Privacy policy
DATA PRIVACY POLICY
Updated: March 2026
PREAMBLE:
When you browse our website accessible at https://hemen-biarritz.com (hereinafter referred to as the “Site”), we may process personal data about you:
and/or
Any use of or browsing on the Site constitutes the Buyer’s acceptance of this Privacy Policy.
This Privacy Policy may be updated at any time. The date of the most recent update will appear on this page. We therefore encourage you to review it regularly.
“Personal Data” or “Personal Information”: Any data or information that allows you to be identified directly or indirectly. Anonymized information is not considered personal data.
“Data Protection Act”: Law No. 78-17 of January 6, 1978, relating to information technology, files, and civil liberties.
“General Data Protection Regulation” or “GDPR ”: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which entered into force on May 25, 2018, in France.
“Data Controller”: A natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of processing.
“Website”: The website accessible at https://hemen-biarritz.com
“Processor”: A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller.
“User”: Any person who browses and uses the Site.
The Data Controller of your Personal Data is LA RUCHE MODERNE (hereinafter “HEMEN”), a simplified joint-stock company registered with the Bayonne Trade and Companies Register under number 792 991 879, with its registered office located at 5 rue Pierre DARTIGUELONGUE, 64200 BIARRITZ.
Contact: info@hemen-biarritz.com
+33621152398
As the data controller, HEMEN (hereinafter “We,” “Our,” “Us”) collects and processes the personal data of its Users (hereinafter “You,” “Your,” “Yours”) in connection with the use of the website https://hemen-biarritz.com.
Indeed, through our Site, you may be asked to provide us with personal data, for example when creating a customer account, placing product orders, etc.
We may also collect certain information regarding your browsing activity on our Site, under the conditions described in Section 4, “Cookies and Other Trackers,” below.
This processing is carried out in accordance with the provisions of Law No. 78-17 of January 6, 1978, on information technology, files, and civil liberties (known as the “Data Protection Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “General Data Protection Regulation” or “GDPR”).
Certain personal data will also be collected and processed by Shopify in connection with the use of certain advanced features.
In these circumstances, SHOPIFY acts alsoas the controller of your personal data, particularly with regard to the processing of your requests to exercise your rights concerning the use of your personal data for these purposes.
We collect personal data:
Data is collected for the purposes and on the legal grounds indicated below:
|
Nature of the data collected |
Purposes |
Legal bases |
|
Browsing data (IP address, date and time of browsing, browser, network connection) |
Provision and improvement of Services, personalization of the user experience |
Legitimate interest |
|
Personal contact information (title, last name, first name, address, email) |
Communication (customer relationship management and support) |
Performance of the contract |
|
|
|
Consent |
|
Usage data |
Communication (customer relationship management and support) |
Contract performance |
|
|
|
Consent |
|
Email address |
Receipt of exclusive content (newsletters, promotions, etc.). |
Consent |
|
|
Marketing and advertising (sending promotional communications and displaying targeted ads) |
Legitimate interest |
|
Transactional information (products viewed, added to cart, or to a wish list) |
Product recommendations |
Legitimate interest |
|
|
Marketing and advertising (sending promotional communications and displaying targeted ads) |
Legitimate interest |
|
Nature of the data collected |
Purposes |
Legal basis |
|
Email address |
Account creation and management |
Performance of the contract |
|
|
Marketing and advertising (Sending promotional communications and displaying targeted ads). You have the right to object to this use at any time, particularly when each marketing email is sent. |
Legitimate interest |
|
Account information (username, password, security questions, preferences, and settings) |
Creating and managing an account |
Performance of the contract |
|
First and last name
|
Creating and managing an account |
Performance of the contract |
|
|
Marketing |
Legitimate interest |
|
Shipping address |
Creating and managing an account |
Contract performance |
|
Billing address |
Creating and managing an account |
Contract fulfillment |
|
Phone number |
Creating and managing an account |
Contract performance |
Please also note that all information you provide to us via mail or email, including in attachments, may contain personal data.
|
Nature of the data collected |
Purposes |
Legal basis |
|
Email address |
Order management |
Contract fulfillment |
|
|
Account Management |
Contract fulfillment |
|
|
Marketing and advertising (if you are already a Customer and the marketing concerns products or services similar to those already purchased). |
Legitimate interest |
|
|
Marketing and advertising. You have the right to object to this use at any time, particularly when you receive each marketing email. |
Consent
|
|
Password |
Account management, order management |
Contract fulfillment |
|
First and Last Name |
Order and customer relationship management |
Contract fulfillment |
|
|
Organization of delivery and returns |
Contract fulfillment |
|
|
Marketing and advertising |
Consent |
|
Phone number |
Organization of delivery and returns |
Contract fulfillment |
|
|
Marketing and advertising. You have the option to object to this use by registering on the do-not-call list. |
Consent |
|
Shipping address |
Organization of delivery and returns |
Contract fulfillment |
|
Billing address |
Payment processing, billing management |
Contract fulfillment |
|
Payment(credit/debit card numbers, financial account information, transaction details, payment method, payment confirmation)information |
Payment processing, billing management |
Contract performance |
|
|
Bookkeeping |
Compliance with legal obligations |
|
|
Security and fraud prevention (authentication, payment security) |
Contract performance |
|
Order History |
Product Recommendations |
Legitimate interest |
|
|
Marketing and advertising (sending promotional communications and displaying targeted ads) |
Legitimate interest |
|
Browsing data |
Personalization of the user experience |
Legitimate interest |
Please also note that all information you provide to us via mail, email, including in attachments, may contain personal data.
When you visit our website, cookies or trackers may be stored on your computer, mobile device, or tablet. Cookies allow us to provide you with a better browsing experience and improve your experience on the Site.
While you are browsing, cookies are placed on your device based on the choices you have previously made via the cookie management banner located at the top right of each page on our Site.
|
Types of cookies |
Purposes |
Legal basis |
|
Essential cookies |
Ensuring security and connection management |
Performance of the Contract |
|
Technical or functional cookies |
To enable the use of a specific service explicitly requested by the user, or for the sole purpose of transmitting a communication over an electronic communications network. |
Exempt from consent Performance of the contract |
|
Audience measurement cookies |
Enable the analysis of our Site’s traffic statistics to optimize our Users’ experience. |
User consent |
|
Third-party cookies
|
Manage statistics and advertising tracking |
User consent |
With the exception of cookies used to ensure connection security and the proper functioning of the Site, non-functional cookies and other trackers are subject to the User’s express consent.
You can refuse all cookies by clicking the “refuse all” link or select which ones you wish to allow by configuring them via our cookie management banner.
You can also limit the use of cookies in your browser settings and choose how to manage cookies using your browser’s help menu. Here is a non-exhaustive list:
Please note that our website may not function properly if all cookies are disabled. If you delete cookies from your browser, they will be subject to your consent again when you visit our Site.
All data provided will be used by our services to ensure you have the best possible experience on our Site.
Some of your data may be shared with our service providers within the scope of their respective responsibilities.
In addition, to protect, grow, and improve our business, we use certain advanced features offered by SHOPIFY, which incorporate data and information derived from your interactions with our store, as well as with other merchants and with SHOPIFY. In this context, SHOPIFY may use personal data collected from your interactions with our store, with other merchants, and with its own services.
In these circumstances, SHOPIFY acts as the data controller for your personal data, particularly with regard to processing your requests to exercise your rights regarding the use of your personal data for these purposes.
Depending on your place of residence, you may also exercise certain rights regarding your personal data via atSHOPIFY’s privacy portal.
In this context, certain recipients of your data may transfer it outside the European Union and the United Kingdom.
In such cases, we ensure an adequate level of protection for your personal data during these transfers. In particular, we apply the standard contractual clauses adopted by the European Commission or any equivalent instrument issued by the competent authority in the United Kingdom, unless the destination country is recognized as providing an adequate level of data protection.
The retention period for your personal data varies depending on the purpose for which it was collected. It will be retained for as long as necessary to fulfill the purposes for which it was collected.
However, certain personal data of administrative or legal interest will be retained beyond the period necessary to fulfill the purpose for which they were collected.
|
Nature of Processing |
Retention Period |
|
Order management (management of the order, delivery, service provision or supply of goods, invoices, and payments) |
Retention for the purposes of fulfilling your contract, then for the period necessary to establish proof of a right or a contract. This data may be archived in accordance with the provisions of the Commercial Code regarding the retention period for books and documents created in the course of commercial activities and the Consumer Code regarding the retention of contracts concluded electronically. |
|
Data relating to credit cards used for payment |
Please refer to our service providers’ websites for more information: SHOP PAY (https://www.shopify.com/fr/legal/privacy/consumers), PAYPAL (https://www.paypal.com/fr/legalhub/paypal/privacy-full ), KLARNA (https://www.klarna.com/fr/confidentialite/ ) APPLE PAY (https://www.apple.com/fr/legal/privacy/data/fr/apple-pay/ )
|
|
Management of our customer and prospect database |
Data is retained for a period of 3 years from your last contact with us (for example, for customers, a purchase; or for prospects, a click on a hyperlink contained in an email) or until you withdraw your consent. |
|
Your inquiries to customer service |
Retained for the time necessary to process your request. Recordings of telephone conversations with our Customer Service are retained for a limited period (up to 6 months) except in exceptional cases (e.g., for investigative purposes, fraud, or for legal reasons). |
|
Your electronic identification data (your connection logs collected, subject to your consent and your device settings, through the use of cookies and other trackers placed on our Site) |
Retained in accordance with applicable regulations for a period not exceeding 13 months. |
|
Statistics |
3 years from the date of collection |
Some of your personal data may be retained, even if you delete your account, due to legal obligations or for the purpose of dispute resolution. This data will be retained within the limits of applicable statutes of limitations.
Depending on your place of residence, you have the right to exercise all or part of the following rights:
In addition, you can delete your account via your customer account.
To exercise your rights, you may contact us using one of the following addresses, providing proof of your identity to prevent a third party from exercising your data rights without your knowledge:
Your request will be processed within the following timeframes:
Exercising your rights is free of charge, except in cases of manifestly unfounded or excessive requests, particularly due to their repetitive nature. HEMEN may require payment of reasonable fees or refuse to comply with such requests.
To learn more about Shopify’s use of your personal data and your potential rights, including regarding data processed by Shopify, please visit the following websites:https://privacy.shopify.com/en .
We implement appropriate technical and organizational measures to ensure a level of security suitable for protecting your personal data against destruction, loss, alteration, disclosure, unauthorized access, or any other forms of unlawful processing.
However, since the Internet is open to everyone and unsecured, HEMEN cannot guarantee absolute security for your personal data stored or transmitted. Their security also depends on everyone’s best practices.
Consequently, we recommend, in particular, that you do not share your account login credentials and that you always log out of your profile after use.
Furthermore, it is your responsibility, to the extent possible, to ensure that measures are in place to secure your personal computer network when you visit our Site or communicate sensitive or confidential information.
We do not knowingly collect information regarding minors under the age of 16 without the consent of the parent(s) or legal guardian(s).
If you are the parent or legal guardian of a minor whose personal data has been provided to us, you may contact us at the contact information provided below to request its deletion.
If such data were to be collected without our knowledge, we would take all necessary measures to delete it as soon as possible.
This Data Protection Policy may be amended at any time to reflect changes in personal data protection standards as well as changes made by HEMEN in the processing of your personal data.
Any complaints regarding the processing of your personal data should be sent to the addressfollowing: info@hemen-biarritz.com .
For any complaint regarding HEMEN’s handling of your request, you may file a complaint with local data protection authorityyour country’s .
In France, you may contact the National Commission for Information Technology and Civil Liberties (CNIL) by mail (CNIL - 3 Place de Fontenoy – TSA 80715 – 75 334 PARIS CEDEX 07) or online ( https://www.cnil.fr ).
If you reside in one of the member countries of the European Economic Area (EEA), you can consult the list of competent supervisory authorities at the following link:https://www.edpb.europa.eu/about-edpb/about-edpb/members_fr .
If you have any questions regarding this privacy policy, or if you wish to exercise any of your rights, you can contact us:
Depending on where you live, you can also exercise certain rights regarding your personal data through Shopify’s privacy portal



