Misool (‘’Misool’’, ‘’our’’, ‘’we’’ and ‘’us’’) and our partners respect your privacy.

We kindly ask you to carefully read this privacy policy to understand how your personal data is collected, processed, and stored when you use this website Misool, accessible via the URL www.misool.fr.

All personal data collected on this website is processed under the responsibility of the company Misool, SASU with a share capital of €1000, registered with the Trade and Companies Register of Rueil-Malmaison under number 909636284 and having its registered office in Rueil-Malmaison, France.

Within the meaning of the regulations applicable to personal data, Misool is therefore the data controller.

This privacy policy describes:

1. How Misool uses your personal data

2. How Misool shares your personal data

3. How Misool protects your personal data

4. Where Misool hosts and transfers your personal data

5. How you can exercise your rights regarding your personal data

6. Updates to the privacy policy

7. How to contact us

__________

I. How Misool uses your personal data

Misool may use your personal data for the following purposes:

(1) Creating your customer account on this website

(2) Managing orders of products and/or services

(3) Publishing and managing reviews left on products and/or services ordered on this website

(4) Sending you our newsletter following your subscription to the newsletter

(5) Responding to your contact request made via our website

Most of the processing listed above is necessary for the performance of the contract with Misool when you use our website to order products and/or services available for sale on the site.

The processing of your personal data to send you our newsletter is however based solely on your consent to receive our newsletter, which you can withdraw at any time. If you do not consent to receiving the newsletter, please note that this will not prevent you from creating your customer account and placing orders on our website.

II. How Misool shares your personal data

Within Misool, and with regard to each processing purpose, your personal data is collected, processed, and stored by authorized Misool personnel, only within the scope of their respective responsibilities, notably by the customer service, marketing department, and IT department.

We do not share personal data with other companies, organizations, or individuals unless one of the following circumstances applies:

(1) Sharing with prior consent: after obtaining your consent, Misool will share the information you have authorized with the specific third parties or categories of third parties indicated at the time of collecting your consent.

(2) Sharing with our service providers: Misool may also disclose your information to companies that provide services for us or on our behalf. These service providers include companies offering IT services such as our hosting provider or our email sending provider, product delivery services, or marketing activities on our behalf. These service providers may use your information only to provide services on behalf of Misool.

(3) In compliance with a legal obligation, sharing in accordance with laws and regulations: Misool may share your information as stipulated by laws and regulations, to resolve legal disputes, or as required by judicial or administrative authorities under the law.

Misool will ensure the legality of any personal data sharing through data processing clauses with the companies with whom your personal data is shared, requiring them to comply with this privacy policy and to take appropriate security and confidentiality measures when processing personal data.

III. How Misool protects your personal data

Misool places great importance on the security of your personal data and has adopted common industry practices to protect your personal data and prevent unauthorized access, disclosure, use, modification, damage, or loss of this information.

We have also taken appropriate precautions to ensure that our hosting provider preserves the security and confidentiality of the data and notably prevents it from being distorted, damaged, or disclosed to unauthorized persons.

Misool also adopts the following organizational measures:

(1) We adopt reasonable and feasible measures to ensure that the personal data collected is minimal and relevant according to what is necessary, considering the purposes for which it is processed.

(2) We retain your personal data only for the duration strictly necessary for the purpose of the processing, unless retention of your data is required or permitted by law. For example, we keep data related to the execution of your orders for the duration required by law for accounting record retention, i.e., up to 10 years from the relevant fiscal year.

(3) We deploy access control mechanisms to ensure that only authorized personnel can access your personal data.

In the event of a personal data breach, Misool will comply with the legal and regulatory requirements applicable to notifying personal data breaches to the competent supervisory authorities and/or the data subjects concerned.

IV. Where Misool hosts and transfers your personal data

Your personal data will be hosted within the hosting infrastructures of our hosting provider, IONOS, located in France.

When such transfers occur, we ensure that these personal data transfers are governed in accordance with applicable regulations to ensure an adequate level of data protection, either by a European Commission adequacy decision or through legal instruments such as data transfer agreements incorporating the European Commission’s Standard Contractual Clauses.

For any requests regarding recipients and transfers of data we make outside the European Union, please contact us at the addresses indicated in the "How to contact us" section below.

V. How you can manage your rights regarding your personal data

You have the right to access, rectify, erase, restrict, and object to the processing of your personal data, as well as the right to set directives regarding the fate of your data after your death and the right to data portability.

You can contact us at any time at the addresses indicated in the "How to contact us" section below to exercise your rights regarding personal data under the conditions set by applicable regulations. You must specify which right you wish to exercise and provide all necessary details so that we can respond to your request.

These rights are exercised under the conditions set by applicable regulations.

-       The right of access means that you can ask us at any time to inform you whether we process personal data concerning you and, if so, to inform you of the personal data concerned as well as the characteristics of the processing carried out.

-       The right of rectification means that you can ask us to rectify your personal data when it is inaccurate. You can also request that your personal data, if incomplete, be completed as far as relevant to the purpose of the processing concerned.

-       The right to erasure means that you can request the deletion of your personal data especially when:

(i) Their retention is no longer necessary for the purposes for which they were collected;

(ii) Your personal data is processed based on your consent, you wish to withdraw this consent, and there is no other legal basis justifying the processing;

(iii) You have objected to the processing of your personal data and consequently wish them to be erased;

(iv) Your personal data has been subject to unlawful processing;

(v) Your personal data must be erased to comply with a legal obligation provided either by European Union law or French law.

-       The right to restriction means that you can ask us to restrict the processing of your personal data:

(i) When you contest the accuracy of your personal data for a period allowing us to verify their accuracy;

(ii) When, following processing established as non-compliant, you prefer restriction of processing to complete erasure of your personal data;

(iii) When we no longer need your personal data for processing purposes but you still need them for the establishment, exercise, or defense of legal claims;

(iv) When you have objected to the processing of your personal data and you request restriction of processing during the period allowing us to verify whether the legitimate ground you invoke justifies the processing.

Restriction of processing means that the processing of your personal data will then be limited to storage only. We will no longer perform any other operation on the personal data concerned.

-       The right to object means that you can object to the processing of your personal data when this processing is based on Misool’s legitimate interest. The right to object is exercised subject to justifying a legitimate reason related to your particular situation. We will then cease the processing concerned unless there are legitimate and compelling grounds for the processing which override your interests, rights, and freedoms in accordance with applicable regulations.

-       The right to set directives regarding the fate of your data after your death allows you to make known your instructions concerning the retention, deletion, and communication of your personal data after your death.

-       The right to data portability means that you can ask us, under the conditions set by applicable regulations, to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to you or request that we transmit it directly to a third party of your choice when legally and technically possible.

When we process your personal data based on your consent, you also have the right to withdraw your consent at any time by contacting the addresses indicated in the "How to contact us" section or by clicking the unsubscribe link present in each of our communications.

However, withdrawing your consent does not affect the lawfulness of processing carried out before this withdrawal.

VI. Updates to this privacy policy

Misool reserves the right at any time to modify or update, in whole or in part, this privacy policy due to changes in applicable personal data protection regulations or data processing activities carried out.

Any substantial change to the privacy policy will be notified to you by email if you have provided us with a valid email address and will be published on the website. We recommend that you regularly review this privacy policy to have a full understanding of our commitments regarding the security and protection of your personal data.

VII. How to contact us

If you have any questions, comments, or suggestions, please contact us by visiting the contact page.

If you are not satisfied with the response provided by Misool to a request to exercise rights under section V above or if you wish to report a violation of applicable data protection regulations, you have the right to file a complaint with the CNIL by mail (CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or with the data protection authority of the country in which you reside or usually work.