PERSONAL DATA
Date of last update : 23/02/2022
SUMMARY :
- Definitions
- Who is the Controller ?
- Where do we collect your Personal Data ?
- What categories of Personal Data do we process?
- What Personal Data do we process and for what purposes?
- Will you receive commercial offers?
- Do we collect Personal Data from minors under the age of 16?
- Who are the recipients of your Personal Data?
- Is your Personal Data transferred outside the European Union?
- How long do we keep your Personal Data ?
- What security measures are applied to your Personal Data ?
- What are your rights regarding your Personal Data ?
- How can you exercise your rights regarding your Personal Data?
- How to contact our Data Protection Officer?
- Update of our Privacy Policy ?
1 - Definition :
What is a « Personal Data » ? | It is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, geolocation data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity. |
What is a « Personal Data Processing » ? | This is any operation or set of operations that may or may not be carried out by automated means on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction |
What is a « Controller » ? | It is the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of processing |
What is a « Processor » ? | It is the natural or legal person who processes personal data on behalf of the controller. |
What is a « Consent » ? | It is any free, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or a clear positive act, that personal data concerning him/her be processed |
2 - Who is the Controller ?
JACADI, a public limited company (SA) with a capital of 25,84,956 Euros, registered with the Paris Registry of Trade and Companies under number 441 875 473, whose registered office is at 32 rue de Guersant, 75017 PARIS.
Al Shamsi Holdings LLC, located in Emarat Atrium Building, office 217, Dubai, UAE
Both companies are joint Controllers (“the Joint Controllers”) they determine together the purposes and means of the processing operations defined below.
3 - Where do we collect your Personal Data ?
Your Personal Data may be collected through multiple channels, such as, our network of stores, our websites, our mobile applications, or by phone or social networks.
4 - What categories of Personal Data do we process?
The table below identifies the main categories of Personal Data that we may process about you :
| Personal Data categories | Description of the category |
|---|---|
| Customer Account Data | This is data that are required to create a customer account and data that you may choose to provide in order to have a personalized experience on our site. This data includes, but is not limited to: email address, first name, last name, mailing address, other addresses for delivery or billing (e.g. business mailing address), number of children, password, loyalty number, name associated with the loyalty card, relationship to the child, child's first and last name, child's gender, child's date of birth. |
| Purchase Data | This is data relating to purchases you make on the website or in one of our stores. This data includes: Customer Account data (see above), bank details, delivery address (if different from the account address), delivery point selected for delivery, store selected for delivery, items ordered, date of order, date of delivery, items returned, date of return request, date of receipt of returned item, refund information. |
| Reservation Data | This is the data provided in order to reserve an item in a store. This data includes: name, first name, e-mail address, phone number, store selected to pick up the item. |
| Fidelity Account Data | This is data associated with your loyalty account allowing you to benefit from advantages on our website and in our stores. It can for example be: name, first name, e-mail address and postal address of the holder of the loyalty account, purchases made, number of loyalty points, date of subscription to the loyalty account, and possibly the first name and date of birth of your children. |
| Prospecting Data | This is the data we use to send you messages about our brands. This data includes: name, first name, e-mail address, telephone number. |
| Contest Participation Data | This is the data that you provide to us to participate in the contests that we organize. This data includes: name, first name, e-mail address, answers to the contest. |
| Geolocation Data | This is data about your geographical position at a specific time. |
| Customer Experience Data | This is data that you provide to us as feedback on our products and services. |
5 - What Personal Data do we process and for what purposes?
Why do we collect your Personal Information? | What are the categories of data concerned by this processing? | What is the legal basis for processing your Personal Data? | |
To create and manage your customer account To personalize your customer experience on our site | Customer Account Data | Consent when you create your account without placing an order and for data that is not strictly necessary for the execution of the contract Execution of the sales contract | |
To manage, track and process your order on our site | Purchase Data | Execution of the sales contract | |
To make a reservation for an item in a store | Reservation Data | Execution of pre-contractual measures | |
Manage and track your fidelity program membership, offer you loyalty benefits | Fidelity Account Data | Consent | |
Manage your subscriptions and send you brand news electronically. Allow us to set up and send you electronically advertising adapted to your needs. | Prospection Data | Consent : In accordance with article L. 34-5 of the French Post and Electronic Communications Code, if the canvassing messages we send you concern products similar to those you have already purchased and if you have not objected to the sending of such messages. | |
| To geolocate you in order to indicate to you the store or the point relay nearest to your geographical position to withdraw the order or the article which you reserved | Geolocation Data | Consent | |
| To improve our products and our website based on your experience | Customer Experience Data | Legitimate interest of the data controller | |
Fight against Fraud | Customer Account Data, Fidelity Account Data, Purchase Data, Reservation Data, Prospection Data, Contest Participation Data | Legitimate interest of the data controller |
6 - Will you receive commercial offers?
We may use your Personal Data in the context of a commercial approach towards you, by e-mail and/or by SMS.
We respect the rules relating to the prior and express collection of the customer's consent for the sending of commercial prospecting.
When you create your account on the site, you are expressly asked to give your consent to receive promotional offers and news from us. Therefore, you will not receive any commercial prospecting if you have not consented to it.
More information on your rights in section n°12 "What are your rights on your Personal Data?”.
7 - Do we collect Personal Data from minors under the age of 16?
8 - Who are the recipients of your Personal Data?
| Internal recipient | Commercial Partners : “IDKIDS’ community” brand marks : Okaidi, Obaibi, Oxybul éveil et jeux, Idkids, Jacadi, N’Joy, Rigolo Comme La Vie, Bubblemag, Idtroc Internal Authorized Services : sales, communication, marketing, IT, human resources, innovation, action fund |
| External recipient | Authorized personnel of : Service Providers Subcontractors, within the framework of the following missions : management of the customer service, management of the online chat, processing and delivery of the order on the e-commerce site, routing of SMS and commercial emails, detection and prevention of fraud. The subcontractors act only on our behalf and on our instructions. |
9 - Are your Personal Data transferred outside the European Union?
10 - How long do we keep your Personal Data ?
Data’s categories | Data retention Period |
Customer Account Data Fidelity Account Data | From the activation of the Customer Account and 5 years in archive after the Customer Account is deleted |
Purchase Data Reservation Data | Banking Data : Period of the payment execution Other Purchase Data : 1 year in the active base and 4 years in archive |
| Prospection Data | 3 years from the last contact we had with you |
| Contest Participation Data | Period of the Contest and 1 year in active base, then 4 years in archive |
| Geolocation Data | 1 month after the Data’s registration |
11 - What security measures are applied to your Personal Data ?
12 - What are your rights regarding your Personal Data ?
| Right of Access | You have the right to access your Personal Data. A copy of your Personal Data would be sent to you. |
| Right to request the rectification | You have the right to request the rectification of your Personal Data, if these need an update. |
| Right to Object | You have the right to Object, anytime, to a process of your Personal Data, unless it is a legal obligation. |
| Right to erasure | You have the right to erase your Personal Data. |
| Right to consult | You have the right to consult your personal Data in a structured format, frequently used and readable by machine.You can require the transmission of your Personal Data directly to the Controller when it is technically possible. |
| Right of limitation | You can obtain the limitation of a process, Vous avez le droit d’obtenir la limitation du traitement, including when your Personal Data are not correct. |
| Right to make advance directives | You can communicate your directives concerning your Personal Data after your death. You just have to address your wishes. |
13 - How can you exercise your rights regarding your Personal Data?
You can exercise your rights :
• By mail, writing to : JACADI UAE Emarat Atrium Building, Office 217, Dubai, P.O. Box 40020, Dubai or/and JACADI, 32 rue Guersant, 75017 PARIS
• Online : support@jacadi.ae or CONTACT FORM
Please note, in the exercise of rights by applicants, our Customer service could check your identity by asking a valid identity card copy, if and only if there was reasonable doubt as to the identity of the applicant.
To facilitate the process of your request, it is easier to communicate your name, surname, email address and, if you have one, your fidelity account number.
The Joint Controllers commits to answer your request within a month from the date of the exercise of your right.
Moreover, to facilitate the access to your rights :
• Every newsletter sent by the company JACADI propose you an unsubscribe link, that let you in a click, to unsubscribe easily to the newsletters and actualities of the trademark or/and its Partners ones ;
• Every SMS sent by the company JACADI propose you a « STOP SMS » ;
• You can manage your preferences about the commercial prospection by logging your Customer Account, in « My newsletters et alerts » section.
Finally, we remind you that you have the possibility of seizing at any time the Commission Nationale Informatiques & Libertés (CNIL): https://www.cnil.fr/fr/agir
14 - How to contact our Data Protection Officer ?
The company JACADI has names a DPO, that you can contact anytime by :
• Mail at the address : JACADI 32 rue Guersant, 75017 PARIS,
• or by using the contact form by choosing the section (Personal Data Protection)
15. Update of our Personal Data policy
The Joint Controllers could have to amend her Personal Data Policy. This modification is specified on the top of the section by writing the last date of update.