Privacy policy

The present Privacy Policy is intended to inform you about the way in which any personal information you may communicate to us, on our site or by any other means, is handled. Madura is committed to handling the data you entrust to us in a transparent, confidential and secure manner.

In processing your personal data, Madura recognizes the importance of ensuring the protection and security of your privacy and personal data, and has established this Privacy Policy in compliance with the strictest criteria for the protection of personal data, as well as any applicable regulations, including Law No. 2018-493 of June 20, 2018 and the General Data Protection Regulation (hereinafter “GDPR”) that came into force on May 25, 2018. The way in which your personal data is processed and collected is applicable to all Madura website users and/or customers. We invite you to read its contents carefully. If you do not agree with the process implemented by Madura, we ask you not to communicate any personal information about yourself and to stop using the site. By continuing such communication, you acknowledge that you have been informed of the processing of your personal data and accept it.

This Privacy Policy may be modified by Madura at any time and without prior notice, in particular as a result of changes in legislation. The updated policy will apply as soon as it is published on our site. By communicating personal information after these changes have been made, you accept the new section. Therefore, in compliance with the RGPD adopted by the European Parliament on April 14, 2016 and the amended French Data Protection Act of January 6, 1978, Madura informs you of the following:

ARTICLE 1 - DATA CONTROLLER

The controller of personal data collected via www.madura.com is:

• Madura
• Simplified joint-stock company with capital of 320,000.00 euros
• Registered with the RCS of Paris under number 722 016 813 R.C.S. Paris
• Registered office: 4 RUE TRONCHET 75008 PARIS
• Phone number: 01 42 34 99 59

If you have any questions about the processing of your personal data or wish to exercise your rights, you can contact the relevant department at the following address: eshop@madura.fr.

ARTICLE 2 - INFORMATION COLLECTED AND USE OF YOUR PERSONAL DATA

We only collect information that is adequate, relevant and limited to what is necessary for the purposes for which it is processed (“data minimization”). We do not collect personal data from minors without parental consent. Please ensure that your children do not send us any personal data without your permission.

Types of data collected :

• Personal data: Last name, first name, postal address, e-mail address, telephone number.
• Payment data: Information required to process your online purchases, managed by a secure third-party payment provider (e.g. PayPal, Stripe, Alma).
• Navigation data: IP address, browser type, pages viewed, session duration.
• Order data: Details of products purchased, order amount, delivery information.
• Marketing data: Consent for the sending of newsletters, SMS and other commercial offers.

Collection methods:

• When you browse our website, via cookies and other tracers (see Article 8).
• When you subscribe to our newsletter or create a customer account.
• When placing orders, for payment processing and delivery.

Legal basis for data processing:

• Contract performance: for order management, product delivery and payment processing.
• Consent: to send newsletters, commercial offers or promotional emails.
• Legitimate interest: to improve the customer experience, personalize our offer and analyze browsing behavior (in particular via cookies).

Madura does not collect sensitive data such as information relating to health, sexual orientation or religion.

ARTICLE 3 - PURPOSES OF PROCESSING

On the basis of your prior consent, your personal data will be collected and processed by Madura for the following purposes:

• Order processing: payment, preparation and delivery of your products.
• Managing and sending newsletters and SMS: product information, special offers and promotions.
• Analysis of your use of our e-shop: Improving site performance, customizing your experience according to your preferences.
• Chat, phone and email management: Answers to your requests and questions.
• Customer feedback : To improve our services and the quality of our products.

We use analytics and advertising tools to personalize your experience and target our communications (for example, via Google Ads or Facebook). This processing is based on cookies and requires your consent. You can refuse this type of processing by deactivating the corresponding cookies. (see article 8) In addition, we may collect information about you via promotions, competitions or satisfaction surveys in our physical or online stores. Data collected in these contexts will be used in accordance with this privacy policy.

ARTICLE 4 - RECIPIENTS OF YOUR DATA

Your data is only accessible to:

• Madura employees who need access to the system as part of their job (customer service, logistics, marketing).
• Our service providers (host, analysis platform, payment service provider, etc.).

Subcontractors:

We use the following services to process some of your data:

• Shopify Inc.: Website hosting and payment management.
• Klaviyo: Sending newsletters and managing marketing communications.
• Google Analytics and Hotjar: To analyze user behavior on our site.
• Google Ads and Facebook (Meta) : For behavioral advertising and ad targeting.

International data transfer:

Personal data collected may be transferred to countries outside the European Union, such as the United States, as part of the services provided by our service providers (including Shopify). We ensure that these transfers comply with the applicable data protection standards under the RGPD, using Standard Contractual Clauses (SCC), and take all necessary measures to guarantee an adequate level of protection.

ARTICLE 5 - SERVICES PROVIDED BY THIRD PARTIES

Some third-party service providers, such as payment gateways (PayPal, Stripe, etc.), have their own privacy policies. We recommend that you read their privacy policies carefully to understand how they handle your personal data.

Payment information (such as credit card details) does not pass through our site and is collected and processed directly by our secure payment service providers: Stripe, PayPal et Alma. These service providers manage transactions in accordance with their own privacy policies.

You can consult their privacy policies to find out more.:

• Stripe privacy policy
• PayPal privacy policy
• Alma privacy policy
  
  

ARTICLE 6 - RETENTION PERIOD FOR PERSONAL DATA

Order and payment data:

Data relating to orders and payments are kept for a period of 10 years from the date of collection, in accordance with legal accounting and tax requirements.

Inactive customer account data:

Inactive customer accounts (no orders or logins) are deleted after 3 years, unless otherwise requested by the user or required by law.

Marketing data:

Data collected for marketing purposes (newsletters, SMS) are kept until you withdraw your consent or after 3 years of inactivity.

ARTICLE 7 - SECURITY OF YOUR PERSONAL DATA

We employ all technical and organizational security measures to ensure the protection of your information, in compliance with regulations.

Although we take every precaution to ensure the security of your personal information (SSL encryption, secure servers, etc.), no Internet transmission or electronic storage method is completely secure.

In the event of an incident, we undertake to inform you within the legal deadlines and to take the necessary corrective measures.

ARTICLE 8 – COOKIE FILES (COOKIES)

A cookie is a text file placed when you visit our website. We use technical, audience measurement, and advertising cookies to personalize your experience.

During your first visit to our site, an information banner is displayed allowing you to accept or refuse cookies, or to customize your choices.

You can configure your browser to refuse cookies.

Types of cookies used:

• Technical cookies: required for the proper functioning of the site.
• Audience measurement cookies (Google Analytics, etc.): used to analyze browsing behavior and improve the user experience.
• Advertising cookies (Google Ads, Facebook): used to personalize online advertisements.

Targeted advertising is based on the use of cookies and similar technologies requiring your explicit consent. You can withdraw this consent at any time by adjusting your cookie preferences via our dedicated tool.

Madura does not make automated decisions based on personal data, including profiling, except in the context of targeted advertising and the analysis of browsing behavior to improve the user experience.

By accepting the use of cookies via the banner, you consent to their use. You can manage your cookie preferences at any time, either through your browser settings or by using our cookie management tool available on our site.

You can disable targeted advertising and customize your preferences through your browser settings or by using third-party tools such as Your Online Choices.

ARTICLE 9 – YOUR RIGHTS

Under the GDPR, you have certain rights regarding your personal data, including:

• The right of access: to obtain a copy of your personal data.
• The right to rectification: to request the correction of your data if it is inaccurate.
• The right to erasure: to request the deletion of your data in certain cases.
• The right to restriction of processing: to limit the use of your data in certain circumstances.
• The right to data portability: to receive your data in a structured format and to transfer it to another data controller.
• The right to object: to object to certain processing, including for direct marketing purposes.

We are committed to processing your requests within 30 days. In the case of a complex request, this period may be extended to 2 months, with notification to the user.

You can exercise these rights by contacting us at the following address: eshop@madura.fr.

ARTICLE 10 – PERSONAL DATA BREACHES

In the event of a personal data breach, Madura undertakes to notify the CNIL and to inform you under the conditions prescribed by the GDPR. We have implemented internal procedures to identify, assess, and resolve incidents promptly.

If a breach poses a high risk to your rights and freedoms, we will inform you without delay about the measures taken to address it.

If you believe that Madura does not respect your rights regarding your personal data, you have the option to file a complaint with the CNIL (or the competent authority in your country).

ARTICLE 11 – CHANGES TO THE PRIVACY POLICY

We reserve the right to modify this privacy policy at any time. Any substantial changes will be communicated via our website or by email.

We encourage you to review this policy regularly to stay informed of updates.

If significant changes affect how we collect or use your personal data, we will seek your explicit consent before implementing those changes.