319,90€
Data Protection Policy
Personal Data Controller
The personal data on the Website is collected by CROSSCALL in its capacity as data controller, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, applicable from 25 May 2018, and Law No. 2018-493 of 20 June 2018.
Data controller's contact details
CROSSCALL SA
245 rue Paul Langevin
Les Milles business area
13290 Aix en Provence
SIRET: 518 706 890 00069
Representative: Mr. Cyril VIDAL in his capacity as Chairman
Processing of Collected Personal Data
CROSSCALL may collect your personal data through this website for various purposes, namely:
1. Create your customer account and manage your orders
| Purpose of the collection | Purposes | Data collected | Legal basis | Retention period |
|---|---|---|---|---|
| Customer account creation | The necessary data is collected to create an account | Required: Last name, first name, date of birth, title and email address / optional: address, mobile phone number, employment status, sports practiced, children | Consent | Until consent is withdrawn |
| Order management | The necessary data is collected to process and track your orders on the website | Account creation data Credit card number, cardholder's name, security code |
Performance of the contract | Payment by bank card: 540 days from the transaction date (by the partner Ogone Worldline) Payment by PayPal: The personal data used in the context of the ongoing relationship between you and PayPal is stored for the entire duration of the relationship plus an additional period of 10 years Commercial documents retained for 10 years from the last contact |
| Management of payment in several monthly installments | The necessary data is collected to assess your creditworthiness and authorize payment in several monthly installments | Last name, first name, address, date and place of birth, credit card number, cardholder's name, security code, etc. | Legitimate interest | ONEY: If payment is accepted, for the entire duration of the loan + 5 years for evidentiary purposes in the event of a dispute / 6 months if payment is refused |
| Withdrawal management | The necessary data is collected to process your withdrawal requests for products purchased online and to inform you about this process | Last name, first name, address, email, telephone number, product reference and model | Performance of the contract | Commercial documents retained for 10 years from the last contact |
| Complaints/litigation management | The necessary data is collected to process your complaints | Last name, first name, address, email, telephone number, IMEI and purchase date | Performance of the contract / legitimate interest | In the event of litigation, the data is retained for the duration of the contract plus the applicable limitation period |
2. Responding to your requests
| Purpose of the collection | Purposes | Data collected | Legal basis | Retention period |
|---|---|---|---|---|
| Managing the contact form | The necessary data is collected to respond to internet users' requests (obtaining information about their order, invoice or referral), enable people to chat with a CROSSCALL employee, submit Partnership / Ambassador requests, and receive CROSSCALL news with consent. | Last name, first name, email, message For partnership / ambassador requests, the discipline and profession are also collected |
Legitimate interest | Until the request has been processed |
| Managing quote requests | The necessary data is collected to respond to quote requests and send promotional offers if you have consented to this. | Required: Last name, first name, telephone number, email, country, company name, position, desired product and volume, project description | Consent | 3 years following your last contact / until you unsubscribe from commercial communications |
| Managing requests to exercise rights | The necessary data is collected to process the request to exercise a right submitted via the dedicated form | Required: Nature of the request, email, name, account or order number Identity document as part of an access rights request |
Legal obligation | Identity document if requested: Deleted immediately after verification 1 year in the active database and 5 years in the intermediate database before deletion |
| Managing requests made via the chatbot | Improving the quality of the services Providing personalized service by consulting the conversation history |
Conversations (content of exchanges, number of conversations, duration, date) Visitor's IP address (for evidentiary purposes in the event of a dispute) The data are provided directly by the visitor (for example, identity, email address, telephone number) |
Consent | The data is retained for the time needed to provide a response and for a maximum period of 1 year |
3. Processing your requests with customer service
| Purpose of the collection | Purposes | Data collected | Legal basis | Retention period |
|---|---|---|---|---|
| Managing requests made by telephone | The necessary data is collected to contact you again and process your request | Required: Last name, first name, address, email and telephone number, IMEI, proof of purchase | Consent | The data is retained for the time needed to provide a response and for a maximum period of 2 years |
| Managing after-sales service repair requests | The necessary data is collected to process the product and contact you and return the repaired product | Required: Last name, address, email and telephone number, IMEI, proof of purchase | Warranty contract / Legitimate interest | The time needed to process your request + 2 years / 2 years after the end of the warranty if the device is under warranty |
| Management of requests relating to customer service made via the chatbot | Respond to requests relating to the after-sales service (AS) for products | Conversations (content of exchanges, number of conversations, duration, date) Visitor's IP address (for evidentiary purposes in the event of a dispute) The data are provided directly by the visitor (for example, identity, email address, telephone number) |
Consent | The data are retained for the time needed to provide a response and for a maximum period of 5 years |
4. Manage recruitment
| Purpose of the collection | Purposes | Data collected | Legal basis | Retention period |
|---|---|---|---|---|
| Application management | The necessary data are collected to process applications submitted online or by mail | Last name, first name, email address CV data: address, telephone number, age, gender, marital status, education and professional experience | Legitimate interest | 2 years from receipt of your CV |
5. Offer you promotional offers and competitions
| Purpose of the collection | Purposes | Data collected | Legal basis | Retention period |
|---|---|---|---|---|
| Management of marketing and promotional communications | The necessary data are collected to send marketing communications or promotional offers by email and/or messaging services personalized (SMS/RCS/WhatsApp). The data may also be used to analyze your interactions with our communications and, where applicable, your purchasing behavior, in order to personalize the offers and messages sent to you. |
Identification and contact data: last name, first name, email address, telephone number** Data relating to marketing interactions*: opens, clicks, unsubscribes Browsing and website activity data associated with marketing campaigns: pages viewed, browsing journey |
Consent | Data deleted upon unsubscribing or 3 years after the last contact |
| Management of competitions | The necessary data are collected to run the activities and send the prizes won | Last name, first name, email address, telephone number and postal address (depending on the purpose of the competition) | Consent | Deletion of data 2 months after the prizes are awarded If consent is given to the newsletter: until you unsubscribe |
| Management of reimbursement offers | The necessary data are collected to reimburse you and send newsletters with your consent | Name, email address, telephone number and postal address (depending on the purpose of the competition) | Consent | Deletion of data within a maximum period of 3 years after the end of the contract / until unsubscribing from the newsletter if consent to the newsletter has been given |
*Use of tracking pixels in our electronic communications
When we send you electronic communications (newsletters, commercial offers, etc.), we use tracking pixels embedded in our emails.
These trackers allow us to determine whether an email has been opened, which links have been viewed, and to measure the overall performance of our campaigns (open rates, click-through rates, unsubscribe rates, delivery errors).
The information collected in this way may include: whether or not the message was opened, the date and time it was opened, the links clicked, and a technical identifier associated with your email address. This information is used to measure the effectiveness of our communications, improve their content, and adapt our communication activities.
We do not use these pixels to track your browsing on other websites or to create a detailed profile of your activities outside our electronic communications.
The placement of these pixels and the processing of the resulting data are based on your prior consent to receive our electronic communications, in accordance with the applicable framework governing electronic marketing communications and CNIL recommendations.
You can withdraw this consent at any time:
– by clicking the unsubscribe link included in each of our marketing emails, or
– by contacting us using the contact details provided at the end of this policy.
Withdrawing your consent does not affect the lawfulness of processing already carried out, but it results in the cessation of our marketing emails and the future use of the associated tracking pixels.
As part of our marketing and campaign management activities, we may use a marketing automation provider (e.g. Klaviyo), which may process certain data outside the European Union, particularly in the United States. In this case, transfers are governed by appropriate safeguards (e.g. the European Commission's standard contractual clauses and/or an applicable recognized mechanism).
**We do not sell, rent, or share your personal information, including your mobile service registration data and your consent to receive SMS messages, with third parties for advertising purposes.
6. Enable us to manage the loyalty program
| Purpose of the collection | Purposes | Data collected | Legal basis | Retention period |
|---|---|---|---|---|
| Loyalty program management |
The management of registration and participation in the loyalty program. The monitoring the accumulation and use of loyalty points. Lthe award the provision of benefits such as discount coupons or accessories. Lhas customer relationship management as part of the program. |
last name, first name, address and‑email, date birthday history purchase history from the date of joining the program. |
Consent | For the duration of membership in the program |
As part of the loyalty program,Certain personal data processed by Yotpo on behalf of CROSSCALL may be hosted or accessed from countries located outside the European Union, particularly the States‑United States.
These data transfers are governed by the conclusion of standard contractual clauses adopted by the European Commission, as well as, where applicable, the implementation of additional technical and organizational measuress in order to ensure an adequate level of protection for personal data in accordance with applicable regulationsble.
7. Enable us to improve our products and services
| Purpose of the collection | Purposes | Data collected | Legal basis | Retention period |
|---|---|---|---|---|
| Management of opinion surveys | The necessary data is collected to understand how you use our products | Name, email address and telephone number, company name and occupation | Consent | Deletion once the survey results have been processed / If you consent to being contacted again, data is deleted when you unsubscribe |
| Management of user experiences | The necessary data is collected to gather your user experience feedback on products in order to improve them / contact you again for further details about your answers | Gender, first name, email address, country | Consent | 2 years, then anonymization |
| Participation in the community of innovators | The necessary data is collected to manage registrations and recruitment for the community of innovators, and to conduct market, satisfaction, needs and usage studies | First name, last name, email address, date of birth, city, country, Children Y/N, Sports played, frequency, Other possible and optional information: apartment/house, car type (and desired type), desired clothing brand, professional category, working hours, work environment, income bracket | Consent and then performance of the contract / Legitimate interest | Until unsubscribed |
RECIPIENTS
The recipients of these data are:
- The service provider responsible for campaign management marketing (Klaviyo) ;
- The service provider responsible for managing the loyalty program (Yotpo) ;
- The service provider making the Customer Relationship Management (CRM) system and the Marketing Cloud system available;
- The service provider making the online questionnaire deployment tool available;
- The service provider implementing online payment solutions;
- The service provider responsible for delivering orders;
- Repair centers;
- The service provider making the application management solution available;
- CROSSCALL's external DPO in connection with a request to exercise a right.
TRANSFER TO THIRD PARTIES AND OUTSIDE THE EUROPEAN UNION
Your personal data are preferably processed within the European Union.
For the purposes referred to above, some of your personal data may nevertheless be transferred to third-party entities established in countries located outside the European Union (e.g.: the company's processors involved in the aforementioned processing activities,...).
Some of these entities receiving your personal data are considered to provide a sufficient level of protection for personal data because they are established in a country whose personal data protection regulations have been recognized as providing an adequate level of protection for said data (see European Commission adequacy decisions)
Furthermore, if the country of the entity receiving your personal data does not provide an adequate level of protection for said data, we ensure that appropriate security and confidentiality measures are taken to guarantee the continued protection of your data.
Furthermore, in these circumstances, you are informed that transfers of your personal data to other entities outside the European Union are governed by the implementation of appropriate safeguards, such as entering into agreements with the recipients of these data containing contractual clauses compliant with the European Commission's recommendations, enabling us to ensure that appropriate safeguards are in place for the protection of said data.
We would also like to clarify that transfers of personal data outside the European Union are lawful if (i) the transfer is necessary for the performance of a contract between the data subject and the Data Controller or for the implementation of pre-contractual measures taken at the data subject's request, if (ii) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the data controller and another natural or legal person, or if (iii) the Data Subject has given explicit consent to the proposed transfer after being informed of the risks that this transfer could pose to them due to the absence of an adequacy decision and appropriate safeguards.
CROSSCALL may transmit personal data to the competent departments and authorities as part of requests for information or administrative or judicial decisions.
DATA SECURITY
CROSSCALL takes steps to ensure the security of your personal data hosted on its servers. The company endeavors to implement the technical and organizational security measures necessary to ensure the integrity, confidentiality and availability of your data.
CROSSCALL employees who have access to Site users' personal data in the course of their duties undertake to maintain the strictest confidentiality in this regard.
The CROSSCALL website uses the TLS encryption protocol to ensure the confidentiality and integrity of your data transmitted through the website and to ensure client-server authentication.
You can view our security certificate, issued by a third party, by clicking the padlock icon in your browser's address bar.
DATA SUBJECT RIGHTS AND HOW TO EXERCISE THEM
In accordance with Law No. 78-17 of January 6, 1978, relating to Information Technology, Files and Liberties (Articles 38, 39 and 40), and the General Data Protection Regulation, you have various rights regarding the use of your personal data. These rights are as follows:
- Access: Exercising the right of access allows the User to check the accuracy of their data and, where necessary, have it rectified or erased;
- Rectification: Exercising the right to rectification allows the User to update their data;
- Data portability: Exercising the right to data portability allows the User to transmit their data to a third party of their choice;
- Erasure: Exercising the right to erasure allows the User to have their data deleted;
- Objection: Exercising the right to object allows the User to object to the use of their data for a specific purpose;
- Restriction: Exercising the right to restriction allows the User to ask an organization to temporarily suspend the use of certain data.
These rights may be exercised with the data protection officer of CROSSCALL by completing the form available on the following page: Personal data management
Please note that CROSSCALL also allows you to modify your personal information and withdraw your consent to commercial and promotional offers directly from your customer account. You can also unsubscribe from all communications by clicking the unsubscribe link at the end of the emails you receive.
If, after contacting the data controller or the data protection officer of CROSSCALL, you believe that your data protection rights have not been respected, you may submit a complaint online to the French Data Protection Authority (CNIL) or by post to 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07
ABOUT COOKIES
This site uses cookies for the proper functioning of the site and the user experience: normal browsing on the site, video playback, content sharing on social networks, and page traffic measurement. Strictly necessary cookies are those related to the site's operation.
This site also uses analytics cookies to improve the site's functionality. All data collected by these cookies is anonymous.
Advertising cookies are used to display ads tailored to users' interests and measure the effectiveness of advertising campaigns.
See the cookie policy to learn more.
AMENDMENT OF THE PRIVACY POLICY
CROSSCALL may amend this privacy policy. We therefore invite you to consult it regularly to keep up to date with its latest version.