Overview

XSUIT EUROPE operates through the website www.xsuit.eu (hereinafter the “Site”). In this context, XSUIT EUROPE is required to collect and process a certain number of personal data concerning the users of the Site, its customers. 

XSUIT EUROPE attaches the greatest importance to the protection of the privacy and personal data of its interlocutors and to compliance with the regulations in force.

The processing of this data by XSUIT EUROPE as data controller is carried out in accordance with the procedures described below.

 

Data collected when creating an account or an order

XSUIT EUROPE may collect personal data on the Site when placing an order or creating an account.

XSUIT EUROPE may also be required to request proof of the user's identity or address and to process data related to the account, orders, means of payment used, type of arrangement selected and in general terms exchanges between XSUIT EUROPE and the client.

Payment data used on the Site is collected only by the payment provider depending on the payment method used by the customer and XSUIT EUROPE does not have access to it. Other information is provided on an optional basis by the user (for example, a date of birth, etc.). Failure to provide the data identified as mandatory, the user will not be able to place an order.

The processing of this personal data allows XSUIT EUROPE to provide information to the persons concerned, to manage its file of customers and prospects, to manage the orders and to monitor the relationship with the person concerned (the management of delivery, invoicing, payment or any requests and complaints), and where applicable, to meet its legal obligations.

The processing of this data also allows XSUIT EUROPE to carry out information and prospecting operations, such as sending information about its activities, products, and services, carrying out promotional operations, surveys or surveys, the publication of opinions, the establishment of statistical data or profiles on the basis of the page views or orders made in order to improve or personalize this information. This processing does not give rise to automated decision-making having legal or significant implications for the data subjects. Certain data may also be used for the purposes of combating fraud, which may give rise to the request for additional supporting documents, or for Site security purposes.

The processing is based on the execution of a contract or pre-contractual measures at the request of the data subject, the respect by XSUIT EUROPE of its legal obligations and on the legitimate interests of XSUIT EUROPE for the purposes of the exercise of its commercial activity, with respect for the rights and freedoms of the persons concerned.

To provide you with Alma and Klarna's payment options, we may need to provide Alma and Klarna with your personal data including your contact details and the details of your order, so that Alma and Klarna can assess whether you meet the conditions required to benefit from them and adapt them to your needs. Your transferred personal data will be treated in accordance with Alma and Klarna's privacy policy.

 

Data collected when subscribing to the newsletter

XSUIT EUROPE may collect personal data when the user subscribes to the newsletter. Otherwise, the user will not be able to receive e-mails with information on the activity, products, and services of XSUIT EUROPE.

The processing of this personal data allows XSUIT EUROPE to send information relating to its activities, products, and services and to manage its file of customers and prospects.

Processing is based on the user's consent.

 

Data collected through cookies and trackers

Additional data concerning the user may be collected through cookies and tracers used by XSUIT EUROPE under the conditions explained below.

 

How are Personal data processed?

Personal data is subject to computer processing by XSUIT EUROPE as data controller for the purposes set out above.

XSUIT EUROPE undertakes not to use them in any other context, nor to transmit them to third parties, apart from the cases provided for in this confidentiality policy or after information and, if necessary, consent, of the person concerned.

Personal data may be communicated, for the purposes set out above, by XSUIT EUROPE to its staff (the sales or marketing department) and to its subcontractors and service providers (such as its IT service providers for the management data, payment providers, logistics providers for delivery, marketing providers to produce commercial statistics). Some service providers may need to transfer customer data outside of the European Union.

XSUIT EUROPE strives to require its suppliers and service providers to comply with applicable regulations and, where applicable, that transfers outside the European Union be based on an adequate level of protection or sufficient guarantees.

XSUIT EUROPE may also be required to communicate the personal data processed to third parties in the context of compliance with a legal obligation, for example to respond to complaints related to information and content that could be in violation of the rights of third parties, at the request of a judicial or public authority, or in application of a judicial or administrative decision, or of an independent administrative authority.

Personal data is kept for the purposes set out above for the time necessary to achieve these purposes. Personal data is used for the purposes of managing the prospect-customer file for a period of three years from the last contact from the data subject.

These data are archived for the time necessary for XSUIT EUROPE to comply with its legal obligations and for the establishment, exercise or defense of legal claims, equivalent to the applicable limitation period (maximum period of ten years from the execution of the order).

 

What rights on the personal data communicated?

Anyone who has communicated personal data to XSUIT EUROPE has the following rights over them, in the cases provided for by the regulations in force:
- A right of access and rectification,
- A right to erasure of the data ("Right to be forgotten"),
- A right to limit processing,
- A right to oppose processing, in particular the right to oppose the use of data for prospecting purposes or the reception newsletter when collecting data or at any time thereafter,
- The right to portability of raw data provided to XSUIT EUROPE,
- The right to define directives relating to the fate of his personal data after its death,
- The right to lodge a complaint with the competent authority,
- The right to withdraw consent.

These rights can be exercised by e-mail to XSUIT EUROPE at contact@xsuit.eu.

These rights must be exercised under the conditions provided for by the regulations in force. A copy of the applicant's identity document or any document may be requested to prove his identity to XSUIT EUROPE.