Privacy policy

ARTICLE 1 – PERSONAL INFORMATION COLLECTED

Data controller: The data collected on this website is processed by OPALYS LLC - 30 N Gould St Ste N, Sheridan, WY, 82801-6317, US – info@bentivana.com

When you make a purchase from our store, as part of our buying and selling process, we collect the personal information you provide to us, such as your name, address and email address.

When you browse our store, we also automatically receive your computer's Internet protocol address (IP address), which allows us to obtain further details about the browser and operating system you use.

Email marketing (where applicable): With your permission, we may send you emails about our store, new products and other updates.

ARTICLE 2 – CONSENT

How do you obtain my consent?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange a delivery or return a purchase, we assume that you consent to our collecting your information and using it for that specific purpose only.

If we ask you to provide personal information for another reason, such as marketing, we will either ask you directly for your express consent or give you the opportunity to decline.

How do I withdraw my consent?

If, after giving us your consent, you change your mind and no longer consent to our contacting you, collecting your information or disclosing it, you can notify us by contacting us at info@bentivana.com. Alternatively, as French Law No. 2014-344 of 17 March 2014 on consumer affairs allows anyone to refuse telephone marketing by a professional with whom they have no ongoing contractual relationship, you can apply to register on the telephone marketing opt-out list directly on the government's Bloctel website.

ARTICLE 3 – DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our General Terms and Conditions of Sale and Use.

ARTICLE 4 – SHOPIFY

Our store is hosted by Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our services and products to you.

Your data is stored in Shopify's data storage system and databases, and in Shopify's general application. Your data is stored on a secure server protected by a firewall.

Payment:

If you complete your purchase through a direct payment gateway, Shopify will store your credit card information. This information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Information relating to your purchase transaction is retained for as long as necessary to complete your order. Once your order has been completed, the purchase transaction information is deleted.

All direct payment gateways comply with PCI-DSS, managed by the PCI Security Standards Council, which is the result of the joint efforts of companies such as Visa, MasterCard and American Express.

PCI-DSS requirements help ensure the secure handling of credit card data by our store and its service providers.

ARTICLE 5 – THIRD-PARTY SERVICES

In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies concerning the information we are required to provide to them for your purchase transactions.

For these providers, we recommend that you read their privacy policies carefully so that you can understand how they will handle your personal information.

Please remember that certain providers may be located, or have facilities located, in a jurisdiction different from yours or ours. Therefore, if you choose to proceed with a transaction that requires the services of a third-party provider, your information may be subject to the laws of the jurisdiction in which that provider or its facilities are located.

Some of our providers (payment, hosting and transport) may process your data. They have their own privacy policies. Where data is transferred outside the European Union, the transfer is governed by the safeguards provided for by the GDPR (European Commission standard contractual clauses or an equivalent mechanism). We invite you to consult these providers' privacy policies.

Once you leave our store's website or are redirected to a third party's website or application, you are no longer governed by this Privacy Policy or our website's General Terms and Conditions of Sale and Use.

You may leave our website by clicking certain links on our website. We assume no responsibility for the privacy practices of these other websites and recommend that you read their privacy policies carefully.

ARTICLE 6 – SECURITY

To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, it will be encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally recognised industry standards.

COOKIES

Here is a list of the cookies we use. We have listed them here so that you can choose whether or not to allow them.

_session_id, unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.).

_shopify_visit, no data retained, persists for 30 minutes from the last visit. Used by our website provider's internal statistics tracking system to record the number of visits.

_shopify_uniq, no data retained, expires at midnight (according to the visitor's location) the following day. Calculates the number of visits to a store per unique customer.

cart, unique identifier, persists for 2 weeks, stores information about your shopping basket.

_secure_session_id, unique session identifier

storefront_digest, unique identifier, undefined if the store has a password, is used to determine whether the current visitor has access.

ARTICLE 7 – AGE OF CONSENT

By using this website, you declare that you are of legal age (18 years old) in your country of residence, or that you have obtained the consent of a legal representative to use it.

ARTICLE 8 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their publication on the website. If we make changes to the content of this policy, we will notify you here that it has been updated, so that you know what information we collect, how we use it and under what circumstances we disclose it, where applicable.

If our store is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.

GDPR

Customers' personal data (address and order details) will be passed on to the partners responsible for delivering the products.

To modify, view or delete your data, send us a request at the email address info@bentivana.com. 

Legal basis for processing

We process your personal data on the following legal bases:

  • Performance of the contract: processing your order, delivery, handling returns and after-sales service.
  • Compliance with a legal obligation: retaining invoices and accounting and tax obligations.
  • Your consent: sending marketing communications (newsletter) and placing non-essential cookies.
  • Our legitimate interest: securing the website, preventing fraud and improving our services.

Retention periods

Your data is retained only for as long as necessary for the purposes described:

  • Order and billing data: 10 years from the transaction (accounting obligation).
  • Customer account data: throughout the business relationship, then for 3 years after the last contact.
  • Prospecting / newsletter data: 3 years from the last contact or until you unsubscribe.
  • Cookies: a maximum of 13 months from the time they are placed.

Your GDPR rights

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights over your data:

  • Right of access: obtain a copy of the data we hold about you.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”): request deletion of your data.
  • Right to restriction of processing.
  • Right to object, particularly to direct marketing.
  • Right to portability: retrieve your data in a structured and readable format.
  • Right to withdraw your consent at any time, without affecting processing already carried out.

How to exercise your rights

To exercise these rights, contact us by email at info@bentivana.com. We undertake to respond within one month of receiving your request. You also have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe that your rights are not being respected.

Third-party recipients of your data

Your data is never sold. It may only be passed on to our partners strictly necessary for the fulfilment of your order:

  • Our transport and logistics providers, to ensure delivery of your parcels.
  • Our payment provider (Shopify Payments / Shop Pay and associated services), for the secure processing of transactions.
  • Our hosting provider (Shopify Inc.), which hosts the website and data.
    These partners use your data only for the intended purposes and are bound by confidentiality and security obligations.

QUESTIONS AND CONTACT DETAILS

If you would like to access, correct, amend or delete any personal information we hold about you, lodge a complaint, or simply obtain more information, contact our privacy compliance officer at info@bentivana.com.