The party responsible for the management of personal data is the micro-company Mo’s créations, designated by the brand name Lystale, registered in the RCS under n° 838 520 922 RM 93, and of which Mrs Morgane M. Marsan is the legal representative.

For any question relating to the collection and processing of your personal data, you can contact Lystale by e-mail at the following address : contact@lystale.com.

To create a customer account on the website, to subscribe to the newsletter, to buy online, to contact our customer service, or simply by browsing the website, Lystale collects your personal data, the details of which are detailed below. This gathering is done in an automatic or voluntary way depending on the purpose of the data gathering.

Data collected

Data relating to your identity :

• Name, first name, title ;
• Postal address, country, e-mail address ;
• Information necessary for the delivery and billing of an order ;
• Identifier and password to access the account area, the password is encrypted and is not, in any case, accessible or visible by Lystale ;
• Any other information that you bring to the attention of Lystale.

Data relating to the commercial relationship :

• History of orders placed on the website, including invoices issued with your identity on it ;
• Encrypted information relating to your payment methods ;
• Information relating to the use of social networks and your interactions with the Lystale brand ;
• Your participation in promotional offers, contests or other events ;
• Requests you make to Lystale’s customer service department, by email directly or through the contact form ;
• Your subscription to the Lystale newsletter.

Data relating to your navigation on the site :

• Cookies ;
• Consent to cookies ;
• IP address, date and time of connection and disconnection ;
• Browser, operating system, service provider, screen resolution ;
• Pages and links visited ;
• The items placed in the shopping cart ;
• The origin of the visit (Google search, social networks,…).

Exclusions :

Data relating to minors :

In principle, Lystale’s products and services are intended for persons of legal age, capable of entering into contractual obligations. Lystale does not collect data relating to age and has no way of knowing whether a user is a minor or not. Thus, it is the responsibility of the legal representative to give his consent to a minor user prior to the communication of personal data concerning them, if necessary, the legal representative has the possibility to oppose it by contacting Lystale at the following e-mail address : contact@lystale.com.

Sensitive data :

Lystale does not collect any so-called sensitive data about you. The following are considered sensitive data: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data relating to health or sexual orientation. If such information is in any way communicated to Lystale, it will be deleted.

Your data is collected in the following ways:

• Direct collection of data: when you create your Lystale account, when you fill in the creation form or when you place an order, when you subscribe to the newsletter, via the contact form on the Website ;
• During exchanges by e-mail or on social networks ;
• When you browse the website: your connection data will be both automatically collected by the website server and, with your consent, by cookies. 

Data relating to your identity are collected in order to :

• Create your Lystale account and allow you to buy on the site ;
• Deliver and invoice to you your orders ;
• To manage product returns and complaints ;
• To compile commercial statistics and improve the products and services we offer ;
• To send you personalised emails with your order information, payment, parcel tracking and to provide customer service ;
• To send you personalised e-mails with your first name if you have subscribed to the newsletter ;
• To carry out satisfaction surveys ;
• To comply with the law which requires you to be informed of any changes to the TCS, TCU, Privacy Policy and Cookie Policy ;
• Respect your rights to manage, modify or delete personal data ;
• Prevent and detect fraud.

Data relating to the commercial relationship are collected to :

• Invoice your orders and collect payment ;
• To be able to refund you ;
• Provide customer service and after-sales services ;
• To manage complaints and warranty claims ;
• Organise promotional offers, competitions or other events ;
• To designate one or more beneficiaries in promotional offers, competitions or other events ;
• To be able to improve the range of products and services offered by deducing what you and other customers like on social networks ;
• Prevent and detect fraud.

The data relating to navigation on the site are collected in order to :

• Facilitate and improve user navigation ;
• Measure the data necessary for the improvement of the site: language of the site, operating system, contents visited, navigation path, etc.) ;
• To measure the effectiveness of the measures implemented by Lystale ;
• To improve the methods used to present you with Lystale’s offer and products ;
• To recommend products to you, on the site directly or on social networks (depending on your agreement to the use of cookies) ;
• Send you an email with your abandoned shopping cart (depending on your consent to the use of cookies) ;
• Prevent and detect fraudulent access and determine the origin of a technical failure.

The processing of personal data by Lystale is justified on the following grounds :

• Contractual obligation : in order for you to be able to place an order, Lystale is required to process your personal data to fulfil that order. You will not be able to place an order without providing this information ;
• Consent : the processing of certain data can only be carried out by Lystale with your consent, which you can withdraw at any time. This is the case, for example, for cookies or the newsletter subscription. You will not be able to benefit from commercial offers or your navigation will not be personalised if you do not give your consent ;
• Legitimate interest : in the context of the development of the business or of the security of the business, Lystale may need to process personal data (to recommend products or to secure the website for example) ;
• The respect of the laws and regulations in force in France and in the European Union.

The RGPD recognises that for a given process, personal data undergoes successive phases of retention :

• Active storage: this is the time required to achieve the purpose for which the data was collected ;
• Intermediate archiving: data are no longer used to achieve the set objective, but are still of administrative interest to the organisation ;
• Final archiving: because of their “value” and interest, some data are permanently archived.

Thus, within Lystale, your data are preserved in the following manner :
Data relating to identity are kept :

• Until the end of the activity ( final archiving after 2 years) if you have placed an order ;
• Until you delete your Lystale account or 3 years if you have never placed an order, but created a Lystale account and it is inactive. You will be informed by e-mail of the deletion of your account ;
• Until you unsubscribe from the newsletter or 2 years after opening the last e-mail.

Data relating to the commercial relationship are kept :

• Until the end of the activity (final archiving after 2 years) ;
• Until you unsubscribe from the newsletter or 2 years after opening the last e-mail.

The data relating to navigation, collected by cookies, are conserved according to your choice. You can revisit that length of time by clicking on the cookie icon.

Lystale is the main recipient of the personal data that you may be led to transmit. However, in order to fulfil orders, personalise offers and improve navigation, Lystale may transmit your data (only the necessary data are transmitted) to trusted third parties :

• Subcontractors providing services for Lystale, such as :
  • • Shipping of orders ;
    • Securing online payments and fighting against fraud ;
    • Customisation of site content ;
    • Carrying out maintenance and technical development operations ;
    • Provision of analytical or audience measurement solutions.
• Social networking platforms : The use of social networks to interact with the Lystale.com website is likely to result in data exchanges between Lystale and these social networks. Lystale invites you to consult the personal data management policies of the various social networks to learn more about the collection and processing that these companies apply.
• Law enforcement, judicial or administrative authorities. When Lystale is legally required to do so or in order to protect the rights, property and safety of Lystale and its customers.

For transparency purposes, Lystale works with the following companies that may process your personal data. This list is not exhaustive and may be modified at any time :

• Transport companies ;
• O2Switch ;
• Stripe Payments UK Ltd ;
• Mailerlite ;
• Paypal ;
• Meta.

Your personal data will under no circumstances be sold.

Lystale keeps your personal data within the European Union. However, it is possible that data collected during the use of the Lystale.com website or in the course of the business relationship may be transferred to subcontractors or partners located in other countries. In the event of such a transfer, Lystale ensures that the data processing is carried out in accordance with this privacy policy, and that it is governed by the European Commission’s standard contractual clauses which ensure an adequate level of privacy protection.

In accordance with the regulations, Lystale implements appropriate technical and organisational measures to preserve the security and confidentiality of your personal data and prevent them from being distorted, damaged or accessed by unauthorised third parties, in particular :

• Securing access to premises and IT platforms ;
• Implementing a general IT security policy for the company ;
• Raising awareness of confidentiality requirements among Lystale staff ;
• Technical monitoring to detect potential vulnerabilities and attacks ;
• Securing data access and transfer.

The regulation on the protection of personal data recognises the possibility for people whose data is collected to exert certain rights :

• Right of access and information: you have the right to request information about the personal data held by Lystale. You have the right to be informed about the way your personal data is processed ;
• Right to portability: you have the right to obtain a copy of your personal data in a structured, commonly used and secure format ;
• Right of rectification: you have the right to request the rectification of your personal data in case of inaccuracies, or lack thereof. You can modify this data on your account on Lystale.com or via the contact form ;
• Right of deletion: you have the right to delete any personal data processed by Lystale at any time, except for legal or legitimate reasons such as a pending claim or an order being prepared ;
• Right of restriction: in certain cases, you have the right to obtain the restriction of the processing of personal data ;
• You have the right to set out instructions on what to do with your personal data post-mortem.

To use these rights, you can :

• Access your account and modify or delete your personal information ;
• Unsubscribe from the newsletter at any time by clicking on the “unsubscribe” link at the bottom of each e-mail ;
• Withdraw your consent to the use of cookies by clicking on the link at the bottom of the page : [wt_cli_manage_consent].

If these solutions are not sufficient, you must send an e-mail to contact@lystale.com, indicating your name, first name and e-mail address. Lystale may ask you to provide additional information to confirm your identity in order to respond to your request. Lystale will endeavour to respond to your request within a maximum of one month following receipt of your request.

In the event of an unsatisfactory response, you may submit a complaint to the Commission Nationale de l’Informatique et Libertés (CNIL) : https://www.cnil.fr/en/contact-cnil

This Privacy Policy is supported by a specific French and European legal basis, if Lystale has to modify this Policy to reflect changes in regulations, you will be informed.

The French version of this Privacy Policy can be consulted here.

If you have any questions about the collection and processing of your personal data, you can contact Lystale on the contact page or by e-mail at the following address: contact@lystale.com