1. Data controller
1.1 The controller is VH2O, a company with a share capital of €2,000.00 whose registered office is located at 17 rue Burq, 75018 Paris, registered in the Paris Trade and Companies Register under the unique identification number 501 219 331 (hereinafter, “the Company”). In this respect, the Company – and/or its service providers acting in its name and on its behalf – determines the purposes, technical and legal means of processing personal data and undertakes to take all necessary organisational measures to ensure safe processing in accordance with the Data Protection Act, files and freedoms of 6 January 1978, as amended by the Law of 6 August 2004 (hereinafter, the “Law”) and the European Regulation of 26 April 2016 on the protection of personal data and on the free movement of such data (hereinafter, the “DGPS Regulation”).
1.2. The Company is free to choose any natural or legal person who processes Users’ personal data at its request and on its behalf (hereinafter, “the Subcontractor”). If necessary, the Company undertakes to select a Subcontractor offering sufficient guarantees as to the technical and organisational security measures for the processing of personal data.
2. Processing of personal data
2.1. The use of the www.aquahom.com website (hereinafter, “the Site”), access to some of its sections and/or any request for information or services from Users of the Site may result in the disclosure of personal data. The processing of this data by the Company, in its capacity as Data Controller, and/or by service providers acting in the name and on behalf of the Company, will be in accordance with the Law and the DGPS Regulations.
2.2 This Privacy Policy is intended to allow Users to know, even before accessing the various sections of the Site and communicating their personal data, how the Company processes the personal data of Users of the Site. The User must necessarily read it before communicating his personal data by filling in the forms provided for this purpose in the various sections of the Site.
2.3 Personal data will be processed mainly by automated means, with procedures strictly related to the purposes mentioned in point 3.
The Company is committed to ensuring that Users’ personal data are treated in a secure and confidential manner and takes appropriate measures to prevent the loss, misuse, alteration and deletion of such personal data.
2.4. The Company also collects certain personal data from Users in order to recognize them and offer them an optimal, high-quality and personalized user experience. This collection also makes it possible to correct any errors on the Site. The information collected concerns the User’s connection (IP address, geographical area, day and time of consultation, services consulted and/or used, etc.) as well as the device from which the connection is made.
2.5. Any failure, partial or inaccurate information on personal data, indicated by an asterisk, and therefore necessary for the performance of the requested service, makes it impossible. However, any failure, partial or inaccurate information on optional personal data is without consequence.
3. Purposes of the processing of personal data
Users’ personal data are processed to enable the processing, delivery and invoicing of orders placed on the Site.
The ordering process on the Site requires the creation of a Customer account in which his information is stored and protected by a password that the Customer will choose.
Subject to validation by an “opt-in” of the customer, personal information (personal data, e-mail address, gender, etc.) may also be used by the Company and/or its partners for commercial purposes such as sending newsletters or solicitations.
4. Personal data likely to be processed
The User information they provide by filling in forms or creating their customer account is collected and processed. This information may include the name, gender, address, e-mail address and telephone number of Users.
Personal data are collected on the basis of the User’s specific, free and informed consent.
5. Consent
The User has the right to withdraw his consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing already carried out, based on the consent given before the withdrawal. This right may be exercised electronically at the following address: contact@aquahom.com or by ordinary mail at the following address: AQUAHOM – VH2O – 17 rue Burq – 75018 Paris.
6. Storage period for personal data
In accordance with the legal requirements imposed by the Law and the DGMP Regulations, the Company only keeps Users’ personal data for as long as is reasonably necessary to achieve the purposes for which they are processed.
7. Communication of Users’ personal data for internal purposes
7.1. Personal data may be transmitted to employees or collaborators of the Company who, operating under the direct authority of the Company, are appointed controllers or processors of such data and receive appropriate operational instructions. Personal data may also be disclosed to employees or collaborators of data controllers if the latter, appointed by the Company, so decide and provided that the data are processed in accordance with the purposes pursued.
7.2. The Company ensures that subcontractors, employees or collaborators guarantee the same level of protection as it does and ensures that these subcontractors, employees or collaborators process personal data only for the purposes authorised by the purposes pursued, with the required discretion and security.
7.3. Personal data directly communicated by Users by filling in online forms may be communicated and processed by external service providers acting in the name and on behalf of the Company.
7.4 The data are not likely to be transferred to a country outside the European Union.
8. The rights granted to Users
8.1. The Company guarantees fair and lawful processing of Users’ personal data.
8.2. The Company guarantees the User a right of access to his personal data.
In accordance with Article 15 of the DGPS Regulations, the User has the right to ask the Company for (i) the communication of personal data concerning him/her in an accessible form, (ii) confirmation that his/her personal data are or are no longer being processed, (ii) the communication of the purposes of the processing, the categories of personal data processed and the recipients to whom his/her personal data are communicated and (iv) the storage period for his/her personal data or the criteria used to determine this period.
8.3. The Company guarantees the right to rectify and delete personal data to the User.
In accordance with Article 16 of the DGPS Regulation, incorrect or inaccurate data may be corrected or deleted at any time. It is up to the User to make the necessary changes himself from his User account in the first instance, then to ask the Company to make these changes if they cannot be made independently.
The User has the right to obtain the deletion of his personal data in the cases listed in Article 17 of the DGMP Regulations.
8.4. The Company guarantees the right to limit processing.
The User has the right to obtain a limitation on the processing of his personal data in the cases listed in Article 18 of the DGPS Regulation.
8.5. The Company guarantees the right to data portability.
In accordance with Article 20 of the DGPS Regulation, Users have the right to receive from the Company personal data concerning them in a structured, commonly used and machine-readable format. They also have the right to transmit this data to another controller, without the Company hindering it in the cases provided for in the DGPS Regulation.
8.6. The Company guarantees the right to object to the processing of data
The User has the right at any time to object to the processing of his personal data, when there are compelling and legitimate reasons relating to his particular situation.
In this case, the Company will no longer process personal data, unless there are legitimate and compelling reasons for processing that prevail over the interests and rights and freedoms of the User, or for the establishment, exercise or defence of legal rights.
8.7. The Company guarantees the right to make a claim
The User has the right to make a complaint concerning the processing of his personal data by the Company to the Commission National de l’Informatique et des Libertés, the competent body for the French territory.
8.8. The User may, at any time, exercise the above-mentioned rights by sending an electronic message to the following address contact@aquahom.com or by ordinary mail to the following address: AQUAHOM – VH2O – 17 rue Burq – 75018 Paris.
9. Limitation of the controller’s liability
The Site may contain hypertext links to websites controlled and operated by third parties not linked to the Company. Where applicable, the Company cannot be held responsible for the content of these sites, nor for the personal data protection practices of these third parties.
The Company cannot be held liable for the loss, corruption of data or identity theft, which may be caused in particular but not exclusively by the presence of viruses or computer attacks.
10. Modalities of modification of the User’s data
The User may, at any time, modify the data provided by sending an electronic message to the following address contact@aquahom.com or by ordinary mail to the following address: AQUAHOM – VH2O – 17 rue Burq – 75018 Paris.
11. Modification of the Privacy Policy
The Company reserves the right to amend this Privacy Policy to comply with obligations under privacy legislation or to adapt it to its practices. Consequently, the User is invited to consult it regularly in order to be informed of any modifications and adaptations.