Personal Data and Privacy policy

Preamble

This Personal Data Protection Charter (hereinafter the “Charter” or “Privacy Policy”) applies to the company WELCOME PRINTS S.A.S, with a share capital of €1,000, registered with the Trade and Companies Register (RCS) of Toulon under number 953396249, whose registered office is located at 34 CR 316 du Beausset, Signes, 83330 Le Beausset. Contact: contact@welcome-prints.com. The purpose of this Charter is to inform Users of WELCOME PRINTS’ practices regarding the collection, processing, transmission and storage of Users’ personal data.

The term “Personal Data”, as defined in Article 4 of the GDPR, means “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

Data Controller

The controller of the Personal Data collected in connection with the creation of a Seller or Buyer account, as well as Users’ browsing of the Site, is the company WELCOME PRINTS S.A.S, represented by its legal representative, Morgane Garden. For the processing of orders, Welcome Prints and the Seller concerned act as joint controllers, as indicated in the General Terms of Sale. The respective obligations of Welcome Prints and the Seller have been defined in an agreement, the essence of which is made available to Users on request at contact@welcome-prints.com.

How Personal Data Is Collected

Information provided by Users of the Site

In order to use the website www.welcome-prints.com and the associated features, Users provide certain Personal Data about themselves, in particular when registering on the Site and when placing orders for Artworks.

The Personal Data provided is as follows: last name, first name, country, address, email, telephone number, username and password, content of virtual shops, presentation/description text of Artworks, photographs, information on order arrangements and messages exchanged via the Site. For Sellers, identification information and bank details are collected by our payment provider Stripe for the payment of sums due. Buyers’ bank details are collected directly by our approved third-party provider Stripe for the processing of payments, it being understood that this data does not pass through the Site and is not retained by Welcome Prints.

The Site may constitute one or more files or processing operations containing information voluntarily provided in order to benefit from one or more Services.

Information collected automatically

Welcome Prints may collect and process certain data of Users collected automatically on the Site, in particular:

  • Data collected automatically through browsing the site (cookies). A cookie is a piece of information placed on the hard drive of the User’s computer or by a third-party server. A cookie makes it possible to remember choices made by a User and to easily recognize the User by means of a unique identifier.
  • Connection and browsing data (IP address, browser type, pages viewed) and, subject to your consent, audience measurement and advertising data. This data is not anonymous from the moment it is collected: it is placed or read only after your consent has been obtained.

Purposes of the Data Collected

www.welcome-prints.com collects and processes the Personal Data of its Buyers, Sellers and Users in accordance with the legal and regulatory provisions in force, and in particular French Law No. 78-17 of 6 January 1978 “Informatique et Libertés”, as amended, and Regulation (EU) 2016/679 of 27 April 2016, the General Data Protection Regulation (hereinafter the “GDPR”).

By using the Site, the User is informed that Welcome Prints collects, stores, processes and uses their Personal Data in accordance with this Charter. For processing operations that require the User’s consent (audience measurement and advertising cookies, prospecting), consent is collected separately and may be withdrawn at any time.

The personal information collected by Welcome Prints on the Site is used for the following purposes, each based on the legal basis indicated:

  • the management of Users’ accounts, facilitating transactions between Buyers and Sellers carried out via the Site, and the processing of orders, payments, withdrawals and warranties: performance of the contract;
  • the administration of the various services offered on the Site and the handling of online information requests: performance of the contract or, failing that, the legitimate interest of Welcome Prints in responding to requests;
  • sending administrative communications to Sellers and Buyers (order tracking, changes to terms): performance of the contract;
  • sending marketing communications (newsletter, offers) to Users who have given their consent, for example when voluntarily signing up: consent, which the User may withdraw at any time (unsubscribe link in each message);
  • monitoring the actions taken by Users on the Site and improving the services offered overall: consent in the case of audience measurement cookies or trackers, legitimate interest for other statistics;
  • the prevention of unlawful activities and fraud and the security of the Site: legitimate interest;
  • the settlement of disputes, the enforcement of the Site’s general terms of use and sale and the handling of disputes relating to orders placed on the Site: legitimate interest and, where applicable, legal obligation;
  • compliance with legal obligations, in particular accounting and tax obligations: legal obligation.

Welcome Prints guarantees that Users’ Personal Data will not be processed for purposes other than those set out above.

If Welcome Prints were to process Users’ Personal Data for purposes other than those mentioned, this Charter would be updated and, where required by law, Users’ consent would be requested.

Welcome Prints may amend this Charter in order to adapt it to changes in regulations, the Site and/or its operation. The date of the last update appears at the top of the document. In the event of a substantial change, Users are informed by any appropriate means (online notification or email).

The User may at any time consult and save the Charter on the Site.

Recipients of Personal Data

Welcome Prints undertakes to take all necessary precautions to preserve the security of the Information and in particular to ensure that it is not communicated to unauthorized persons.

Personal Data is intended for Welcome Prints’ internal departments authorized to process it and, depending on the case, for the following recipients:

  • The Sellers concerned by an order: they receive the data necessary for shipping (last name, first name, delivery address, email, telephone number) and for warranty follow-up;
  • Welcome Prints’ service providers acting as processors, in connection with the operation of the Site and in particular for the implementation of the Site’s technical infrastructure and the provision of storage space:
    • site hosting, maintenance and security services (GANDI);
    • email services;
    • services analyzing the use of the Site (Google Analytics);
  • Stripe, payment and account verification provider, which processes certain data as a separate controller for its own legal obligations (in particular fraud and money laundering prevention). Its rules are available at stripe.com/privacy;
  • Judicial, administrative and financial authorities, where required by law.

Welcome Prints and its service providers guarantee a level of security in line with the legal requirements in force.

Welcome Prints has entered into contracts with its processors that comply with Article 28 of the GDPR: these processors process Personal Data only on the instructions of Welcome Prints and solely for the purposes defined by it. In addition, Welcome Prints may be required to transmit certain Users’ Personal Data to third parties because of legal obligations, to respond to claims against Welcome Prints, where required by a judicial or administrative authority, as well as in the event of a court order or summons. Welcome Prints may also share Personal Data with third parties in the event of an emergency involving public health or a person’s physical integrity, as well as to safeguard the rights, property and safety of its Users and third parties.

Transfers of Data Outside the European Union

Certain service providers may process data outside the European Economic Area, in particular in the United States. These transfers are governed by appropriate safeguards provided for by the GDPR (adequacy decision of the European Commission, in particular the Data Privacy Framework for certified companies, or standard contractual clauses). Users may obtain further information about these safeguards by writing to contact@welcome-prints.com.

Retention Periods of Personal Data

Welcome Prints retains Users’ Personal Data only for as long as necessary to achieve their purpose. The periods are as follows:

  • Buyer or Seller account data: for the entire duration of the account, then for a maximum period of 3 months from the closure of the account;
  • Order, invoicing and payment data: ten (10) years from the end of the accounting year, in accordance with accounting obligations (archived with restricted access);
  • Prospecting data (newsletter): until consent is withdrawn, and at the latest three (3) years after the last contact;
  • Dispute-related data: until the end of the dispute, then for the applicable limitation period;
  • Cookies are retained by Welcome Prints for a maximum period of three (3) months.

At the end of these retention periods, Personal Data is deleted or anonymized, except where the law requires it to be archived.

Sellers’ Responsibility and Collection of Personal Data

Sellers are required, through the Site, to collect personal data such as last name, first name, email or postal address and telephone number in order to carry out the shipment of an order and the follow-up of product warranties, and solely for those purposes.

To this end, the Seller acknowledges that they alone are responsible for carrying out such processing on legal bases in accordance with the regulations in force (consent, legitimate interest, legal obligation, performance of a contract, etc.). Welcome Prints cannot be held liable for non-compliant processing carried out by the Seller under their sole responsibility.

The Seller may not process Personal Data for purposes other than those described above unless they have obtained the prior consent of Welcome Prints, and under no circumstances for commercial purposes (commercial prospecting, resale, etc.). Any detected infringement may trigger legal action by Welcome Prints. In the case of reciprocal data transfers between Welcome Prints and the Seller concerned, they undertake to process the data only in accordance with the purposes described above.

The Seller is prohibited from using or communicating the personal data collected in connection with an order, or by any other means through the Site, without the express prior consent of the person concerned.

The Seller deletes or anonymizes the Buyer’s data as soon as its retention is no longer necessary, subject to the Seller’s legal obligations (in particular accounting obligations).

Cookies and Other Trackers

The Site uses cookies and other trackers under the conditions described in the Terms of Use (Article 9). Non-essential trackers (audience measurement, advertising) are placed only after your consent has been obtained via the cookie management tool, accessible at any time on the Site, which allows you to withdraw your consent as easily as you gave it. The detailed list of cookies, their purposes and their retention periods is available in this tool.

Minors

The Site is not intended for minors under [15] years of age. If a minor under that age creates an account without the authorization of their legal representative, the latter may request the deletion of their data at contact@welcome-prints.com.

Right of Access, Rectification and Objection (Your Rights)

In accordance with the European regulations in force, Users of www.welcome-prints.com have the following rights over their Personal Data: the right of access, rectification, erasure, restriction of processing, objection, portability (where the legal conditions are met), the right to withdraw their consent at any time where processing is based on it, and the right to set directives concerning what happens to their data after their death.

If the User wishes to know how www.welcome-prints.com uses their Personal Data, to request its rectification or to object to its processing, the User may contact www.welcome-prints.com by email at the following address: contact@welcome-prints.com. Welcome Prints responds within one (1) month of receiving the request (extendable by two months in the case of complexity, with the User being informed). Proof of identity may be requested if there is doubt about the identity of the requester.

Requests for deletion of Personal Data will be subject to the obligations imposed on www.welcome-prints.com by law, in particular regarding the retention or archiving of documents. Finally, Users of www.welcome-prints.com may lodge a complaint with the supervisory authorities, and in particular with the CNIL (https://www.cnil.fr/fr/plaintes), or with the supervisory authority of their country of residence.