site.

You can opt out of targeted ads and customize your preferences through your browser settings or by using third-party tools like Your Online Choices.

ARTICLE 9 – YOUR RIGHTS

In application of GDPR, you have certain rights over your personal data, including:

• The right of access: obtain a copy of your personal data.
• The right of rectification: request correction of your data if it is inaccurate.
• The right to erasure: request deletion of your data in certain cases.
• The right to restriction of processing: limit the use of your data in certain circumstances.
• The right to portability: receive your data in a structured format and transfer this data to another data controller.
• The right to object: object to certain processing, in particular for commercial prospecting purposes.

We are committed to processing your requests within a period of 30 days. In the event of a complex request, this deadline may be extended to 2 months, with notification to the user.

You can exercise these rights by contacting us at the following address: eshop@madura.fr.

ARTICLE 10 – PERSONAL DATA VIOLATIONS

In the event of a personal data breach, Madura undertakes to notify the CNIL and to inform you under the conditions prescribed by the GDPR. We have implemented internal procedures to quickly identify, evaluate and resolve incidents.

If a violation presents a high risk for your rights and freedoms, we undertake to inform you without delay of the measures taken to remedy them.

If you think that Madura does not respect your rights concerning your personal data, you have the possibility of filing a complaint with the CNIL (or the competent authority in your country).

ARTICLE 11 – CHANGES TO THE PRIVACY POLICY

We reserve the right to modify this privacy policy at any time. Any substantial modification will be communicated via our site or by email.

We encourage you to periodically review this policy for updates.

If significant changes affect the way we collect or use your personal data, we will request your explicit consent before applying these changes.