Personal data

Hast personal data management policy


1. Our commitments to protecting your personal data

We, HAST PARIS SAS, whose registered office is located at 20 boulevard Poissonnière – 75009 Paris, registered with the Paris Trade and Companies Register under no. 793 590 159 (hereinafter “HAST”), as data controller, explain how we collect, process and transfer your personal data in order to provide you with new services every day while respecting your rights.

We protect your privacy by ensuring the protection, confidentiality, integrity, availability and security of the personal data you entrust to us across all our communication channels.

We take all necessary measures to:

  • provide you with clear and transparent information on how your personal data will be collected and processed;
  • implement all necessary technical and organisational measures to protect your personal data against disclosure, loss, alteration or access by an unauthorised third party;
  • retain your personal data only for the time necessary for the purposes of the processing or specified service;
  • offer you, at any time, the possibility to access and amend the personal data we process directly via your personal areas on our website.

To achieve these objectives, we implement appropriate technical and organisational measures to ensure that processing complies with applicable personal data protection law.

 

2. When do we collect your personal data?

Your personal data may be collected when:

  • you create an account on our website
  • you visit our website, which may use cookies;
  • you purchase our products online;
  • you subscribe to our newsletter.

 

3. What personal information do we process and when do we collect it?

We collect the information you provide to us as part of our business relationship, including:

  • when you create a customer account;
  • when managing your orders;
  • when you contact our customer service department;
  • when you visit our social media accounts;
  • when you take part in a competition.

Information whose collection is strictly necessary to provide you with a service is marked with an asterisk and generally includes your surname, first name, postal address, email address, mobile phone number and date of birth.

We also collect personal information when you purchase our products. In particular, we collect information relating to the amount and nature of your purchases, your orders, invoices and customer journey on our online service.

 

4. How do we use your personal data?

We process your personal information transparently and securely. Your personal information is collected for the purposes set out below.

4.1 Purposes of our personal data processing

Order and delivery management

In fulfilling our obligations to our customers, we collect and use your personal information to manage our business relationship, in particular to manage your purchases and orders and deliver your products.

Customer relationship management / Improving your customer experience
We use and retain your personal information to update our customer records and offer you products that may appeal to you.

Communication with you
We collect and retain your personal information so that we can communicate with you about your orders, invoices or customer service complaints.

Targeted advertising and newsletter
We collect and retain your personal information for marketing purposes, in particular to send you our newsletter, if you have given us your consent. If you no longer wish to receive our newsletter, go to your personal area, under My Profile, click on “My personal information” and untick the “Sign up for our newsletter!” box.

Legal or regulatory requirement
We may be required to process your personal data in order to comply with one of our legal or regulatory obligations, for example by disclosing your personal data in response to legitimate requests from public authorities, particularly to meet national security, fraud prevention or law enforcement requirements.

4.2 Who receives your personal data?

We ensure that only authorised persons within Hast can access your personal data where such access is necessary for the performance of our business relationship.

Our service providers may also receive personal data strictly necessary to perform the services entrusted to them (for example: delivery, online payment).

4.3 Where is your personal data stored?

Data is stored in compliance with French legislation and European regulations.

In compliance with French legislation and European regulations, we may share with other companies the personal data necessary to provide the services you have contracted or subscribed to (examples: home delivery, collection point).

If our service provider operates outside the European Union, we protect the confidentiality of your personal information and your rights by using appropriate safeguards within the meaning of applicable personal data protection regulations.

4.4 How long is your personal data retained?

Data retention periods in the active database comply with the recommendations of the CNIL and/or applicable legal obligations:

Categories of personal data   Retention period in the active database
Customer account data 3 years from your last contact with HAST
Identity document provided when exercising rights of enquiry, access, rectification and objection 1 year from the date of receipt by HAST
Your email address for sending our newsletter (subject to having obtained your consent) Until you withdraw your consent
Data for managing opt-out lists for our newsletter 3 years from the exercise of the right to object to receiving our newsletter
Cookies 13 months from the date the cookie is placed on your computer

 

At the end of these periods, we may archive the data, in particular to comply with limitation periods for legal actions.

4.5 Cookie management

When you visit our website, we may, if you agree, place cookies on your computer via your browser. Cookies enable us, for the duration of their validity or storage period, to identify your computer on subsequent visits. Hast partners, service providers or third-party companies may also place cookies on your computer. Some cookies are essential for browsing our website, particularly for the proper completion of the ordering process; deleting them may cause difficulties when browsing our website.

5. How can you exercise your rights?

To enable you to control how we use your personal data, you have the following rights:

  • right to object to our processing of your personal data;
  • right to access the personal data we process;
  • right to rectify them;
  • right to erasure of your personal data;
  • right to data portability;
  • right to restriction of processing;
  • right to define instructions regarding the retention, erasure and disclosure of your personal data after your death.

You may exercise your rights:• through your customer account

• by email, enclosing a copy of any identity document: hello@hastparis.com

• by post, enclosing a copy of any identity document, addressed to HAST PARIS SAS Customer Service, 20, boulevard Poissonnière – 75009 Paris

You may also lodge a complaint with the French Data Protection Authority: www.cnil.fr

If you would like further details about these rights, please contact us at the addresses above.

We provide responses to your requests as soon as possible and, in any event, within one month of receiving them.