Skip to content

Cart

Your cart is empty

Continue shopping

Privacy policy

DATA PRIVACY POLICY

 

 

Updated: March 2026

 

 

PREAMBLE:

 

When you browse our website accessible at https://hemen-biarritz.com (hereinafter referred to as the “Site”), we may process personal data about you:

- that we have collected; 

and/or

- that you have provided to us.

 

Any use of or browsing on the Site constitutes the Buyer’s acceptance of this Privacy Policy.

 

This Privacy Policy may be updated at any time. The date of the most recent update will appear on this page. We therefore encourage you to review it regularly.

 

ARTICLE 1. DEFINITIONS

 

“Personal Data” or Personal Information”: Any data or information that allows you to be identified directly or indirectly. Anonymized information is not considered personal data.

 

Data Protection Act”: Law No. 78-17 of January 6, 1978, relating to information technology, files, and civil liberties.

 

General Data Protection Regulation” or “GDPR ”: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which entered into force on May 25, 2018, in France.

 

Data Controller”: A natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of processing.

 

Website”: The website accessible at https://hemen-biarritz.com

 

Processor”: A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller.

 

User”: Any person who browses and uses the Site.

 

ARTICLE 2. GENERAL INFORMATION

 

The Data Controller of your Personal Data is LA RUCHE MODERNE (hereinafter “HEMEN”), a simplified joint-stock company registered with the Bayonne Trade and Companies Register under number 792 991 879, with its registered office located at 5 rue Pierre DARTIGUELONGUE, 64200 BIARRITZ.

 

Contact: info@hemen-biarritz.com  

  +33621152398

 

As the data controller, HEMEN (hereinafter “We, “Our,” “Us”) collects and processes the personal data of its Users (hereinafter You,” “Your,” “Yours”) in connection with the use of the website https://hemen-biarritz.com.

 

Indeed, through our Site, you may be asked to provide us with personal data, for example when creating a customer account, placing product orders, etc.

 

We may also collect certain information regarding your browsing activity on our Site, under the conditions described in Section 4, “Cookies and Other Trackers,” below.

 

This processing is carried out in accordance with the provisions of Law No. 78-17 of January 6, 1978, on information technology, files, and civil liberties (known as the “Data Protection Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “General Data Protection Regulation” or “GDPR”).

 

Certain personal data will also be collected and processed by Shopify in connection with the use of certain advanced features.

 

In these circumstances, SHOPIFY acts alsoas the controller of your personal data, particularly with regard to the processing of your requests to exercise your rights concerning the use of your personal data for these purposes.

 

 

 

 

ARTICLE 3. DAT S COLLECTED S, PURPOSES S, AND LEGAL BASES

 

We collect personal data:

 

(i) directly from you, particularly when you create an account, purchase a product, or during our interactions;
(ii) as part your ofand use of browsing the website, particularly through cookies or similar technologies;
(iii) from technical service providers acting on our behalf;
(iv) from partners or any authorized third parties. 

 

Data is collected for the purposes and on the legal grounds indicated below:

 

3.1. Data Collected While Browsing the Site

 

Nature of the data collected

Purposes

Legal bases

Browsing data (IP address, date and time of browsing, browser, network connection)

Provision and improvement of Services, personalization of the user experience

Legitimate interest

Personal contact information (title, last name, first name, address, email)

Communication (customer relationship management and support)

Performance of the contract

 

 

Consent

Usage data

Communication (customer relationship management and support)

Contract performance

 

 

Consent

Email address

Receipt of exclusive content (newsletters, promotions, etc.).

Consent

 

Marketing and advertising (sending promotional communications and displaying targeted ads)

Legitimate interest

Transactional information (products viewed, added to cart, or to a wish list)

Product recommendations

Legitimate interest

 

Marketing and advertising (sending promotional communications and displaying targeted ads)

Legitimate interest

 

 

 

 

 

 

 

3.2. Data collected when creating a user account on the Site

 

Nature of the data collected

Purposes

Legal basis

Email address

Account creation and management

Performance of the contract

 

Marketing and advertising (Sending promotional communications and displaying targeted ads). You have the right to object to this use at any time, particularly when each marketing email is sent.  

Legitimate interest

Account information (username, password, security questions, preferences, and settings)

Creating and managing an account

Performance of the contract

First and last name

 

Creating and managing an account

Performance of the contract

 

Marketing

Legitimate interest

Shipping address

Creating and managing an account

Contract performance

Billing address

Creating and managing an account

Contract fulfillment

Phone number

Creating and managing an account

Contract performance

 

Please also note that all information you provide to us via mail or email, including in attachments, may contain personal data.

 

 

 

3.3. Data collected when purchasing a product on the Site

 

Nature of the data collected

Purposes

Legal basis

Email address

Order management

Contract fulfillment

 

Account Management

Contract fulfillment

 

Marketing and advertising (if you are already a Customer and the marketing concerns products or services similar to those already purchased).

Legitimate interest

 

Marketing and advertising.

You have the right to object to this use at any time, particularly when you receive each marketing email.

 

Consent

 

Password

Account management, order management

Contract fulfillment

First and Last Name

Order and customer relationship management

Contract fulfillment

 

Organization of delivery and returns

Contract fulfillment

 

Marketing and advertising

Consent

Phone number

Organization of delivery and returns

 

Contract fulfillment

 

Marketing and advertising.

You have the option to object to this use by registering on the do-not-call list.

Consent

 

Shipping address

Organization of delivery and returns

Contract fulfillment

 

Billing address

Payment processing, billing management

Contract fulfillment

Payment(credit/debit card numbers, financial account information, transaction details, payment method, payment confirmation)information

Payment processing, billing management

Contract performance

 

Bookkeeping

Compliance with legal obligations

 

Security and fraud prevention (authentication, payment security)

Contract performance

Order History

Product Recommendations

Legitimate interest

 

Marketing and advertising (sending promotional communications and displaying targeted ads)

Legitimate interest

 

Browsing data

 

Personalization of the user experience

 

Legitimate interest

 

Please also note that all information you provide to us via mail, email, including in attachments, may contain personal data.

 

ARTICLE 4. COOKIES AND OTHER TRACKERS

 

4.1. Cookies collected

 

When you visit our website, cookies or trackers may be stored on your computer, mobile device, or tablet. Cookies allow us to provide you with a better browsing experience and improve your experience on the Site.

 

While you are browsing, cookies are placed on your device based on the choices you have previously made via the cookie management banner located at the top right of each page on our Site.

 

Types of cookies

Purposes

Legal basis

 

Essential cookies

Ensuring security and connection management

Performance of the Contract

Technical or functional cookies

To enable the use of a specific service explicitly requested by the user, or for the sole purpose of transmitting a communication over an electronic communications network.

Exempt from consent

Performance of the contract

Audience measurement cookies

Enable the analysis of our Site’s traffic statistics to optimize our Users’ experience.

User consent

 

Third-party cookies

 

Manage statistics and advertising tracking

User consent

 

4.2. Cookie Settings

 

With the exception of cookies used to ensure connection security and the proper functioning of the Site, non-functional cookies and other trackers are subject to the User’s express consent.

 

You can refuse all cookies by clicking the “refuse all” link or select which ones you wish to allow by configuring them via our cookie management banner.  

 

You can also limit the use of cookies in your browser settings and choose how to manage cookies using your browser’s help menu. Here is a non-exhaustive list:

 

 

 

Please note that our website may not function properly if all cookies are disabled. If you delete cookies from your browser, they will be subject to your consent again when you visit our Site.

 

ARTICLE 5. RECIPIENTS OF PERSONAL DATA

 

All data provided will be used by our services to ensure you have the best possible experience on our Site.

 

Some of your data may be shared with our service providers within the scope of their respective responsibilities.

 

- Technical service provider involved in the hosting and maintenance of the Site: the website is hosted by SHOPIFY, which collects and processes personal data related to your access to and use of the services in order to ensure their provision and improvement.

 

In addition, to protect, grow, and improve our business, we use certain advanced features offered by SHOPIFY, which incorporate data and information derived from your interactions with our store, as well as with other merchants and with SHOPIFY. In this context, SHOPIFY may use personal data collected from your interactions with our store, with other merchants, and with its own services.

 

In these circumstances, SHOPIFY acts as the data controller for your personal data, particularly with regard to processing your requests to exercise your rights regarding the use of your personal data for these purposes.

 

Consumer Privacy Policy atTo learn more about how SHOPIFY uses your personal data and the rights you have, you can visit SHOPIFY’s.

 

Depending on your place of residence, you may also exercise certain rights regarding your personal data via atSHOPIFY’s privacy portal.

 

- Technical and logistics service providers involved in the shipping and delivery of your order (LA POSTE COLISSIMO, CHRONOPOST, GLS, DHL, FEDEX, DPD);

 

 

- Marketing, advertising, and analytics partners;

 

- Online payment service provider:

 

 

In this context, certain recipients of your data may transfer it outside the European Union and the United Kingdom.

 

In such cases, we ensure an adequate level of protection for your personal data during these transfers. In particular, we apply the standard contractual clauses adopted by the European Commission or any equivalent instrument issued by the competent authority in the United Kingdom, unless the destination country is recognized as providing an adequate level of data protection.

 

 

 

ARTICLE 6. DATA RETENTION PERIOD

 

The retention period for your personal data varies depending on the purpose for which it was collected. It will be retained for as long as necessary to fulfill the purposes for which it was collected.

 

However, certain personal data of administrative or legal interest will be retained beyond the period necessary to fulfill the purpose for which they were collected.

 

Nature of Processing

Retention Period

Order management (management of the order, delivery, service provision or supply of goods, invoices, and payments)

Retention for the purposes of fulfilling your contract, then for the period necessary to establish proof of a right or a contract.

This data may be archived in accordance with the provisions of the Commercial Code regarding the retention period for books and documents created in the course of commercial activities and the Consumer Code regarding the retention of contracts concluded electronically.

Data relating to credit cards used for payment

Management of our customer and prospect database

Data is retained for a period of 3 years from your last contact with us (for example, for customers, a purchase; or for prospects, a click on a hyperlink contained in an email) or until you withdraw your consent.

Your inquiries to customer service

Retained for the time necessary to process your request.

Recordings of telephone conversations with our Customer Service are retained for a limited period (up to 6 months) except in exceptional cases (e.g., for investigative purposes, fraud, or for legal reasons).

Your electronic identification data

(your connection logs collected, subject to your consent and your device settings, through the use of cookies and other trackers placed on our Site)

Retained in accordance with applicable regulations for a period not exceeding 13 months.

Statistics

3 years from the date of collection

 

Some of your personal data may be retained, even if you delete your account, due to legal obligations or for the purpose of dispute resolution. This data will be retained within the limits of applicable statutes of limitations.

 

ARTICLE 7. YOUR RIGHTS

 

Depending on your place of residence, you have the right to exercise all or part of the following rights:

 

Right of access to your data: you may request confirmation of whether HEMENprocesses your personal data and, if so, access said data;

 

Right to rectification of your data: you may request that we rectify your personal data if it is inaccurate or incomplete. If you have a customer account, you may access the section containing your personal data to modify or update it. You must ensure that this data is true and accurate. Likewise, you agree to notify us of any changes or modifications to this data. We also remind you that, in principle, you must only provide your own personal data and not that of a third party. Any damage or loss caused as a result of providing inaccurate or incomplete information in our data collection forms is the sole responsibility of the User of our Site;

 

Right to erasure of your data (or “right to be forgotten”): You may request that we erase personal data concerning you if any of the grounds set forth in Article 17(1) of the GDPR apply:
o Your personal data is no longer necessary for the purposes
o You have withdrawn your consent and there is no other legal basis justifying the continued processing of your personal data;
o You have validly exercised your right to object;
o The processing of your data is unlawful;
o Your personal data must be erased to comply with a legal obligation.

In addition, you can delete your account via your customer account.

 

Right to restriction of processing: You may restrict the processing of your data when one of the conditions set forth in Article 18(1) of the GDPR is met:
o You contest the accuracy of your personal data, for a period allowing us to verify its accuracy;
o The processing is unlawful and you request the restriction of its use;
o We no longer need your data, but you still need it to contest the processing, or to exercise or defend your legal rights;
o You have objected to the processing while we verify whether the legitimate interests pursued by HEMEN override your own.

 

Right to object to the processing of your data: You may object, at any time, to the processing of your personal data, in accordance with Article 21 of the GDPR: HEMEN will no longer process your data unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

 

Right to data portability: You may receive your data in a structured, commonly used, and machine-readable format and transmit it to another data controller.

 

Right to provide instructions regarding the handling of your data after your death.

 

To exercise your rights, you may contact us using one of the following addresses, providing proof of your identity to prevent a third party from exercising your data rights without your knowledge:

Via the following email address: info@hemen-biarritz.com
Via the following postal address: LA RUCHE MODERNE, 5 rue Pierre DARTIGUELONGUE 64200 BIARRITZ

 

Your request will be processed within the following timeframes:

 

up to 1 month for a simple request;
up to 3 months for a complex request. In this case, we will notify you of this extension and the reasons for the delay within one month of receiving the request.

 

Exercising your rights is free of charge, except in cases of manifestly unfounded or excessive requests, particularly due to their repetitive nature. HEMEN may require payment of reasonable fees or refuse to comply with such requests.

 

To learn more about Shopify’s use of your personal data and your potential rights, including regarding data processed by Shopify, please visit the following websites:https://privacy.shopify.com/en .

 

 

 

ARTICLE 8. SECURITY OF PERSONAL DATA

 

We implement appropriate technical and organizational measures to ensure a level of security suitable for protecting your personal data against destruction, loss, alteration, disclosure, unauthorized access, or any other forms of unlawful processing.

 

However, since the Internet is open to everyone and unsecured, HEMEN cannot guarantee absolute security for your personal data stored or transmitted. Their security also depends on everyone’s best practices.

 

Consequently, we recommend, in particular, that you do not share your account login credentials and that you always log out of your profile after use.

 

Furthermore, it is your responsibility, to the extent possible, to ensure that measures are in place to secure your personal computer network when you visit our Site or communicate sensitive or confidential information.  

 

 

 

ARTICLE 9. AL DATA OF MINORS

 

We do not knowingly collect information regarding minors under the age of 16 without the consent of the parent(s) or legal guardian(s).

 

If you are the parent or legal guardian of a minor whose personal data has been provided to us, you may contact us at the contact information provided below to request its deletion.

 

If such data were to be collected without our knowledge, we would take all necessary measures to delete it as soon as possible.

 

 

 

ARTICLE 10. AMENDMENTS TO THIS DATA PROTECTION POLICY

 

This Data Protection Policy may be amended at any time to reflect changes in personal data protection standards as well as changes made by HEMEN in the processing of your personal data.

 

ARTICLE 11. COMPLAINTS

 

Any complaints regarding the processing of your personal data should be sent to the addressfollowing: info@hemen-biarritz.com .  

 

For any complaint regarding HEMEN’s handling of your request, you may file a complaint with local data protection authorityyour country’s .

 

In France, you may contact the National Commission for Information Technology and Civil Liberties (CNIL) by mail (CNIL - 3 Place de Fontenoy – TSA 80715 – 75 334 PARIS CEDEX 07) or online ( https://www.cnil.fr ).

 

If you reside in one of the member countries of the European Economic Area (EEA), you can consult the list of competent supervisory authorities at the following link:https://www.edpb.europa.eu/about-edpb/about-edpb/members_fr .

 

ARTICLE 12. CONTACT INFORMATION

 

If you have any questions regarding this privacy policy, or if you wish to exercise any of your rights, you can contact us:

 

by email at info@hemen-biarritz.com, or
by mail at the following address: 5 Rue Pierre Dartiguelongue, 64200 Biarritz, France.

 

 

Depending on where you live, you can also exercise certain rights regarding your personal data through Shopify’s privacy portal