Hello!

PRiVacY POlicY

PREAMBLE

1. DATA COLLECTION

2. NATURE OF DATA AND PURPOSES OF DATA PROCESSING

3. TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES

3.1 COMPANIES OF THE GALERIES LAFAYETTE GROUP

3.2 BUSINESS PARTNERS

3.3 SUB-CONTRACTORS

3.4 STATE AUTHORITIES

3.5 ANONYMISED DATA

4. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION

5. DATA RETENTION PERIOD

6. RIGHTS OF DATA SUBJECTS

7. IT SECURITY

8. MODIFICATION OF THE PRIVACY POLICY

9. CONTACT

10. MANAGEMENT OF COOKIES

 

Galeries Lafayette attaches great importance to protecting your personal data and respecting your privacy.

This policy is intended to inform you of our practices regarding the collection, processing and sharing of data that you provide to us in-store and/or via our e-commerce sites.

Galeries Lafayette means 44 Galeries Lafayette – 44 GL, whose registered office is located at 44-48 rue de Châteaudun – 75009 Paris, as well as all the companies operating the e-commerce stores and sites under the Galeries Lafayette brand, subsidiaries or affiliates of 44 Galeries Lafayette – 44 GL (hereinafter “Galeries Lafayette”).

PREAMBLE

We consider your personal data to be confidential data regarding which we are particularly vigilant.

Personal data means any data enabling you to be identified directly or indirectly, in particular your name, your sex, your age, your postal address, your telephone number, your email address, your IP address, as well as any other data communicated directly by you, particularly on our website or generated by your browsing or the contacts we may have with you either in-store or via our customer services.

In accordance with legal and regulatory obligations, we collect, use, share and keep this information under enhanced security and for limited periods of time, in proportion to the purposes for which you provided it to us.

 

1. DATA COLLECTION

You trust us to process your data and we want to be transparent about how we collect it.

We collect the data you provide when you use our in-store and/or online services in particular, when you:

– Browse and visit our sites;

– Create a customer account;

– Join our loyalty programme;

– Present your loyalty card;

– Request a Cofinoga credit card;

– Add products to your shopping cart;

– Make an order or a return request on our sites;

– You sign up to newsletters or alerts from Galeries Lafayette/BHV;

– Contact our customer service department;

– Use Wi-Fi in our stores;

– Ask a question or answer a question on community chat;

– Take part in a game or competition;

– Complete an information entry form, such as a questionnaire or survey. 

Under no circumstances do we automatically collect the email address of visitors without their deliberate communication. In the event that certain sections are aimed more specifically at children under the age of 15 and offer them the possibility of sending us personal data (e.g. registration for a game or competition), we ask them to obtain prior authorisation from their parents.

In addition, certain information requested in purchase orders and forms is mandatory and indicated by an asterisk. Its collection is essential for processing your request. Therefore, if we do not have a reply, we will not be able to respond to your request.

 

2. NATURE OF DATA AND PURPOSES OF DATA PROCESSING 

The data controller is 44 Galeries Lafayette – 44 GL, the parent company of the department stores branch, which acts both on its own behalf and on behalf of its sales subsidiaries operating the Galeries Lafayette brands (Galeries Lafayette, Galeries Lafayette Haussmann, Galeries Lafayette Voyage, Galeries Lafayette Catering, Galeries Lafayette Outlet) as well as for affiliated companies operating the Galeries Lafayette stores and accepting the Galeries Lafayette loyalty programme.

The information collected about you allows us to manage, facilitate your purchases, get to know you better in order to send you offers and thus improve and personalise our services.

We use your personal data according to the purposes for which you provided it to us, which are based on one or more of the following legal grounds:

– Performance of the services we offer you;

– Your consent;

– Our legitimate interests;

– A legal, regulatory, judicial or administrative obligation.

The table below shows the data we may collect, how we use it, and the expected purpose and legitimate interests.

 

Personal data

Purposes

Legitimate objectives/interests

Surname/first name

– To identify yourself

– Provide the product or service to the individual eligible person (loyalty, personalised sales advisor, order).

– Improve our services and your customer experience

– Personalise our communications

Postal address

– Shipping and delivering your orders

– Contact you

– Execute a contract

– Communicate with you

Email address

– To identify yourself

– Contact you

– Send you commercial offers

– To identify yourself

– Inform you

– Send you commercial solicitations if you have consented for us to do so

– Execute a contract

Telephone No.

– Contact you

– Execute a contract

– Improve your customer experience

Date of birth/Age

– Determine whether you are a child/adult.

– Get to know you

– Improve your customer experience

– Execute a legal obligation (minors)

Gender

– To identify yourself

– Get to know you

– Improve your customer experience

Preferences communicated to the Field Sales Consultant

– Get to know you better

– Offer you personalised commercial offers and benefits

– Execute a contract

– Improve our services and your customer experience

Payment Information

– Save your payments securely

– Reimburse you

– Execute a contract

– Prevent and detect fraudulent activities, abuse and security breaches

Purchasing Data

– Make personalised product suggestions to you

– Manage your orders

– Assign you your loyalty points

– Execute a contract

– Improve our services and your customer experience

Contact history

– Monitor the relationship

– Execute a contract

– Improve our services and your customer experience

Connection data

– Monitor the relationship

– Enable the finalisation of an order

– Execute a contract

– Improve our services and your customer experience

Password

– Enable and secure your connection

– Execute a contract

– Prevent abuse and security breaches

 

3. TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES

Your personal data, collected within Galeries Lafayette stores and/or through our e-commerce sites, may be sent to third parties within the limits provided for by the provisions in force and in accordance with this policy.

Any companies other than 44 Galeries Lafayette – 44 GL, which is responsible for the processing of your personal data or any subsidiaries or affiliates operating Galeries Lafayette stores for which it operates (hereinafter the “Third Parties”)

These Third Parties are:

 

3.1 COMPANIES OF THE GALERIES LAFAYETTE GROUP

In order to better understand our customers and to enable you to benefit from appropriate commercial offers, your personal data may be sent to other entities of the Galeries Lafayette Group, and more particularly to the subsidiaries and Companies of the Galeries Lafayette Group which groups together:

– Société Anonyme des Galeries Lafayette [Galeries Lafayette Limited Company] 

– BHV Exploitation [BHV Operations] 

– 1001 Listes 

– Louis Pion Royal Quartz 

– GUERIN Joaillerie [GUERIN Jewellery] 

– Bazar Chic 

– Galeries Lafayette DEUTSCHLAND

– La Redoute

3.2 BUSINESS PARTNERS

Your personal data may be transmitted to our business partners and more particularly to companies operating the brands of products and services offered for sale in Galeries Lafayette stores and websites, only if you consent to it or to carry out identical processing and for the same purposes as you authorised us to do so.

Our business partners are not permitted to use this data for any purpose other than that indicated when collecting it.

3.3. SUBCONTRACTORS

Your personal data may be sent to external service providers who process it on our behalf, according to our instructions, in particular in the context of online payment, the shipping of orders, advertising, the security of computer systems or in the context of statistics and surveys.

The transmission of your data to our subcontractors is supervised in order to guarantee the security of your data.

These include third-party companies providing support services, financial institutions, anti-fraud entities, technological, logistical, transport and delivery service providers, customer services and/or services analysing transactions carried out in Galeries Lafayette stores or on our websites in order to offer users the necessary guarantees for commercial operations.

3.4 STATE AUTHORITIES

In order to comply with legal, regulatory, judicial or administrative obligations or to respond to requests from administrative and judicial authorities, we may disclose your data to these authorities whenever we are legally required to do so.

3.5 ANONYMISED DATA

We may also share anonymised or aggregated data with third parties other than those identified, for statistical purposes, without these third parties being able to identify you in any way.

 

4. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION

Your personal data is processed and hosted on servers located in the European Union; however, it is possible, from time to time, that this data is transferred to a subcontractor whose servers are located in a country outside the European Union.

Where appropriate, we will inform you of this and take all necessary measures to ensure the security of your data and compliance with legal and regulatory obligations. In particular, we will ensure that it is protected in the same way as if it was used within the European Union.

 

5. DATA RETENTION PERIOD

We retain your data for the duration of our business relationship and in any event for the period necessary for the purpose of the processing.

The length of time we need your data for varies depending on the type of personal data you have provided to us and the purpose for which you have provided it to us.

In addition to the retention period, your data will no longer be used to send you commercial solicitations via email and/or sms for more than three years from your last interaction with us, i.e. in particular:

– Your last order on our site or purchase in one of our stores; 

– Your last login to the customer account or loyalty account; 

– Your latest communication with customer service;

 

6. RIGHTS OF DATA SUBJECTS

The use of your data is possible either because of the performance of our contractual relations, or because you have expressly consented to it, to protect and guarantee our legitimate interests or to meet a legal obligation.

However, at any time, you have the right of access, portability, rectification and erasure of your data or to restrict its processing. You may exercise these rights either:

1. directly from your customer space: When you are connected to your customer account on our site, you can always check and update your information by accessing the services on the “MY ACCOUNT” > “MY PERSONAL DATA” > “CHANGE” page. The information saved in your account is stored until it is deleted, unless your data is no longer necessary for the performance of our services. 

2. directly in-store: When you do not have a customer account on our site but are a member of the Mes Galeries loyalty programme, you can request the verification and updating of your information in our electronic file with our in-store staff. 

3. by email or post: You may exercise your right for access, portability, rectification and deletion of your data under the conditions provided for by the legal and regulatory provisions by making a request by post to: LAFAYETTE GALERIES – CNIL correspondent – TSA 23 000 44-48 rue Châteaudun – 75 009 PARIS or by email to: correspondantcnil@galerieslafayette.com. 

You may also object, for legitimate reasons, to your personal data being processed or stored in our files.

In terms of prospecting, you may exercise your right to object to the processing of your data without having to justify a legitimate reason. If you have given us your consent so that we may use your data, for example, to send you newsletters, you may withdraw your consent at any time.

If, for any reason whatsoever, you consider that our response is unsatisfactory, you can file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), which is responsible for ensuring the protection of personal data on French territory.

 

7. IT SECURITY

7.1 GENERAL PRINCIPLE

We take all appropriate technical and organisational measures to ensure the security, integrity and confidentiality of your personal data and to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion or unauthorised access to such data.

7.2 TRANSACTION SECURITY

We pay maximum attention to security issues regarding online or in-store payment. Encryption is an essential means of ensuring a high level of security for transactions on our site. We have adopted SSL encryption to protect all data related to personal information and means of payment.

In all secured areas in which the galerieslafayette.com URL address begins with https:// (where the “s” means secure), the information is encrypted and therefore protected before being transferred via the Internet. Your banking data is encrypted and sent in a completely secure environment to our bank, Crédit Mutuel. It is not retained under any circumstances.

In addition, with the SIPS system of OGONE, a partner of Galeries Lafayette, your bank card number does not pass unencrypted on the Internet, thanks to SSL coding. You can therefore make your purchases in complete safety.

7.3 MANAGEMENT OF SECURITY FLAWS

We have put in place a procedure for the prevention, management, remediation of security breaches and notification of personal data breaches, in accordance with legal and regulatory provisions. This procedure enables us to effectively understand vulnerabilities and potential personal data breaches.

We undertake to notify cases of personal data breaches as soon as possible and, if possible, no later than 72 hours after becoming aware of them, to the competent supervisory authority, i.e. the CNIL, if the breach in question is likely to create a risk to your rights and freedoms.

We also undertake to notify you as soon as possible when this violation is likely to result in a high risk to your rights and freedoms. In addition, we will communicate to you the measures taken to address your data breach, including measures to mitigate its consequences.

 

8. MODIFICATION OF THE PRIVACY POLICY

We may change this policy. If it turns out that these changes could lead to a reduction in your rights, we will inform you directly according to the contact means that you have communicated to us.

 

9. CONTACT

If you have any questions, please contact our customer service department on: relaiscil@galerieslafayette.com

In addition, the Galeries Lafayette Group has appointed a data protection officer. S/he can be contacted at the following address: dataprotectionofficer@galerieslafayette.com and is able to deal with the following subjects:

– lodging a complaint

– question regarding this Privacy & Confidentiality Policy

 

10. MANAGEMENT OF COOKIES

10.1 WHAT IS A “COOKIE”

A cookie is a file deposited on your device (computer, mobile or tablet) when visiting a site or viewing an advertisement. Its purpose is to collect information relating to your navigation and to send you services and offers tailored to your terminal and your areas of interest.

Cookies stored on the website have a maximum lifespan of thirteen months.

When you visit our website for the first time, cookies may be deposited, subject to the choices that you have expressed regarding cookies.

Certain cookies known as “functional cookies” are automatically deposited because they are necessary for the provision of the service. These cookies are not subject to prior consent.

We hereby inform you that these cookies are stored via the informational banner that appears at the first opening of the web page consulted. You are then informed that by continuing to browse, without specific settings, you give your consent to store all cookies.

If you want to configure the storing of cookies, you are invited to click either: 

– on the “find out more” link at the bottom of the cookie information banner.

– on the “cookie management” tab located at the bottom of the “galerieslafayette.com” website.

Your choices are not final and may be changed at any time by adapting your cookie deposit settings.

10.1 WHAT INFORMATION DO COOKIES COLLECT?

Cookies record and/or read files in order to obtain information relating to your interaction with the site, and in particular your navigation and your behaviour: your IP address, the pages visited, the brands that interest you, purchases made, etc.

In this context, subject to your agreement and/or the chosen configuration, Galeries Lafayette collects and processes all or part of the following information:

 

> Functional cookies essential for navigation:

These cookies are files essential to the display and proper functioning of the Site. In particular, they are used to store data relating to customer accounts, to record purchase baskets, and to ensure the security of accounts or baskets.

These cookies are automatically deposited and it is not possible to configure or refuse their deposit because, without them, the site could not be displayed and/or function correctly.

> Advertising Cookies:

We may include applications, including from partner companies, that display targeted advertising, content based on your interests, products you like.

> Performance analytics and personalisation cookies:

We may include applications for analysing, measuring audiences and visits to our websites, compiling statistics and carrying out controls with the aim in particular of optimising our services and/or improving customer knowledge.

We may also store cookies to recommend products or services that you may like.

> Social media cookies:

We may include partner applications that allow you to share content on our site with others or to let others know your consultation or opinion about any content on our Site. This is particularly the case for the “Share” and “Like” buttons from Social Networks such as “Facebook”, “Twitter”, Instagram, etc.

The social network providing such an application button is likely to identify you using this button, even if you did not use this button during your visit to our site. This type of application button can enable the social network concerned to track your browsing on our site, simply because your account on the social network concerned was activated on your terminal (session open) during your browsing on our site.

We have no control over the process these partners use to collect information about your browsing on our site and the personal data they have. We invite you to consult the privacy policies of these social networks in order to become aware of the purposes of use, in particular advertising, of the browsing information that they may collect using these application buttons.

10.3 HOW DO I CONFIGURE COOKIES

You have several options for managing Cookies. Any configuration that you carry out may change your browsing and access conditions for certain services requiring the use of Cookies.

– The choices offered to you by our configuration tool:

On our Site, we offer a configuration tool that allows you to easily activate or deactivate cookies according to their category. By clicking on the activation/deactivation buttons, you can accept or refuse cookies depending on their category.

To access the tool, click on the “Cookie management” tab at the bottom of the galerieslafayette.com website.

Note that your choices will only be taken into account when the selected buttons are enabled/deactivated. If you do not clear your browsing history and your caches at the same time, certain cookies, previously deposited, may remain on your device.

The choices available to you through your browser:

You can also configure your Internet browser. The selected configuration conditions the deposit of all cookies according to your browsing on all sites consulted.

It is described in the help menu of your browser, which will allow you to know how to change your wishes regarding Cookies.

– For Internet Explorer™: 

http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

– For Safari™: 

http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html

– For Chrome™:

http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647

– For Firefox™:

http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies 

– For Opera™:

http://help.opera.com/Windows/10.20/fr/cookies.html, etc.

– For Google:

https://tools.google.com/dlpage/gaoptout?hl=fr.

You have the option of controlling the deposit of Cookies on your smartphone according to the rules of the operating system.

– For iOS: https://support.apple.com/fr-fr/HT201265

– For Android: https://support.google.com/chrome/topic/3434352

Private navigation

The “Private navigation” mode, currently offered by all browsers, mainly allows browsing without retaining a history of the pages visited or downloads. For cookies, any cookies that have been saved during your browsing will be deleted when you close your browser. It is therefore not a solution that allows cookies to be refused; however, their lifespan remains limited to the duration of your browsing.

Refusal to deposit cookies expressed on the Website

If you do not want us to collect data on your browsing, you can choose to disable all cookies that are not essential for browsing on the Site via the configuration tool that we make available to you.

We will then store a cookie on your device whose sole purpose is to deactivate the storage of these cookies on your device. This cookie will be valid for thirteen months.

Please note that your request is based on a cookie. If you delete all cookies stored on your device (via your browser), we – or our partners – will no longer know that you have chosen this option.

If you refuse to save cookies or delete those stored there, you will no longer be able to benefit from a number of features that are nevertheless necessary to navigate certain areas of our site. This would be the case if you tried to access our content or services that require you to be identified. This would also be the case when we – and/or our partners – could not recognise, for technical compatibility purposes, the type of browser used by your device, its language and display settings or the country from which your device appears to be connected to the Internet.

If applicable, we do not accept any liability for the consequences of degraded operation of our services as a result of our being unable to save or view the cookies necessary for their operation that you have refused or deleted.

Interprofessional platforms

You can log on to the Youronlinechoices site, offered by digital advertising professionals within the European Digital Advertising Alliance (EDAA) and managed in France by the Interactive Advertising Bureau France.

This European platform is shared by hundreds of Internet advertising professionals and constitutes a centralised interface enabling you to express your refusal or acceptance of the cookies used in order to adapt the advertisements to the navigation of your device http://www.youronlinechoices.com/fr/controler-ses-cookies/.

Note that this procedure will not prevent advertisements from being displayed on the websites you visit. It will only block technologies that allow advertisements to be adapted to your interests.