Privacy Policy

PRIVACY POLICY

L'EXCEPTION, a simplified joint-stock company with its registered office in La Caserne, 12 rue Philippe de Girard, 75010 Paris, registered with the Paris Trade Register under number 534 017 280 is responsible for the processing of personal information collected on the website www.lexception.com or in the shop L'Exception located at 12 rue Philippe de Girard, 75010 PARIS. 

The company L'Exception attaches the utmost importance to the protection of your personal data. The purpose of this document is to inform you as clearly as possible about the nature of the data collected, as well as the reasons why it is collected. 

The purpose of this Privacy Policy is to help you understand how your personal data is collected, processed and stored by L'EXCEPTION via the website.

The EXCEPTION understands that the protection of data and privacy is an issue for all users visiting the Site.

The EXCEPTION undertakes, in accordance with the GDPR regulations, to respect your privacy and to protect your personal data, that is to say that may directly or indirectly identify you as a person.

The purpose of this Privacy Policy is to provide you with the EXCEPTION’s privacy commitments.

When you use our site, we may ask you to provide us with personal data about you.

The term "personal data" refers to all data that make it possible to identify an individual, which corresponds in particular to your surname, given names, postal and e-mail addresses, telephone numbers, date of birth, data relating to your transactions on the Site, details of your purchases, bank card numbers, IP address, as well as any other information that you choose to communicate to us about you.

Additional information related to your style preferences or measurement details can also be collected from users of our personal shopping service La Boîte by L'Exception.

The purpose of this policy (hereinafter the “Policy”) is to inform you about the means we use to collect your personal data, in the strictest respect of your rights.

In this regard, we would like to inform you that, in the collection and management of your personal data, we comply with Law No. 78-17 of 6 January 1978 on Data Processing, Data Protection and Civil Liberties, in its current version (hereinafter: the "French Data Protection Act"), as well as Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter: the "GDPR").

1. TYPE OF INFORMATION

WE COLLECT ONLY THE INFORMATION NECESSARY TO CARRY OUT OUR ECOMMERCE AND RETAIL ACTIVITIES IN CLOTHING, FOOTWEAR, ACCESSORIES.

   As part of this activity, we are required to collect the following personal information online or in-store:
- Contact information: last name, first name, email address, sex, telephone, date of birth, language, preferred currency, country of navigation, IP address
— Delivery or billing information: personal address (surname/first name, street, postal code, city, country, delivery comments)
— Optin information in our newsletter / SMS: optin date, IP address
— Technical information: technical logs, IP address
— Order history Exception. — History of your products viewed at L'Exception
— Transactional information: data relating to transactions carried out on the site (type of payment, internal transaction number, type of card used, last 4 numbers of the card, expiry date). Payment is managed by a specialized service provider Hipay/ Ogone/ Alma/ PLEDG/ Paypal/ Amazon/ LUNU depending on the type of payment: the full number of your credit card as well as the security code are not accessible to us.
— Data related to your purchasing habits: loyalty points, order date, purchase frequency, average shopping cart, type of product purchased, etc…— History of your relations with our services: telephone calls, emails exchanged with customer service.
— Google or Facebook ID if you are using the Google or Facebook connection to log into your customer account.
— Information about your morphology: height, weight, type of silhouette. This optional information is collected only if you make a request for our La Boîte service by L'Exception.
 This information is provided voluntarily by filling in the fields marked as non-mandatory. 
 Account creation requires the creation of a password. This password is encrypted and is only known to you. Under no circumstances is the Exception team able to know your password. If you forget your password, a new password will be randomly generated and sent to your contact email.

   2. DATA SECURITY The data you entrust to us is protected with the utmost care. We use the services of the OVH hosting company, which has the highest security standards to protect our databases. The data is hosted in France.

We use Secure Sockets Layer (SSL) technology to ensure the secure transmission of information over the internet. We also use authentication procedures for users who have access to our systems. Access to personal information is limited to L'Exception personnel and authorised subcontractors, who need access to this data for the performance of their tasks.

   3.FINALITY OF PERSONAL DATA COLLECTED

We collect your personal information for the following reasons: - to be

able to provide a personalized navigation on the site www.lexception.com: proposal of related products according to sex, history of the last products seen, personalized recommendations

— be able to deliver your orders as quickly as possible (personal and delivery information) — be able to

manage the customer relationship efficiently — be able to ensure an accounting, generate invoices and prove the accounting/tax reality of our transactions (transaction data)
– be able to manage our risk policy, in particular by detecting unusual transactions (transaction data)
—be able to offer you commercial transactions that match your profile. These sales proposals can be achieved through customer segmentation, purchasing habits, average shopping cart, sales history, products you look at. 
 The Exception will contact you by email in two ways:
- Transactional information: any information related to your activity on the site: account creation, password reset, recall of your shopping cart, order confirmation, shipping tracking, account tracking and loyalty points. This transactional information is intrinsically necessary for the proper functioning of our services. They are not subject to express consent.
Information on promotional highlights: many customers have complained that they do not have the opportunity to receive our commercial highlights: mid-season promotion, private sales and sales, while being unsubscribed from the commercial newsletter. By creating an Exception customer account, and within 3 years of your last order or your registration date, we will send you an information email informing you of our three highlights per season: launch of mid-season promotionsseason, launch of private sales, launch of sales. This corresponds to 7 emails per year. You can opt out of receiving this promotional information by unsubscribing from the footer of the email.
— Commercial information: the newsletter L'Exception is sent at a rate of 2 to 3 emails per week. Explicit consent via a check box is required for newsletter registration. You can unsubscribe from the newsletter at any time: by clicking on the unsubscribe link at the bottom of the email you receive. If you have opened a customer account, you can also unsubscribe from the newsletter directly from your customer account under the “Personal Information > Newsletter Registration” section or from the website. The Exception may also send you promotions via SMS. You can unsubscribe by replying STOP to the SMS or from your customer account under the “Personal Information > Newsletter Registration” section. 

The registration to receive the commercial information is done:
- for the newsletter, by registering on the site by the modal newsletter registration and by ticking: the box I accept the privacy policy. - for the customer account, by clicking on the check box: I wish to receive the communications of the Exception and by clicking on the box I accept the privacy policy.
  The Exception will not call you by phone, except for reasons related to customer service (problem with your order, delivery problem, etc.). Under no circumstances should you transmit your personal or banking information to a person claiming to be The Exception.
 

Will have access to your personal data:

-        The staff of our company;

-        The departments responsible for auditing (lawyer, accountant, auditor in particular);

-        Our subcontractors (communication providers, productivity software providers, data hosting provider, payment service providers, billing provider, audience analysis and measurement providers, customer relationship management providers);

-        Public bodies may also be recipients of your personal data, exclusively for the purpose of fulfilling our legal obligations, auxiliaries, ministerial offices and bodies responsible for collecting claims.

4. TRANSFER OF YOUR PERSONAL DATA TO THIRD-PARTY ENTITIES

The Exception may be required to transfer part of your personal data to the following entities:
- Logistics and delivery service provider: logistician Vingeanne Transport, delivery service provider (Colissimo, DHL, Chronopost, DPD, Paack, Stuart, etc.)
— Technical provider: Internet hosting provider and third-party services (Cleed, Target2Sell, Adrenalead)
— Payment provider: Hipay, Ogone, Alma, PLEDG, Paypal, LUNU, Amazon Pay
— Marketing provider: emailing, advertising or retargeting software by Google, Facebook, Pinterest or Criteo

The Exception ensures that all its service providers comply with the General Data Protection Regulation (GDPR).

   5. TRANSFER OF YOUR PERSONAL DATA OUTSIDE THE EUROPEAN UNION To the best of its knowledge, the Exception does not transfer personal data outside the European Union.

   6. RETENTION OF YOUR PERSONAL DATA

We retain your personal data for the period necessary to comply with the legal and regulatory provisions.

Regarding your customer account, if it has not been ordered, the account is immediately deleted on request to our customer service
Concerning your customer account, if it has been ordered, the information is kept for the time necessary for the commercial prescription (5 years).
When registering for our newsletter, the information is kept 3 years after our last contact with you (as of the date of opening of the newsletter). 
 An automatic purging of your personal data is implemented according to the following periods:

In accordance with European regulations on the protection of personal data, you have the following rights:

-        A right of access allowing you at any time to know if your personal data are or are not processed by our services and when they are, to have access to such personal data and to the information required by law concerning the methods of processing such data,

-        A right of rectification allowing you to request that any inaccuracies concerning your personal data be corrected as soon as possible,

-        A right to erasure, allowing you to request as soon as possible that your personal data be deleted, provided that this erasure request meets the conditions required by applicable law,

-        A right to limit the processing of your personal data, provided that this limitation request complies with the conditions required by applicable law,

-        A right to portability allowing you to receive your personal data in a structured, commonly used and machine-readable format, or to request that this personal data be transmitted to another controller, provided that this request for portability complies with the conditions required by the applicable law,

-        A right to object to the processing of your personal data for reasons relating to your particular situation provided that this objection complies with the conditions required by applicable law,

-        The right to withdraw at any time the specific consent given to the collection of your personal data, especially when the processing of your personal data is used for commercial prospecting purposes,

-        The right to set guidelines for the retention, erasure and disclosure of your personal data after your death.

You have the right to obtain a restriction on the processing of your personal data, in the cases referred to in Article 18 of the GDPR:

-        During the period of verification that we implement, when you dispute the accuracy of your personal data,

-        When the processing of this data is illegal, and you want to limit this processing rather than delete your data,

-        When we no longer need your personal data, but you want to keep it to exercise your rights,

-        During the period of verification of legitimate grounds, when you have objected to the processing of your personal data.

Persons whose data are collected on the basis of our legitimate interest are reminded that they may at any time object to the processing of their data. We may, however, be required to continue processing if there are legitimate grounds for processing that override your rights and freedoms or if the processing is necessary to establish, exercise or defend our rights in court.

You can unsubscribe from our promotional emails via the link provided in the emails. Even if you choose to no longer receive promotional messages from us, you will continue to receive our administrative messages.

You have a right to the portability of the personal data that you have provided to us, understood as the data that you have declared actively and consciously in the context of access to and use of the services, as well as data generated by your activity in connection with the use of the services.

We remind you that this right does not concern the data collected and processed on a legal basis other than the consent or the performance of the contract binding us.

This right may be exercised free of charge, at any time, and especially when closing your account on the Site, afin to recover and retain your personal data.

In this context, we will send you your personal data, by any means deemed useful, in a standard open format commonly used and readable by computer, in accordance with the state of the art.

You can exercise the above rights by contacting us by email at contact@lexception.com or by mail: L
'EXCEPTION La Caserne
12 rue Philippe de Girard
75010 Paris
FRANCE. 
 You are also informed that you have the right to lodge a complaint with a competent supervisory authority (the Commission Nationale Informatique et Libertés pour la France), in the Member State in which your habitual residence is located, your place of work or the place where the violation of your rights was committed, if you consider that the processing of your personal data subject of this charter constitutes a violation of the applicable texts.

This remedy may be exercised without prejudice to any other remedy before an administrative or judicial court. In effet, you also have a right to an administrative or judicial remedy if you consider that the processing of your personal data subject of this Charter constitutes a violation of the applicable texts.

If there is a difference between the English and French versions of the Policy, the French version is valid.

This information on the protection of per^{sonal data was updated on 1} August 2022.