This Privacy Policy describes how personal data is collected, used and, where applicable, disclosed to third parties by YOYAKU SARL, a company incorporated under French law with its registered office at 14 Boulevard de la Chapelle, 75018 Paris (trading as “Kurtezy”, hereinafter “Kurtezy”, “we” or “us”). By using kurtezy.com (the “Site”) or placing a purchase order for any product listed on the Site (each a “Product”), you accept and consent to the practices set out in this Privacy Policy.
We are aware that the security of your private information is an important concern. The protection of your personal data (the “Data”) is a priority for our business. This Privacy Policy should be read together with the Terms & Conditions and the Cookie Policy.
You can browse the Site without disclosing personal data. However, to set up an Account, place an Order, receive our newsletter, or contact us, you will be required to provide personal data during registration, such as full name, phone number, email, shipping address and billing address (if different), to the extent such Data is necessary for the following processing purposes:
Any personal Data communicated during the registration process is processed by YOYAKU SARL, as data controller within the meaning of the General Data Protection Regulation (GDPR), French data protection laws and any applicable regulations.
Your Data shall be used only for the purposes for which it was originally collected. Data may be processed for a purpose different from the original one only if that legitimate purpose is closely related to the original processing purposes. In case of any intention to further process the Data for another purpose, we will provide you with relevant and detailed information on the envisaged processing prior to that further processing.
You are required to provide accurate and complete Data. Failure to do so constitutes a breach of the Terms & Conditions and of this Privacy Policy, which may result in immediate termination of your Account, of your purchase Order (and subsequently of the shipping of any Products ordered) or of the supply of any services. You agree to keep your registration information up to date.
It is our policy that Data will not be disclosed, shared with, sold or rented to third parties other than as expressly provided under this Privacy Policy.
By registering an account, you can save Products on a waitlist (for out of stock Products), view your activity history and Orders placed through the Site, manage your shipping and billing address (used on the checkout page by default) and edit your password and Account details.
You can open an account on our Site by submitting your first name, last name, a valid email address, a billing address and a shipping address (if different from the billing address), and a password. While we do our best to protect your personal information, we cannot guarantee the security of information you disclose, and you are solely responsible for maintaining the secrecy of your password and other account credentials. Your Data is used exclusively for the purpose of registering and operating your Account.
Refusal to complete the registration process by failing to provide the required, correct and complete Data will prevent your Account registration from being completed and prevent access to your activity history on the Site.
Placing an Order is not conditional upon registering an Account on our Site.
When placing an Order through the Site, you will be required to provide your full name, email address, phone number, billing address, and shipping address. If you already have an Account, your Customer information (including registered addresses) will be used on the checkout page by default. If you choose to pay online for the Products by credit or debit card, you will be directed automatically to the site of an external payment processor partner. This partner may require you to provide debit or credit card information solely for the purpose of processing your payment to YOYAKU SARL in connection with the purchase of the Product(s) you ordered. We recommend consulting the partner’s privacy policy.
Refusal to complete the registration process by failing to provide the required, correct and complete Data will prevent completion of your purchase Order or, as the case may be, the processing of your payment, and will result in immediate termination by Kurtezy of your purchase Order or of the supply of any Products ordered.
You can ask for assistance or address any questions, comments, suggestions or concerns regarding the Site, the Products, the contract or the processing of your personal data by contacting us at the details listed in the “Contact information” section below. Please provide all reasonable details so we can answer your request (such as full name, phone number and email). Your Data will be used exclusively to analyze your request and, if accepted, take all necessary steps to answer it.
You can subscribe to our email newsletter service by providing a valid email address in the “Newsletter” section on our Site or by providing consent during account setup. For the newsletter dispatch, we use the double opt-in process, meaning that we will only send you the newsletter if you have confirmed your registration by clicking the dedicated link in the confirmation email sent after subscription.
You can unsubscribe from our newsletter at any time, either by sending an email to [email protected] with a cancellation request, or by clicking the unsubscribe link at the end of each newsletter. Withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal.
We use cookies on our Site to facilitate your browsing experience, for statistical purposes and for improving our Site. Usage of a cookie is in no way linked to any personally identifiable information while you are on our Site. We also use analytics services to better understand the users of the Site and how they use it. No personally identifying information is included in this type of reporting. We do not use cookies to collect personal Data and do not use technology that connects information collected by cookies to the personal Data of our users. For detailed information on cookies and how you can opt out of certain types of processing, please refer to our Cookie Policy.
The Site or our newsletters may contain links to other websites or resources on the Internet. These other websites or resources are not under our control and we are not responsible or liable, directly or indirectly, for the privacy practices or actions of such other sites or their operators. The inclusion of any such link does not imply endorsement by us. We encourage you to read the privacy statement of every website you visit.
We may transfer your Data, by disclosure or by providing remote access (only through secured applications), to third parties such as our commercial partners acting as data processors for and on behalf of YOYAKU SARL (for example hosting providers, legal and financial advisors, payment processors, technical service providers, or providers of dispatch support), with whom we have made the contractual arrangements required by EU and national regulations.
Data is transferred to third parties only to the extent necessary to serve the applicable processing purposes for which it is collected and processed. You expressly agree to the disclosure of your personal data to these data processors.
We may disclose Data to comply with the law or in response to a request from a court or other legal authority (such as a warrant or a subpoena). We may also share information if we believe, in good faith, that it is necessary to prevent or address fraud, protect Kurtezy, or enforce the Terms & Conditions.
Personal data collected and used for the supply of Products will be stored for a period of 3 years after the end of the contractual relationship or any longer period imposed by law or by an applicable records retention regulation.
Promptly after the applicable storage period has ended, the Data will be either securely deleted or destroyed, or transferred to an archive (unless prohibited by law or an applicable records retention regulation).
Personal data collected and used for creating your Account or subscription to our newsletter will be immediately deleted if you terminate your Account or unsubscribe from our newsletter.
We have implemented technical and organizational measures to ensure a level of security appropriate to the risks presented by processing, in particular protection against misuse or accidental, unlawful or unauthorized destruction, loss, alteration, disclosure, acquisition or access, willful or accidental manipulation, access by third parties, deletion and modification.
In the event of a data security breach, you will be notified within a reasonable period of time following discovery of the breach, unless a law enforcement official determines that notification would impede a criminal investigation or cause damage to national security. We will promptly respond to your inquiries relating to such a data security breach.
Under applicable data protection regulations, you have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to the Data and the following information: the processing purposes, the Data concerned, the recipients of the Data, the storage period, your rights under data protection regulations, and the source of the Data.
You also have the right to obtain, without undue delay, rectification of inaccurate Data. You have the right to request the erasure of the Data or restriction of the processing, provided the conditions for such operation are met under applicable law. In such a case, personal data collected and used for creating your Account will be deleted within a 30-day period, and your Account will no longer be valid.
You have the right to data portability (receiving your personal data in a structured, commonly used and machine-readable format and transmitting it to another controller), and the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, including profiling, where the processing is based on a legitimate interest.
You can object to the processing of your Data for direct marketing purposes by sending an email to [email protected] with your cancellation request, or by clicking the unsubscribe link at the end of each newsletter.
Except where the processing of your personal data is necessary for entering into or performing a contract, you have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you.
You may exercise your rights freely at any time, by sending a written and dated request accompanied by proof of your identity, using the contact details below.
Under Article 77 GDPR, you also have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR — in France, the CNIL (3 Place de Fontenoy, 75334 Paris Cedex 07, cnil.fr); in Germany, the competent state data-protection authority or the BfDI (bfdi.bund.de).
From time to time, we may update this Privacy Policy. When we do, we will post those changes on our Site so you always have access to details of the information we collect, how we use it, and under what circumstances we disclose it. Any such change shall enter into force with immediate effect at the publishing date on our Site.
If at any point we decide to use personal data in a manner materially different from what was stated at the time of collection, we will notify you by email and you will have a choice as to whether or not we may use your Data in that different manner.
If you have any questions about how we process your personal information, or if you would like to exercise any of your rights under this policy, please send a written and dated request accompanied by proof of your identity, to: [email protected].
Requests for access, correction, restriction of processing or erasure must be in writing and are subject to applicable legal restrictions. We will take appropriate steps to address your request without undue delay and, in any event, within 30 days of receipt of the request. The information will be provided by electronic means where possible, unless you expressly request otherwise in writing.