Privacy Policy

Last update: August 22, 2024

Cottagecore-dress.com collects certain Personal Data from its Users.

This document can be printed for consultation purposes by using the print command in the settings of any browser.

Owner and data controller

SPF Global SAS – 61 rue de lyon, 75012 Paris, France

Owner’s contact e-mail: contact@cottagecore-dress.com

Types of Data collected

The types of Personal Data that cottagecore-dress.com collects directly or through third parties include: first name; last name; e-mail address; telephone number; billing address; delivery address; Trackers; Usage data; answers to questions; clicks; keypress events; motion detection events; mouse movements; scroll position; tactile events.

Full details of each type of Personal Data collected are provided in the sections devoted to this Privacy Policy or by specific explanatory texts published prior to the collection of the Data.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when you use cottagecore-dress.com.
Unless otherwise specified, all Data requested by cottagecore-dress.com are mandatory and their absence may make it impossible for cottagecore-dress.com to provide the Services. In the event that cottagecore-dress.com specifies that certain Data are not mandatory, Users are free not to communicate them without any consequences for the availability or operation of the Service.
Should Users have any doubts as to which Personal Data is mandatory, they are invited to contact the Owner.
Any use of Cookies – or other tracking tools – by cottagecore-dress.com or by the owners of third-party services used by cottagecore-dress.com is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published or communicated through cottagecore-dress.com.

How and where Data is processed

Processing methods

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Data.
Data processing is carried out using computers or IT tools, following procedures and organizational modes closely related to the purposes indicated. In addition to the Owner, Data may be accessible, in certain cases, to certain categories of persons in charge of the operation of cottagecore-dress.com (administration, sales, marketing, legal department, system administration) or to external parties (such as third-party technical service providers, courier services, hosting providers, IT companies, communications agencies) designated, where applicable, as Subcontractors by the Owner. An updated list of these parties may be requested from the Owner at any time.

Place of processing

Data is processed at the Owner’s headquarters and at all other locations where the parties responsible for processing are located.
Depending on the User’s location, data transfers may involve the transfer of the User’s Data to a country other than his or her own. To find out more about where such transferred Data is processed, Users may consult the section containing details on the processing of Personal Data.

Retention period

Unless otherwise specified in this document, Personal Data is processed and kept for as long as required for the purpose for which it was collected and may be kept longer due to an applicable legal obligation or on the basis of the User’s consent.

Purposes of processing

User Data is collected to enable the Owner to provide its Service, fulfill its obligations, respond to law enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Payment management, Platform services and hosting, Analysis and Protection against SPAM and bots.

For precise information on the Personal Data used for each purpose, the User may consult the “Detailed information on the processing of Personal Data” section.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes through several services:

Analysis

The services contained in this section enable the Owner to monitor and analyze web traffic and track changes in User behavior.

Google Analytics (Universal Analytics) (Google Ireland Limited)

Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited (“Google”). Google uses the Data collected to track and analyze the use of cottagecore-dress.com, prepare reports on its activities and share them with other Google services.Google may use the Data collected to contextualize and customize ads on its own advertising network.

Personal data processed : Usage data; Trackers.

Place of processing: Ireland – Privacy policy – Opt-out.

Payment management

Unless otherwise specified, cottagecore-dress.com processes all payments by credit card, bank transfer or other means, using external payment service providers. In general and unless otherwise stated, Users are requested to provide their payment details and personal information directly to said payment service providers.
Cottagecore-dress.com is not involved in the collection and processing of such information: instead it merely receives notification from said payment service providers, indicating whether the payment has been completed.

PayPal (Paypal)

PayPal is a payment service offered by PayPal Inc. that allows Users to make online payments.

Personal data processed: e-mail address; last name; telephone number; first name.

Place of processing : See Paypal Privacy Policy – Privacy Policy.

Protection against SPAM and bots

This type of service analyzes traffic on cottagecore-dress.com, potentially containing Users’ Personal Data, in order to filter out undesirable parts of traffic, messages and content that are recognized as SPAM or to protect it from the activities of malicious bots.

Google reCAPTCHA (Google Ireland Limited)

Google reCAPTCHA is an anti-spam protection service offered by Google Ireland Limited.
Use of reCAPTCHA is subject to Google’s privacy policy and terms of use.

Personal data processed: clicks; usage data; mouse movements; scroll position; answers to questions; Trackers; motion detection events; keypress events; touch events.

Place of processing: Ireland – Privacy policy.

Platform services and hosting

The function of these services is to host and run the key components of cottagecore-dress.com, enabling cottagecore-dress.com to be made available from a unified platform. This type of platform offers a wide range of tools to the Owner – for example: analytics, user registration, comment publishing, database management, e-commerce, payment processing – which involve the collection and handling of Personal Data.
Some of these services operate through geographically dispersed servers, making it difficult to determine the actual location where Personal Data is stored.

AWS (Amazon Web Services Inc.)

AWS is a platform offered by Amazon Web Services Inc. that allows the Owner to run and host a website.

Personal data processed: billing address; delivery address; last name; telephone number; first name.

Place of processing : Paris – Privacy policy.

Further information on the processing of Personal Data

Selling goods and services online

The Personal Data collected is used to provide services or sell goods to the User, including payment and potential delivery.
The Personal Data collected to make the payment may include the credit card, the bank account used for the transfer or any other means of payment used. The type of Data collected by cottagecore-dress.com depends on the payment system used.

Cookies policy

Cottagecore-dress.com uses Cookies. For more information, Users may consult the Cookies Policy.

Additional information for users

Legal basis for processing

The Owner may process Personal Data relating to Users if one of the following conditions applies:

Users have given their consent for one or more specific purposes; Note: Under certain legislation, the Owner may be authorized to process Personal Data until the User objects (“opt-out”), without having to depend on consent or one of the following legal bases. However, this condition does not apply where the processing of Personal Data is subject to European data protection law;
the provision of Data is necessary for the performance of an agreement with the User or for any pre-contractual obligation of the User;
processing is necessary to comply with a legal obligation to which the Owner is subject;
processing is connected with a task carried out in the public interest or in the exercise of public authority vested in the Owner;
processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In all cases, the Owner will be happy to help you clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a legal or contractual requirement, or a requirement necessary to enter into a contract.

Additional information on retention periods

Consequently:

Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until the contract is fully performed.
Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained for as long as necessary to achieve those purposes. Users can find specific information regarding the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.

The Owner may be authorized to retain Personal Data for a longer period of time whenever the User has given consent to such processing, for as long as such consent is not withdrawn. In addition, the Owner may be obliged to retain Personal Data for a longer period whenever this is required to satisfy a legal obligation or by order of an authority.

Once the retention period has expired, the Personal Data will be deleted. Consequently, the right of access, the right of erasure, the right of rectification and the right to data portability cannot be applied after the expiry of the retention period.

Users’ rights

Users may exercise certain rights concerning their Data processed by the Owner.

In particular, Users have the right to do the following, to the extent permitted by law:

Withdraw their consent at any time. Users have the right to withdraw their consent if they have already consented to the processing of their Personal Data.
Oppose the processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
Access to their Data. Users have the right to know whether their Data is being processed by the Owner, to obtain information on certain aspects of the processing and to obtain a copy of the Data being processed.
Verify and obtain rectification. Users have the right to verify the accuracy of their Data and to request that it be updated or corrected.
Limit the processing of their Data. Users have the right to restrict the processing of their Data. In this case, the Owner will only process their Data for storage purposes.
Have their Personal Data deleted or erased. Users have the right to have their Data deleted by the Owner.
Recover their Data and have it transferred to another controller. Users have the right to recover their Data in a structured, commonly used and machine-readable format and, if technically possible, to have it transferred to another data controller without hindrance of any kind.
File a complaint. Users have the right to lodge a complaint with their competent data protection authority.

Users also have the right to know the legal basis for transfers of Data to any foreign country and in particular to any international organization governed by public international law or created by two or more countries, such as the UN, as well as the security measures taken by the Owner to safeguard their Data.

Information on the right to object to processing

Where Personal Data is processed in the public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a reason related to their particular situation that should justify such objection.

Users should be aware, however, that if their Personal Data is processed for direct marketing purposes, they may object to such processing at any time, free of charge and without any justification. If the User objects to the processing for prospecting purposes, the Personal Data will no longer be processed for these purposes. To find out whether the Owner processes Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights

Any request to exercise the User’s rights may be addressed to the Owner using the contact details provided in this document. Such requests may be exercised free of charge and will receive a reply from the Owner, providing Users with the information required by law, as soon as possible and always within one month. Any rectification or deletion of Personal Data or any limitation of processing will be communicated by the Owner to each recipient to whom the Personal Data has been communicated, where applicable, unless this proves impossible or involves a disproportionate effort. At Users’ request, the Owner will inform them of these recipients.

Further information on data processing and collection

Legal action

The User’s Personal Data may be used for legal purposes by the Owner before the courts or in steps that may lead to legal action resulting from improper use of cottagecore-dress.com or related Services.
The User is aware that the Owner may be required to disclose Personal Data at the request of public authorities.

Additional information concerning the User’s Personal Data

In addition to the information contained in this Privacy Policy, cottagecore-dress.com may provide the User with additional information and contextual information concerning particular services or the collection and processing of Personal Data.

System logs and maintenance

For operational and maintenance purposes, cottagecore-dress.com and any third-party services may collect files that record interactions with cottagecore-dress.com (system logs) or use other Personal Data (such as IP address) for this purpose.

Information not included in this policy

Further information regarding the collection or processing of Personal Data may be requested from the Owner at any time. Please refer to the contact details at the beginning of this document.

Changes to this Privacy Policy

The Owner reserves the right to make changes to this Privacy Policy, at any time, by informing its Users on this page and possibly in this cottagecore-dress.com or – insofar as this is technically and legally possible – by sending a notification to Users via the contact details available to the Owner. It is strongly recommended to consult this page frequently, referring to the date of the last modification indicated at the bottom.

If the changes influence the processing activities carried out on the basis of the User’s consent, the Owner must obtain a new consent from the User where necessary.

Definitions and legal references

Personal data (or Data)

Any information which, directly, indirectly or in combination with other information – including a personal identification number – allows the identification or identifiability of a natural person.

Usage data

Information collected automatically by cottagecore-dress.com (or by third-party services employed by cottagecore-dress.com), which may include IP addresses or domain names of computers used by Users who use dark-academia-clothing.us, URI (Uniform Resource Identifier) addresses, time of request, method used to submit the request to the server, size of file received in response, numeric code indicating status of server response (favorable result, error, etc.), country of origin, country of origin, e-mail address, etc. ), the country of origin, the characteristics of the browser and operating system used by the User, various details relating to the time per visit (e.g. time spent on each page in the Application) and details relating to the path followed in the Application with special reference to the sequence of pages visited, and other parameters relating to the User’s operating system or computer environment.

User

The person using cottagecore-dress.com who, unless otherwise indicated, corresponds to the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Subcontractor

The natural or legal person, public authority, institution or other body that processes Personal Data on behalf of the Data Controller, as described in this Privacy Policy.

Data Controller (or Owner)

The natural or legal person, public authority, institution or any other body which, alone or jointly with others, determines the purposes and means of processing Personal Data, including security measures concerning the operation and use of cottagecore-dress.com. Unless otherwise stated, the Data Controller is the Owner of cottagecore-dress.com.

Cottagecore-dress.com (or this Application)

The means by which the User’s Personal Data is collected and processed.

Service

The service provided by cottagecore-dress.com as described in the relevant terms and conditions (if any) and on this website/application.

European Union (or EU)

Unless otherwise stated, all references in this document to the European Union include all current member states of the European Union and the European Economic Area.

Cookie

Cookies are small sets of data stored in the User’s browser.

Trackers

A Tracker refers to any technology – for example, Cookies, unique identifiers, web beacons, embedded scripts, electronic tags and fingerprints – used to track Users, for example by accessing or storing information on the User’s device.

Legal information

This privacy policy applies solely to cottagecore-dress.com, unless otherwise indicated in this document.