Privacy Policy and Cookies Charter

This website provides information on the activities, services, and products offered for sale by Publicis Drugstore in shop or online on the site. It also allows you to create a customer account and purchase products online directly from the site. This Privacy Policy explains how we use and protect the information we collect through this website.

This Privacy Policy ("the Policy") and the Cookie Policy ("the Charter") are intended to provide you with information about how Publicis Drugstore, operated by DRUGSTORE CHAMPS ELYSEES, uses and protects your personal information ("Personal Information") collected through the https://www.publicisdrugstore.com/fr/ website ("the Site").

If you have any questions about the way in which your Personal Data is collected, we invite you to contact the DRUGSTORE CHAMPS ELYSEES Data Protection Officer at the following address: privacyofficer@publicisgroupe.com.

The Personal Data collected by the Site will only be used to enable us to respond to your requests and to analyse the traffic on the Site. Once collected, Personal Data will not be used for any other incompatible purposes without your consent.

DRUGSTORE CHAMPS ELYSEES, 133 Avenue des Champs Elysées - 75008 Paris, registered in the Paris Trade and Companies Register under number B 391 517 323 is considered to be the data controller of this Site.

We take the protection of Personal Data very seriously. All Personal Information collected by the Site will be treated as strictly confidential and will only be used in the manner described in this Policy and in accordance with applicable laws.

Therefore, please read this Policy carefully. If you do not agree with the way your Personal Information will be used, please do not use this Site or provide your Personal Information through this Site.

We may include links on the Site to other websites, including social networking platforms. This Policy only addresses how we use Personal Information and does not cover those other websites. We encourage you to read the privacy statements available on the other websites you visit.

I. Purpose(s) of the processing of Personal Data

The purposes of the collection of Personal Data by the Site are the following:

- To respond quickly and efficiently to your requests sent to us via the Site's contact form and / To respond quickly and efficiently to your requests via contact.econceptstore@publicisdrugstore.com;

- To manage your job applications and, where appropriate, build up a pool of candidates;

- To provide the services you request from us;

- To create a customer account and allow you to administer that account;

- To process and track orders placed through the Site

- Process payments, manage billing and accounting;

- Maintain an up-to-date database of our current and potential customers and, depending on your choices, send you prospecting messages;

- To establish statistics on the use of the Site, in order to improve its operation and services;

- To respond to your requests on social networks, and to get to know you better;

- To maintain and protect the security of the Site, however, please note that we use Statistical Data to the extent possible;

- To enable your access to the Site and its features, and/or to provide you with the services you request from us through the use of cookies and other tracking devices;

- To process and respond to your request to exercise your rights listed in Article V hereof.

In addition, depending on the choices you make on our Site, your Personal Data may be used to send you commercial prospecting messages and to enable you to manage your subscription or unsubscription to this type of communication.

Indeed, people who voluntarily subscribe to our mailing list ("Newsletter") regularly receive news, offers and content relating to Publicis Drugstore.

In addition, persons who tick the boxes provided for this purpose in the various forms on the Site will receive commercial prospecting messages (newsletter, product and service offers, advertisements) from DRUGSTORE CHAMPS ELYSEES and possibly from its partners.

Here is the updated list of partners who will receive your Personal Data if you tick the box provided for this purpose:

- Brand directory

- Publicis Group agencies

If you no longer wish to receive commercial prospecting from DRUGSTORE CHAMPS ELYSEES and its partners, you may at any time :

  • Unsubscribe by clicking on the link in each message you receive;
  • Unsubscribe by logging into your customer account and unchecking the boxes provided for this purpose;
  • Use the link dedicated to the exercise of your rights in section V below.

You also have the option of having your telephone details entered on the Bloctel opposition list managed by Opposetel. Bloctel is the list of opposition to telephone canvassing on which any consumer can register free of charge in order to no longer be canvassed by telephone by a professional with whom they do not have a current contractual relationship. You can find all the information on how to register on this list via the following link: https://conso.bloctel.fr/.

II. What Personal Data do we collect and process?

By Personal Data, we mean any information relating to an identified or identifiable natural person (i.e. any living person).

We collect the following Personal Data through the Site:

1. Your personal information

We collect certain personal information such as your first name, last name, and email address, your postal delivery address and if different from your billing address, your mobile phone number and your date of birth.

2. The content of messages and/or requests you send to us, including, where applicable, information relating to your professional and educational background if you are applying for a job.

3. Payment information and bank details

4. Information about whether you subscribe to our newsletters

5. Navigational Information

In addition, we collect, through cookies and other tracers, limited Personal Data related to your use of the website, namely your IP address, the type of browser used, the operating system, the websites you visit before and after our website. For more information on this subject, please refer to the Cookies, Social Networks and other tracking technologies and social network plug-ins policy below.

6. When you browse the Site, information related to your browsing and the use of the Site's pages, as described in the Cookie Policy below, may be collected.

III. On what legal basis(s) do we rely?

The processing of Personal Data collected on the sSite is based on :

- the execution of pre-contractual measures, when we process your messages sent by email or via the form present on the Site when this request has a commercial scope (requests relating to our products, our services or our offers);

- the performance of the contract, where we use your data to provide you with the service, process and track orders, process payments, or where we include your data in our customer databases;

- our legal obligation: where we use your data for billing and accounting purposes

- our legitimate interests when we process your job applications and keep your CV and covering letter received in this context in our CV library, in order to be able to identify in the future a position that might be suitable for you;

- our legitimate interests, where we process your data for the purposes of maintaining and implementing measures to safeguard the security of the Site;

- our legitimate interests, where we (i) process data collected via social networks in order to get to know our subscribers better and to understand the public's reaction to our products and services, (ii) carry out social listening to identify and assess what is being said publicly about us on social networks in order to understand industry trends and market sentiment;

- the execution of contractual measures, when we deposit functional and/or technical cookies;

- your consent, when we carry out statistics on the frequentation of our Site by means of the data collected thanks to cookies;

- your consent, when we send you commercial prospecting messages (newsletters, product and service offers, advertisements) and when we send your details to our partners so that they can also send you commercial prospecting messages;

- our legal obligation, when we process your requests related to the exercise of your rights listed in Article V hereof.

You may send us a request to obtain further information on the checks we have carried out to ensure that we were able to process your Personal Data on the basis of legitimate interest. The fields marked with an asterisk on the forms collecting your Personal Data are mandatory for us to process and respond to your request. If you do not provide this Data, DRUGSTORE CHAMPS ELYSEES will not be able to process and respond to your request.

IV. With whom do we share your Personal Information?

When justified, your Personal Data may be shared within the entities of the Publicis group and its subsidiaries in France and throughout the world.

In the event that you wish to exercise your rights listed in Article V hereof, the collection of your request will be carried out by means of the form provided by our partner TrustArc, acting on our instructions and on our behalf as a subcontractor within the meaning of European Regulation 2016/679 on the protection of personal data ("RGPD"). As soon as your request has been validly transmitted to Publicis Group, TrustArc will immediately delete it from its servers and other IT tools.

Your Personal Data will not be passed on to third parties unless otherwise stated in this Policy.

Your Personal Information may be transferred:

- in connection with a merger, acquisition or sale of all or part of the assets of the agency, to the successors in title to our business, or

- to establish, exercise or defend our rights, or

- where required by law, to respond to requests from legal or administrative agencies, governmental authorities or courts.

If the services of third parties are required for the technical maintenance of the Site or our software processing your Personal Data, for hosting, backup, administration or processing of the Data and/or our emails, such third parties will only have access to Personal Data to the extent necessary to ensure the smooth and/or secure technical processing of the Site and our software. In all cases, such access to your Personal Data will only be in accordance with applicable law, including with respect to Data confidentiality, privacy, and security obligations.

V. Your rights regarding your Personal Data

In accordance with applicable regulations, you may exercise the following rights with respect to the Personal Data we hold about you:

Right to information:

You have the right to obtain clear, transparent, understandable and easily accessible information about how we use your Personal Data and about your rights. This is why we provide you with the information in this Policy.


Right of access to your Personal Data:

You can access all the Personal Data we hold about you, know the origin of that Personal Data and obtain a copy of it in an understandable format.

You may also exercise your right of access to your Personal Data to check the accuracy of the data and have it corrected or deleted. You have no reason to exercise your right of access;


Right to rectify your Personal Data:

In order to prevent inaccurate or incomplete Personal Data about you from being processed or disseminated, you can ask us to rectify it;

Right to have your Personal Data deleted:

You may request the deletion or removal of Personal Data held by us. This is not an absolute right as we may be required to retain your Personal Data for legal or legitimate reasons. You may, for example, exercise your right to deletion in the following circumstances:

if you have withdrawn your consent to processing (see below);
if you have validly objected to the processing of your data (see below);
when the data is not or no longer necessary for the purposes for which it was originally collected or processed;
The data is processed unlawfully (e.g. publication of pirated data);


Right to object to the processing of your Personal Data:

Where we process your Personal Data on the basis of our legitimate interests (to determine what processing is involved, you may refer to Section III of this Policy), you may at any time object to the processing of your Personal Data on grounds relating to your particular circumstances. We may, however, on a case-by-case basis, refuse to comply with such a request on the grounds that there are compelling legitimate reasons for processing such data which override your interests, rights and freedoms, or where such data is necessary for the establishment, exercise or defence of legal claims;

Right to limit the processing of your Personal Data:

The right to restriction complements the other rights you have. This right means that the processing of your data by us is limited, so that we may retain the data, but we may not use it or process it in any other way. This right applies in specific circumstances, namely

if you dispute the accuracy of your Personal Data. Processing is then restricted for a period of time to allow the agency to verify the accuracy of the Personal Data;
in cases where the processing is unlawful and you object to the deletion of your Personal Data and demand instead the limitation of their use;
in cases where we no longer need the Personal Data for the purposes mentioned above in Section I, but it is still necessary for you to establish, exercise or defend legal claims; and
in cases where you have objected to the processing on the basis of the legitimate interests pursued by the agency, you may request that the processing be restricted for the period necessary to determine whether we can comply with your objection (i.e. the period necessary to verify whether or not the legitimate interests pursued by the agency prevail over yours).

Right to portability of your Personal Data:

You may request to retrieve the Personal Data you have provided to us, in a structured, commonly used and machine-readable format, for personal use or for transmission to a third party of your choice.

This right applies only to Personal Data that you have provided to us directly or indirectly and that has been processed using automated processes, where the processing is based on your consent or the performance of a contract. Please refer to the list of legal bases for our processing of Personal Data (set out in section III of this Policy) to see whether our processing is based on the performance of a contract or on consent;
The right to withdraw your consent at any time to the processing of Data carried out on the basis of that consent.

You may consult section III of this Policy to identify the purposes for which the processing of your Personal Data is based on your consent;


Right to give instructions on what to do with your Data after your death.

You may set out instructions regarding the retention, deletion and disclosure of your Personal Data after your death. These instructions may be general, i.e., concerning all of your Personal Information, or specific, i.e., concerning only certain processing operations.

We invite you to click on the following link: TrustArc and follow the instructions there, if you wish to exercise any of the above rights.

If we have reasonable doubts about your identity, we may ask you to attach any document that proves your identity, in order to avoid identity theft.

If your request is received electronically, we will respond electronically unless you specify in the comments area of the exercise form that you wish to receive a response by another means, for example by post.

We will reply as soon as possible and in any event within one month of receiving your request. This period may be extended by two months to take account of the complexity of the request or the number of requests received. In such a case, we will inform you no later than one month after receiving your request, giving the reasons for the extension of the deadline.

If you feel that we are not complying with this Policy, if you are not satisfied with the way we have handled your request or if your request has been refused, you may also lodge a formal complaint with your competent authority for the protection of Personal Data (in France this is the Commission Nationale de l'Informatique et des Libertés (CNIL): https://www.cnil.fr). However, we invite you to contact our Data Protection Officer at the following address: privacyofficer@publicisgroupe.com before filing a complaint with the competent Data Protection Authority.

VI. Retention Periods

We retain your Personal Data in accordance with applicable legal requirements for data retention and our internal policies. Data retention will vary depending on the type of data and the purposes of processing.

Your Data is retained for the duration of our contractual and/or pre-contractual relationship. After this period, your Data will be archived for the duration of the applicable statute of limitations which, in France, is 5 years after the end of our relationship and/or our last contact with you.

The Personal Data collected for commercial prospecting purposes are kept for a period of three (3) years from the last contact with DRUGSTORE CHAMPS ELYSEES.

The Personal Data collected in the context of your application for a position is kept for a period of :

for a period not exceeding 2 (two) years after our last contact if your application has not been retained, unless you indicate that you do not wish us to keep your application at the end of the recruitment process; in which case your Personal Data will be deleted immediately;
for the duration of your presence at DRUGSTORE CHAMPS ELYSEES if your application is successful.

VII. Data Security

We use a variety of methods, such as firewalls, intrusion detection software and manual security procedures, to protect your data from loss or damage, to help protect the accuracy and security of Personal Data and to prevent unauthorised access or misuse. If you believe that the Site or any Personal Data is not secure or that there has been unauthorised access to the Site or your Personal Data, please contact privacyofficer@publicisgroupe.com immediately.

VIII. Transfer of Data

Due to the international nature of our business, your Personal Information is transferred outside the European Union.

Your collected Personal Data is transferred to the United States for the purpose of backing up our emails. In this case, your data is stored securely on servers belonging to the Publicis group.

As this country is not considered by the European Commission to offer an adequate level of protection, we ensure that all data transfers comply with the applicable legal requirements by signing, in accordance with Article 46 of the GDPR, standard data protection clauses adopted by the European Commission, with our co-contractors.

If you would like to know more about how the Data is protected or if you would like to request a copy of the relevant safeguards please email privacyofficer@publicisgroupe.com.

IX. Notification of changes

This Policy may be modified by DRUGSTORE CHAMPS ELYSEES in accordance with the evolution of the functionalities of the Site, the Services offered and the laws applicable to the activities of DRUGSTORE CHAMPS ELYSEES. These modifications and updates are binding on the user, who must therefore regularly refer to this section and check the Personal Data Protection Policy in force.

If you wish to save this text, please type in the entire statement with your mouse and copy and paste it by pressing the ctrl-c key.

X. Additional information

For more information about Publicis Drugstore, please visit our website: https://www.publicisdrugstore.com/fr/.

If you feel that we are not abiding by this privacy policy, or if you have any questions about it, please contact privacyofficer@publicisgroupe.com.

Charter for cookies, social networks, other tracking technologies and social network plug-ins

The Publicis Drugstore website ("the Site") is published by DRUGSTORE CHAMPS ELYSEES, 133 Avenue des Champs Elysées - 75008 Paris, registered in the Paris Trade and Companies Register under number B 391 517 323.

The purpose of this Charter is to provide you with information concerning the deposit and use of cookies, social networks and other tracking technologies and social network plug-ins during your browsing on our Site, as well as the means available to you to oppose them.

We may update our Privacy Policy at any time, and such changes will be effective immediately. We invite you to refer to it regularly in order to take note of the latest version available.

By clicking on the "I accept" button on the Cookies banner, you agree to the use of Cookies on your browser. You can reverse this decision at any time using the "Set Cookies" consent management module located at the bottom of the Site.

If you follow us on social networks (through our LinkedIn, Facebook, LinkedIn, Twitter or Instagram accounts), we will also collect personal data about you in order to get to know our subscribers better and to understand public reaction to our products and services. We may use this information to contact you / send you marketing information that we think may be of interest to you / conduct social listening to identify and evaluate what is being said publicly about us in order to understand industry trends and market sentiment. The use of Personal Data referred to above is only carried out in accordance with applicable laws (for example, if you request us to contact you or if your specific express consent is required).

You will find on our Site social network plug-ins ("social network buttons") to allow you to quickly access our pages on social networks. When you click on these buttons, your Personal Data may be disclosed to these platforms. When you click on these buttons, a new page will appear on the relevant social network platform. If you are already logged into your account on that platform, you will probably be automatically logged into your account via this pop-up page, so you will not have to log in again. If, however, you are not logged in (or if you are not registered on the social network platform), the page will ask you for your information.

We have no control over how social networking platforms use your Personal Information. We encourage you to read the privacy statements of the various social networking platforms you use.

To learn more about how these social networking platforms use your Personal Information:

I. What is a Cookie?

A "Cookie" or "tracer" is a small text file that is saved in your browser's memory on your hard drive when you visit a Website, read an e-mail, or install or use a software or mobile application, and which allows us to record and track data about your use of the Website.

This data does not identify you directly, but it may relate to your preferences or device. It is mainly used to ensure the proper functioning of the Website and to enable us to compile statistics and measurements of the Website's traffic.

This data does not generally identify you directly, but it may provide you with a more personalized web experience.

II. Who deposits Cookies?

Some of the cookies on our site may be set by the following partners:

Google LLC
Link to Privacy Policy

Prestashop
Link to Privacy Policy

Facebook
Link to Privacy Policy

Twitter
Link to Privacy Policy

Instagram
Link to Privacy Policy

III. Which Cookies are used?

Cookies strictly necessary for the functioning of the Site: These Cookies are essential for your navigation on the Website and for its proper functioning. They allow you to use the features of the Website and the services you have requested on the Website. For example, these Cookies help us to remember your screen resolution and preferred language. Cookies used :
- Cookie_ue

- gsScrollPos

- Prestashop cookie

- OptanonAlertBoxClosed

- OptanonConsent

Audience measurement cookies: These traffic log cookies are used to identify page views and measure and track the performance of our Site. This helps us to analyse web page traffic data and to improve our Site to suit your needs. We only use this information for statistical analysis purposes.
Cookies used:

- Prestashop

- Google Analytics

Advertising and targeting cookies: These cookies are primarily used to tailor advertisements on or about our Site to your personal interests. This may result in our products and services being offered to you when you visit other websites. For example, these cookies may remember which websites you visit and may collect some of your Personal Information, such as your IP address. The information collected may be shared with third parties
Cookies used:

- Google Adwords

Different retention periods apply to the different types of Cookies placed depending on whether they are Session Cookies (i.e. a Cookie temporarily placed on your device that appears when you access the Website and disappears when you close your web browser window) or Permanent Cookies (i.e. a Cookie that will remain on your device for a certain period of time to allow us to remember your preferences on your next visits)

In any case, Cookies will never be kept on your device for more than 6 to 13 months, depending on the purpose of the Cookies concerned.

IV. How do I manage cookies?

You can choose to accept or refuse all or part of the cookies.

On your first visit, by clicking on the link "fill in the wording you have chosenSet your Cookies" on the Cookie banner, you will be able to set your preferences according to the type of Cookies. You can change your cookie preferences at any time by clicking on "Set Cookies" in the footer of the Site.

We may change this policy from time to time. When necessary or required, we will inform you and/or ask for your consent. We therefore invite you to consult it each time you visit the site in order to take note of its latest version.

Date of the update: 01/04/2021