Privacy Policy

The purpose of this Privacy Policy is to inform you about how your personal data is processed on the website https://shop.42alumni.org. You will also find information at the end of the document to enable you to exercise your rights over your personal data.

In order to have a clear vision of all the processing of your personal data, we invite you to take a few minutes to read this entire document.

If you simply wish to access the essential points of this Privacy Policy, we have provided you with a summary which you will find below.

For any questions or comments relating to our Privacy Policy, you can send an email to the following address: dpo@42.fr

AT A GLANCE

When you visit our website https://shop.42alumni.org, we may collect and process a certain amount of personal data about you. These data are determined based on the purpose of the processing.

In these cases, the person responsible for processing your personal data is the company 42 WORLD: it determines how and for what reasons your data is processed.

Your personal data is processed for strictly limited purposes, namely:

Respond to a contact request made via our contact form, sending an email or by telephone;
Administer the creation and management of your personal account;
Process and monitor the progress of an order that you have placed (this purpose including in particular the validation of your order, the management of your payment and the delivery of your order);
Contact you regarding an order you have placed;
Manage complaints as part of our after-sales service;
Manage our accounting;
Manage customer reviews of our products;
Evaluate potential fraud or risks, improve and optimize the site.

The processing of your personal data systematically falls within a legal framework which varies depending on the type of processing. In the majority of cases, the processing of your personal data is based on its necessary nature with regard to the execution of our contractual obligations towards you.

When information is essential, we generally identify it with a red box if the field is not completed.

We use cookies on our website. For more information on this subject, we invite you to consult our Cookies Policy.

We keep your personal data only for the period necessary to fulfill the purpose for which it was collected, after which we will delete your data. These durations therefore vary depending on the purpose pursued.

In order to guarantee you a tailor-made service, we use various trusted service providers who need access to some of your personal data. We only choose service providers with a personal data protection policy that complies with legal requirements with whom we strictly regulate the use of the data processed by means of appropriate contractual documents.

In particular, we use the service provider Shopify to host our online store – to find out more about Shopify's use of your Personal Information, please visit the following page: https://www.shopify.com/uk/legal/privacy.

You have different rights over your personal data (right of access, right of rectification, right of opposition, right to erasure, right to portability, right to withdraw your consent). To exercise them, simply send your request to the following address: dpo@42.fr or by post to:

Data Protection Officer
42 WORLD
89 boulevard Bessières
CS 99510 75819
Paris CEDEX 17

Definitions

Personal data: any data allowing a natural person to be directly or indirectly identified (surname, first name, telephone number, IP address, etc.), in this document sometimes simply called “Data”;

Processing of personal data: operation(s) relating to personal data (collection, storage, extraction, etc.);

Data controller: the entity which determines the purposes and means (why and how) of the processing of your personal data;

Recipients: the entities and people with whom the data may be shared by the data controller;

Purposes: the objectives of processing personal data (the why of the processing);

Legal basis: the reason or context which authorizes us to process your personal data.

Summary

Controller of the processing of your personal data
Personal data processed by the company 42 WORLD
Why your personal data is processed
Legal basis of personal data processing
Obligation to provide us with personal data
Conservation of your personal data
Storage and recipients of your personal data
Your rights
About cookies
Evolution of this policy

Controller of the processing of your personal data

The company 42 WORLD is the controller of the processing of your personal data from the moment it determines the reasons for which they are processed (the “purposes”) and the way in which they are processed (the “means”).

You can contact our teams:

By email to: dpo@42.fr
By mail to the address:

Data Protection Officer
42 WORLD
89 boulevard Bessières
CS 99510 75819
Paris CEDEX 17

Personal data processed by 42 WORLD

We only collect and process data that is adequate, relevant and limited to what is necessary to achieve our purposes. The nature of the personal data processed varies depending on the context which justifies its collection.

We endeavor to inform you as precisely as possible each time we use personal data, in particular by indicating to you the purposes for which we process this personal data.

Why your personal data is processed

Generally speaking, we collect data about you for the following purposes:

Respond to a contact request made via our contact form, sending an email or by telephone;
Administer the creation and management of your personal account;
Process and monitor the progress of an order that you have placed (this purpose including in particular the validation of your order, the management of your payment and the delivery of your order);
Contact you regarding an order you have placed;
Manage complaints as part of our after-sales service;
Manage our accounting;
Manage customer reviews of our products;
Evaluate potential fraud or risks, improve and optimize the site.

We do not process your data for purposes other than those initially pursued. If we were to use your data for other reasons incompatible with the initial collection, we will seek your consent for this new use.

Legal basis of personal data processing

We carry out our processing of personal data based on one of the legal bases available under the regulations. More specifically, the processing we implement is based on the following legal bases:

Purpose	Legal basis
Respond to a contact request made via our contact form, sending an email or by telephone	Legitimate interest of our company in responding to customer requests
Administer the creation and management of your personal account	Execution of the contract
Process and monitor the progress of an order that you have placed (this purpose including in particular the validation of your order, the management of your payment and the delivery of your order)	Execution of the contract
Contact you regarding an order you have placed	Execution of the contract
Manage complaints as part of our after-sales service	Legitimate interest of our company in managing customer complaints Execution of the contract
Manage our accounting	Legal obligation
Manage customer reviews of our products	Legitimate interest of our company in managing customer reviews on its products
Evaluate potential fraud or risks	Legitimate interest of our company in protecting its site and customers against fraud and potential risks
Analyze the traffic and audience of our site	Consent

Obligation to provide us with personal data

Some of the processing we carry out requires you to provide us with certain information, which sometimes corresponds to personal data.

When information is essential, we generally identify it with a red box if the field is not completed.

If you refuse to provide it to us and since this information is generally obligatory from an operational, contractual or legal point of view, we may not be able to provide you with the associated products or services.

Conservation of your personal data

We only keep your personal data for specific and proportionate periods of time. At the end of this retention period, we delete them.

More specifically, the retention periods applied to your data are as follows:

Purpose	Retention period
Respond to a contact request made via our contact form, sending an email or by telephone	Retention of data while the request is processed
Administer the creation and management of your personal account	Data retention until account deletion request on https://shop.42alumni.org
Process and monitor the progress of an order that you have placed (this purpose including in particular the validation of your order, the management of your payment and the delivery of your order)	Data retention until account deletion request on https://shop.42alumni.org
Contact you regarding an order you have placed	Data retention until account deletion request on https://shop.42alumni.org
Manage complaints as part of our after-sales service	Data retention until account deletion request on https://shop.42alumni.org
Manage our accounting	10 years from order
Manage customer reviews of our products	Until deletion request
Evaluate potential fraud or risks	13 months
Analyze the traffic and audience of our site	13 months

You can also have your data deleted more quickly as part of the exercise of your rights (presented below).

Concerning the data processed in the context of the use of cookies, the latter are subject to more specific retention periods referenced in our Cookies Policy.

Storage and recipients of your personal data

Personal data collected on our website may be shared with third party companies in the following cases:

When we use the services of a service provider or partner to achieve the purposes of processing;
When we use the services of service providers to host our databases;
If required by law, we may transmit data to respond to claims made against us and to comply with obligations arising from administrative and legal proceedings.

In particular, we use the service provider Shopify to host our online store – to find out more about Shopify's use of your personal information, please visit the following page: https://www.shopify.fr/legal/confidentialite .

In any event, we undertake to:

Transmit your personal data only when necessary to achieve the purpose of the processing;
Transmit your personal data only to service providers offering sufficient guarantees in terms of personal data protection;
Strictly regulate the processing of personal data carried out on our behalf by our subcontractors.

In order to protect your personal data, we have also adopted physical and logical security measures to guarantee as much as possible the integrity and confidentiality of your data.

Your rights

You have the right to access, rectify and delete your data.

You also have the right to limit and object to the processing carried out. You also have the right to portability of your personal data. In addition, you have the right to define general or specific guidelines regarding the use that is made of your data after your death.

You also systematically have the right to withdraw your consent when you have previously given it to us.

You can exercise all of these rights, within the legally provided limits, by proving your identity by any means and using the following addresses:

By email: dpo@42.fr
By post:

Data Protection Officer
42 WORLD
89 boulevard Bessières
CS 99510 75819
Paris CEDEX 17

You also have the right to file a complaint directly with the CNIL (French National Data Protection Commission).

About cookies

We provide you with specific information regarding cookies on the Cookies Policy page of our website.

Evolution of this policy

We may modify this Privacy Policy, depending on the evolution of our activity but also depending on the legal requirements imposed on us.

We will try as far as possible to inform you if there are any changes to this document.

Do not hesitate to consult it regularly, we systematically indicate the date of the last update.

LAST UPDATED ON: 04/01/2024