Privacy Policy

ARTICLE 1: PREAMBLE

The purpose of this privacy policy is to inform users of the site:

• On how their personal data is collected. Personal data is considered to be any information that allows a user to be identified. As such, this may include: their first and last names, age, postal or email address, location or IP address (non-exhaustive list);
• On the rights they have regarding this data;
• On the person responsible for processing the personal data collected and processed;
• On the recipients of this personal data;
• About the site's cookie policy.

This policy supplements the legal notices and the General Conditions of Use available to users at the following address:

General conditions of use: https://obsidian-pleasure.com/pages/conditions-generales-dutilisation ; Legal notices: https://obsidian-pleasure.com/pages/mentions-legales ]

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of European Regulation 2016/679, personal data are:

• Processed lawfully, fairly and transparently with regard to the data subject;
• Collected for specific purposes (see Article 3.1 hereof), explicit and legitimate, and not further processed in a manner incompatible with these purposes;
• Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
• Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
• Kept in a form which permits identification of the persons concerned for no longer than is necessary for the purposes for which they are processed;
• Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing shall be lawful only if and to the extent that at least one of the following applies:

• The data subject has consented to the processing of his or her personal data for one or more specific purposes;
• The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• The processing is necessary for compliance with a legal obligation to which the controller is subject;
• The processing is necessary to protect the vital interests of the data subject or of another natural person;
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING BROWSING ON THE SITE

Article 3.1:

Data collected The personal data collected as part of our activity are as follows: [Last name, first name, email address, postal address]

The collection and processing of this data meets the following purpose(s):

[Specify the reason(s) why the collection of personal data is necessary in the context of your activity] example: contract management, customer area management, monitoring of service quality, sending newsletters, etc.

Article 3.2: Method of data collection

When you use our site, the following data is automatically collected: [List of data automatically collected during the user's simple visit to the site] Other personal data is collected when you perform the following operations on the platform: [List the personal data collected, and specify the purpose of the collection]

They are kept by the data controller under reasonable security conditions, for a period of: [Indicate the planned retention period] The company may keep certain personal data beyond the periods announced above in order to fulfill its legal or regulatory obligations.

Article 3.3: Data hosting

The site [website name] is hosted by: [Company name Head office address Contact (email address and/or telephone number)] [In the event that the personal data collected by the company is shared with third parties, insert a clause “Article 3.4: Transmission of data to third parties”:

“The data may be transmitted to our partners, listed below:”]

[If the site is concerned by the use of cookies, specify their use in an Article 3.5: Policy on “cookies”]

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1: The data controller

Personal data is collected by [company name or legal name], [legal form] with capital of [amount of share capital], whose registration number is [indicate your RCS number].

The person responsible for processing personal data can be contacted as follows:

By mail to the address:

[indicate the head office address];

By telephone, at [telephone number];

By email: [email of the data controller].

Article 4.2: The data protection officer

The data protection officer of the company or the controller is:

[Indicate the identity, address, telephone number and/or email address of the DPO]

If, after contacting us, you believe that your “Data Protection and Freedom of Information” rights have not been respected, you can send information to the CNIL.

ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Any user concerned by the processing of their personal data may exercise the following rights, in application of European regulation 2016/679 and the Data Protection Act (Law 78-17 of 6 January 1978):

 Right of access, rectification and right to erasure of data (set out respectively in articles 15, 16 and 17 of the GDPR);

 Right to data portability (Article 20 of the GDPR);

 Right to restriction (Article 18 GDPR) and to object to data processing (Article 21 GDPR);  Right not to be subject to a decision based exclusively on an automated process;

 Right to determine the fate of data after death;

 Right to lodge a complaint with the competent supervisory authority (Article 77 GDPR).

To exercise your rights, please send your letter to [Company name and address] or by email to [Insert the email address of the Data Protection Officer]

In order for the data controller to comply with his/her request, the user may be required to provide certain information such as: his/her first and last names, his/her email address and his/her account number, personal space number or subscriber number.

ARTICLE 6:  PRECAUTIONS FOR USE OF PRODUCTS

The products sold on this site must be used, between consenting adults, within the framework of the use as specified and with respect for anatomies and the human body.

They must be kept out of reach of minors. The so-called products
“Edible” cannot be consumed as food or ingested in large quantities.

ARTICLE 7:  AGE LIMIT

Some of the products on this site are of adult sexuality. Proof of identity may be required upon delivery to prove that the buyer is 18 years of age. If the buyer cannot prove this, the goods will not be delivered.

ARTICLE 8: CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY

The publisher of the site https://www.obsidian-pleasure.com reserves the right to modify this Policy at any time in order to ensure that users of the site comply with current law.

Any changes will not affect purchases previously made on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user when validating the purchase.

The user is invited to read this Policy each time he uses our services, without it being necessary to formally notify him.