Valmont法儿曼集团个人数据保护政策

最后更新于2024年3月

1.一般性声明

Valmont法儿曼（CVL Cosmetics SA及其子公司）总部位于瑞士，业务遍及全球，专注于高端化妆品和美容品的生产与销售，同时致力于推广艺术与美学。我们非常重视您个人数据的安全性和隐私性。我们将依据您所在国家的现行数据保护法律处理您的个人数据，特别是遵循《瑞士联邦数据保护法》（DPA）和《欧洲数据保护条例》（GDPR），遵守合法性、公平性和透明性、目的限制、数据最小化、准确性、有限存储、完整性、可用性和保密性等原则。

本隐私政策适用于以下情形：当您访问我们的网站、销售点、SPA中心、欧洲经济区或瑞士的法儿曼酒店SPA中心（统称“销售点”）；通过数字平台与我们沟通；联系我们的客户服务或参加活动。在这些情况下，与产品和服务相关的个人数据。

CVL Cosmetics SA（1, place du port, Morges xxxx Switzerland）负责处理所收集的客户数据。CVL Cosmetics SA在欧洲和瑞士的子公司也可能作为数据控制者，具体取决于收集个人数据的位置。

本《个人数据保护政策》阐明了我们所收集的您的个人数据类别、我们可能使用数据的方式、可能与其共享数据的人员、您如何行使与相关权利，以及您对我们使用这些数据的权利。本政策还介绍了我们为保护个人数据安全所采取的措施、保存个人数据的时间以及联系我们的方式。

我们建议您仔细阅读本《数据保护政策》，因其包含关于您个人数据的重要信息。如有任何疑问，您可以通过“联系我们”中提供的信息与我们联系。

2.我们收集哪些个人数据？

我们可能会通过直接方式（例如在商店购买产品时）或间接方式（例如您与我们网站互动时使用的电子设备信息）收集您的个人数据。

2.1 您直接向我们提供的个人数据：

当您在我们的网站上注册或创建客户账户、进行订购和购买、使用我们网站上的联系表或其他表格、访问我们的商店或SPA中心、订阅我们的时事通讯或使用我们的数字平台时，我们会处理您提供的个人数据：

您的姓名
电子邮件
出生日期
性别
电话号码
邮寄地址
在我们网站购物时的信用卡支付信息。
如果您在我们的网站上使用PayPal服务进行购物，您的PayPal账户电子邮件地址将被使用。
在法律要求的情况下，提供税务识别码或身份文件编号，以符合欧盟开具发票的法律规定
2.2 您间接提供给我们的个人数据

我们还通过放置在您设备上的cookies收集有关您访问我们网站的信息，包括流量数据、位置数据、网络日志以及您的IP地址。某些cookie是运行数字平台所必需的，而其他cookie则用于分析目的，帮助我们为您提供更加个性化的服务和更优质的数字体验。

3. 我们如何使用您的个人数据？

我们可能将收集的个人数据用于以下目的：

• 优化我们网站的某些功能或显示；
• 提升您在我们媒体平台上的浏览体验；
• 支持销售点进行产品销售；
• 与您沟通并管理顾客关系；
• 推出比赛和忠诚度计划；
• 进行受众分析或统计；
• 如果您选择接收Valmont法儿曼集团的通讯，我们将向您发送相关信息；
• 验证您的身份，以保护您免受欺诈、其他非法活动、未经授权的交易、索赔及其他侵害，并管理您的数据风险；
• 维护和提升我们产品与服务的质量和安全性；
• 履行我们的法律和监管责任；
• 为您提供最适合您且您可能感兴趣的信息或产品。仅在您事先同意接收此类信息的情况下，我们才会发送。
• 管理您的肌肤诊断数据和结果，定制营销信息以改善您的体验。
• 通过监控产品和服务质量，优化客户体验。

请注意，如果您对订单有疑问或遇到任何网站交互问题，我们可能会使用您的个人数据，通过我们的某家子公司与您联系，以更好地满足您的需求。 

4.处理个人数据的法律依据

我们基于以下一项或多项法律依据来收集和使用您的个人数据：

• 您的同意；
• 我们与您之间存在的合同关系；
• 我们的合法商业利益；或
• 履行我们的法律义务。

5.您的数据是否会与第三方共享？

我们不会出售或披露您的个人数据，除非在此处或在数据收集时另有说明。

• 根据本隐私政策的规定，我们可能会在Valmont法儿曼集团内部或与第三方共享个人数据，尤其是与我们授权的承包商共享。
• 我们可能会披露您的个人数据
  
  •  在法律或适用的法律程序（如法院命令或传票）、
  • 司法机关或其他相关机构代表的要求或允许下，以满足合法的法律要求，
  • 或作为调查涉嫌欺诈或非法活动的一部分
  • 如果有正当理由，例如涉及至关重要的私人或公共利益，或其他类似情况，
  • 或在所有其他情况下，在获得您的同意后。

6. 您的数据将被存储在哪里，它会被传输吗？

您的个人数据存储在与我们网站或管理工具相关联的数据库中，并由我们的服务提供商将其托管于服务器中。这些服务器是安全的，并由我们服务提供商的保密章程约束，遵守有关个人数据保护的法律法规。

Valmont法儿曼集团的业务遍及全球。在这种情况下，我们可能会将您的个人数据传输到国外，包括那些无法提供与您居住国同等保护水平的国家。在进行此类传输之前，我们将采取适当措施以保护您的个人数据。在特定法律允许的情况下，我们也可能在获得您明确同意后传输个人数据。

7.谁有权访问您的个人数据？

• 处理我们网站订单的Valmont法儿曼集团授权人员、维护网站和确保正常运行的技术团队成员，以及处理客户联系表格请求的客户关系维护人员。
• 为您提供服务的Valmont法儿曼店铺和酒店SPA员工。
• 可能涉及我们网站的服务供应商，或来自Valmont集团的请求。
• 我们的授权分包商，仅在信息收集时传达的目的和目标范围内，或根据本隐私政策中解释的用途和目标范围内，履行其职责。

我们确保我们的员工和服务提供商，能够按照适用的个人数据保护法律行事，并特别注意此类数据的保密性和安全性。

所有可能访问您个人数据的人员和员工均已签署保密协议。

8.您的数据将被保存多长时间？

在适用法律允许的范围内，我们将保留我们获得的关于您的个人数据，直至：

• 根据本隐私政策的规定，达到获取这些数据的目的所需的时间为止，或
• 根据本隐私政策中的其他法律依据，在达到获取个人数据的初始目的所需的时间之后继续保留这些数据。

您可以随时行使删除个人数据的权利，请参阅“您的权利”和“联系我们”部分。

9. 您的权利

在您所在国家/地区法律允许的范围内，您可以

• 您可以通过客户账户面板或以下联系方式与我们联系，以访问、修改、更新和更正我们所持有的您的个人数据。
• 您可以通过我们的在线联系表格或以下联系方式与我们取得联系，要求删除或限制您的个人信息；或
• 以相同方式行使您对数据的保留权利。在法律允许的范围内，您可以随时基于与您具体情况相关的合法理由，撤销对处理您个人数据的同意许可，我们将根据您的偏好酌情处理。如需行使这些权利，请通过本文件最后一节提供的地址与我们联系。
• 关于时事通讯，您可以在客户账户面板中撤销同意，选择不再接收。如果您未能找到，也可以通过时事通讯中的链接取消订阅。如果您在不想收到时事通讯的情况下继续收到信息，请联系我们。

为保护您的隐私并维护安全，我们可能会在授予您访问信息的权限之前采取措施验证您的身份。根据您所在的地理位置，如果您对我们的答复不满意，可以向相关国家的数据保护机构投诉，例如法国CNIL和瑞士的联邦数据保护与透明度部门。

10.我们如何保护您的数据？

我们的网站采用多种适当的技术安全措施、通信协议和组织方式。身份验证工具经过加密处理，以确保您个人数据的安全。

在个人数据处理的各个阶段，我们均依据法律要求和最新技术，实施程序性、技术性和物理性的保障措施。这些措施旨在防止您提供给我们的个人信息遭到破坏、丢失、篡改，以及未经授权的访问、使用或披露。

我们定期对数据库进行自动备份。

我们提醒您，您需要保密在我们网站注册时设置的密码。该密码将允许您访问网站的特定部分。您个人数据的保护和保密性取决于此。

11.隐私政策的变更

为确保我们的做法符合数据保护的法律要求，或在我们的业务活动发生变化时，本隐私政策可能会在未经事先通知的情况下进行更新。我们将在本隐私政策的顶部标注最后更新日期。

12.联系我们

如果您对本隐私政策有任何疑问或意见，或希望行使与您的个人数据相关的权利，请通过以下方式联系我们：

邮寄地址：

CVL COSMETICS SA

1, Place du Port, Morges 1110, Switzerland

联系表格

Latest update 26.07.2019

Introduction

The organisation responsible for processing your personal data within the framework of this Privacy Policy is CVL COSMETICS SOUTH MIDDLE EUROPE, SL  C/Pomaret, 14 - 08017 BARCELONA - SPAIN     (registration number : B63385553).
This Privacy Policy applies to the personal data we obtain via the different entities within the Valmont Group such as websites, online stores, relay stores, spas and Hotel by Valmont spas. Within the framework of this Privacy Policy, “Valmont Group”, “La Maison Valmont”, “Valmont Cosmetics”, “Storie Veneziane”, Magazine Valmont”, “we”, “us” and “our” are references to the organisation responsible for processing your personal data which is, generally, the organisation that obtains your personal data.
This Privacy Policy describes the types of personal data that we obtain, how we may use this personal data, the people with whom we may share said data and how you can exercise your rights in terms of how we process this information. The Privacy Policy also describes the measures we take to protect the personal data we obtain, and how you can contact us regarding our practices for processing personal data.
Please read the following carefully to understand our practices regarding your personal data, how we process the data and how we use cookies on our websites. If you have any questions, please feel free to contact us. You will find the information about how to contact us below, in the “Contact” chapter.

Valmont Group websites

• La Maison Valmont:   www.lamaisonvalmont.com
• Valmont Foundation:   www.fondationvalmont.com
• Magazine Valmont:   blog.valmontcosmetics.com

About us

Based in Switzerland with an international scope, the Valmont Group specialises in making and distributing high-end cosmetics and beauty products and is also active in the promotion of Art and Beauty. 
We believe the security and privacy of your personal data is extremely important. We process your personal data in compliance with the current data protection laws in your country, in particular in terms of legality, loyalty & transparency, purpose limitation, data minimisation, exactness, storage duration, integrity and privacy, in compliance with the Swiss Federal Law governing data protection (LPD) and the EU 2016/679 General Data Protection Regulation (GDPR).

What type of personal data do we process?

We process personal data that you provide when you register/create a customer account on our websites, when ordering and purchasing, when using the contact form or other forms on our websites, when you visit one of our relay stores or spas, or even when you register for our Newsletter:

• First name and surname 
• Email address
• Date of birth
• Gender
• Telephone number
• Postal address
• Your purchase history
• Credit card payment information when purchasing something on our website
• Your PayPal account email address if you used this service when purchasing something from our website
• When required by law, a tax ID/document number, in compliance with legal requirements for invoicing within the European Union

We also collect information about your visits to our websites, traffic data, location, web logs and other communication data as well as the resources to which you have access.

How do we use your personal data?

We can use the personal data we collect to:

• Optimise certain functionalities or displays on our websites;
• Improve your browsing experience on our digital resources;
• Enable the sale of products available from our store;
• Communicate with you and manage our relationship with you;
• Conducting audience analysis or statistics;
• Send you the Valmont Group Newsletter if you want to receive it;
• Verify your identity and protect you against fraud and other illegal activities, non-authorised transactions, complaints and other liabilities and also manage the risk of data exposure;
• Maintain and improve the quality and safety of our products and services;
• Comply with our legal and regulatory obligations;
• Offer you the information and products that suit you best and which may interest you. This, only if you have already consented to receive such information from us.

Please note that in the case of a problem with an order or interaction on our websites, we can use your personal data to contact you through one of our subsidiaries which will be most capable of responding to your request. 
The processing of your personal information by the Valmont Group, as described above, is generally carried out according to one of the following legal grounds:

• Your consent;
• A contractual relationship that we would have with you;
• Our legitimate commercial interests; or
• In compliance with our legal obligations.

Is your data shared with third parties?

We will neither sell nor disclose your personal data except in the cases described here or at the time of their collection.

• We can share this personal data within the Valmont Group for the reasons described in the present Privacy Policy;
• We may disclose personal information pertaining to you
• if we are bound or authorised by current law or a legal procedure (by order of the court or by subpoena),
• to the legal authorities or other representatives of the authorities in compliance with a legitimate legal request,
• as part of an investigation in the case of suspicion of fraud or illegal activity, or
• in any other case, with your authorisation.

Where is your data stored? Is it transferred?

Your personal data is stored in databases linked to our websites, hosted by our service provider, on servers. These servers are secure and operated under the privacy guidelines of our service providers. 
The Valmont Group operates as a global business. Within this context, we can transfer your personal data overseas, including countries that do not provide a level of protection equivalent to your country of residence. Prior to these transfers, we implement the appropriate measures to protect your personal data. We can also transfer personal data with your explicit authorisation and in certain cases when the applicable law authorises it.

Who has access to your personal data? 

• The Valmont Group staff authorised to process the orders made on our websites, members of the technical teams who carry out maintenance and ensure the correct function of our websites, customer management staff who process contact requests sent via our contact forms.
• The staff in our relay stores and our spas and Hotels by Valmont spas, to help provide the best possible service.
• Any service providers who may work on our websites or a Valmont Group application.

We make sure that our staff and our service providers act in compliance with the law applicable to personal data protection and pay particular attention to the privacy and security of this data.
Any people and employees who may have access to your personal data have signed a confidentiality agreement.

How long do you keep the data?

As far as it is authorised by current laws, we keep the personal data we have about you as long as necessary

• for the reasons for which said data was obtained, in compliance with the provisions in this Privacy Policy, or
• if we have other legal grounds, mentioned in this Privacy Policy, to retain said data beyond the period necessary to achieve the initial objective for obtaining the personal data.

At any time, you can exercise your right to delete your personal data. See the sections below entitled “Your rights” and “Contact”.

What rights do you have?

As far as it is authorised by current law in your country, you can

• access, modify, update and correct personal data pertaining to you through the Dashboard in your Customer Account or by contacting us using the contact information below.
• ask us to delete or restrict your personal data via our online contact form or via the contact information below; or
• exercise your right to data portability by the same means. When authorised by law, you can at any time withdraw the consent you previously gave us for processing your personal data for legitimate reasons regarding your particular situation and we will apply your preferences whenever possible. To exercise your rights, contact us at the address that can be found in the last section of this document.
• For the newsletter, you can chose to unsubscribe by withdrawing your consent in your customer account Dashboard. If you do not have one, a link to unsubscribe can be found in the Newsletter. If you still continue to receive the Newsletter, please contact us directly.

To protect your privacy and keep the data secure, we may verify your identity before providing access to the information. Depending on your location, you can lodge a complaint with the relevant national authority for data protection (for example the CNIL in France and the Federal Data Protection and Information Commissioner in Switzerland) if you are not satisfied with our response.

How do we protect your data?

Our websites use different technical security measures and appropriate organisational and communication protocols. The authentication tools are encrypted to guarantee the security of your personal data. 
We have implemented procedural, technical and physical guarantees in compliance with legal requirements and within the current technological context at every stage of personal data processing. These measures are designed to guarantee protection against destruction, loss, modification, use or illicit disclosure of the personal information you provide us, and against unauthorised access to said information.
We regularly and automatically back up our databases. 
We draw your attention to the necessity of the secrecy of the password you set when registering on one of our websites, which provides access to certain parts of the site. The protection and privacy of your personal data depend on this.

Cookies

Cookies are small text files saved to your computer. They help us provide you the best possible browsing experience and enable us to understand how you use our website. As an example, cookies are used to remember you after authentication, to save your browsing preferences or the content of your electronic cart/basket. Some cookies have already been installed. You can delete and block cookies, but some parts of our website will not function without them. By using our website, you accept our use of cookies.
On our websites, we mainly use cookies to make your browsing a more pleasant experience, for some essential functions for online stores (individual and secure basket and user experience) and to recognise you when you next login.
We can also use cookies to establish anonymous statistics about visits to our websites. Our websites are connected to the Google Analytics solution, a service provided by Google Inc and subject to Google’s Privacy Policy. The data is rendered anonymous before being transferred to the Google servers to establish visitor and visit statistics for the website concerned. If you would like to receive more information about how Google uses data, you can visit the page: www.google.fr/analytics/terms/gb.html.
Most browsers accept cookies by default. You can change these settings if you like using the guides you see will find below, depending on the browser you use. However, some functionalities of our website may no longer be available if you deactivate cookies.

• Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
• Safari: https://support.apple.com/en-gb/HT201265
• Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Opera: https://blogs.opera.com/news/2015/08/how-to-manage-cookies-in-opera/

For more information about cookies:
http://www.cnil.fr/vos-droits/vos-traces/les-cookies/  
http://www.aboutcookies.org/

Changes to our Privacy Policy

This Privacy Policy can be updated with no prior notification to adapt our practices to legal requirements for data protection or in the case of changes to our commercial activity. The date of the latest update is indicated at the top of this Privacy Policy.

Contact

If you have any questions or any comments about this Privacy Policy, or if you would like to exercise your rights regarding your personal data, please contact us here:
Postal address:

CVL COSMETICS SOUTH MIDDLE EUROPE, SL 

C/Pomaret, 14

08017 BARCELONA

SPAIN

Our email address for Data Protection:
privacy@evalmont.com 
However, please remember that you can change, correct or delete your personal data from the Dashboard in your customer account at any time, if you have one.