The PDCC describes our practices for collecting, using, disclosing, storing and protecting Users’ personal data in accordance with the General Data Protection Regulation (hereinafter “GDPR“) and the French Data Protection Act (n°78-17 January 6, 1978)

It applies to all visits and browsing by Users on the Website, to all orders placed by a User in accordance with our general terms and conditions of sale accessible via this link and to any contact of the User with PHK, either by means of the contact form on the Website, by post, e-mail or telephone.

Personal data shall mean any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier (surname, first name, identification number, location data, etc.) or to elements specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

PHK collects the following personal data:

• Creating a customer account: last name, first name, gender, date of birth, postal address, e-mail address and telephone number,

• Placing an order on the Website (via the shopping cart or the contact form): last name, first name, date of birth, e-mail address and telephone number.

• Use of the form for a simple request for information: name, first name, e-mail address. The User is free to communicate any personal data that he/she may wish and that may be necessary for the processing of his/her request,

PHK also collects connection information such as statistics on page visits by Users, traffic to and from websites, referral URLs, advertising data, and the browsing history of Users.

No banking data or information is collected by PHK, since at the time of payment, Users are redirected to a secure third-party payment module of the banking organization that collects and processes only Users’ banking data and information.

If Users choose to interact with PHK through one of its social networks, PHK will collect and process personal data voluntarily provided by Users in order to process their requests.

Users warrant the authenticity and accuracy of all personal data they provide on the Website, either when creating a customer account, placing an order, or using the contact form on the Website, and that they shall be tantamount to proof his/her identity.

A “cookie” is a file sent to the User’s hard drive via their browser. This term covers all traces deposited and/or read, in particular when consulting the Website, reading an e-mail, installing or using software or a mobile application, whatever the medium used.

PHK uses the following cookies:

• Technical cookies: navigation or session, required to ensure the proper functioning of the Website and to enable Users to enjoy certain content and services they wish to access,

• Functional cookies, which are used to enable specific features of the Website and a set of selected criteria (such as language or items Users wish to purchase) and to optimize the quality of the services offered,

• Analytical cookies, including from third parties, to understand how users, including Users, use the Website,

• Advertising cookies, also from third parties, intended to create profiles of the user and used to offer Users advertising messages in relation to the preferences indicated during the User’s online navigation.

Functional cookies, analytical cookies and advertising cookies will only be activated and used on the Website if Users give their prior consent to their use.

Users are informed that their personal data is mandatory and essential to achieve the following purposes:

• To manage the accounts created on the Website by the Users,

• To manage, process and track orders placed on the Website by Users,

• To manage, process and follow up all requests and complaints from Users, of any nature whatsoever,

• To provide Users with customer service,

• To manage and follow up the subscriptions to the Newsletter voluntarily subscribed by the Users of the Website,

• To send communications related to the Website and PHK’s business, including announcements and administrative messages such as order confirmation,

• To send the PHK Newsletter to Users who subscribe to it,

•. To send marketing communications about PHK and other third-party partners that may be of interest to Users, where PHK has a legitimate basis for doing so,

• To conduct market research as part of PHK’s ongoing efforts to improve the services it provides to its Users,

• To conduct credit checks, prevent fraud and other prohibited or illegal activities, and to maintain the security of the Website,

• To improve the Website’s services and PHK’s offerings.

Users are informed that without the provision of their personal data, PHK will not be able to fulfill their request.

PHK also uses “cookies” and/or “Web beacons ” in order to adapt and optimize the display of the Website in consideration of the browsing preferences indicated by the Users of the Website (country, language, time zone, etc.), but also in order to ensure the proper functioning (functional cookies), to analyze and measure the traffic on the Website (audience cookies) and to provide personalized advertising and marketing.

The functional cookies used by PHK are essential to the operation of the Website and to the navigation of the Users since they allow the Users to use the main functionalities of the Website and to secure their connection.

Users are informed that they can oppose to the recording of “cookies” and “web beacons” by configuring their computer in accordance with the information provided on the CNIL website http://www.cnil.fr, “cookies” section.

Links on the Website may allow access to or interaction with certain social networks (Facebook, Instagram, Youtube, LinkedIn, etc.) which may use “cookies” and/or “web beacons” through the Website and thus collect personal data. PHK does not participate in the deposit or analysis of these “cookies” and/or “web beacons” and does not collect or have knowledge of the information collected via these “cookies” and/or “web beacons“. PHK recommends that Users consult the terms of use, privacy policies and legal notices of these social networks.

PHK only collects necessary personal data, proportionate to the legitimate and determined purposes defined above and voluntarily submitted by Users, and only implements legal personal data processing on the basis of legal sources provided by the regulations:

• Consent of Users (subscription to the Newsletter, various requests via the contact form voluntarily and beforehand by Users, creation of a customer account, placing an order, etc.),

• Compliance with legal obligations (claims, litigation, etc.), accounting and tax,

• Legitimate interests of PHK (protection and development of its business and the Website, etc.) as long as the processing does not infringe the rights of individuals,

• Combating fraud, money laundering and financing of terrorism.

Users are informed that they can withdraw their consent at any time.

The personal data collected on the Website is intended for PHK and may, if necessary, be temporarily communicated to third parties performing services on behalf of PHK, in the context of the operation and management of the Website (computer scientist, webmaster, etc.) or the processing of Users’ orders (packer, carrier, accountant, etc.).

PHK does not rent, sell, disclose or share Users’ personal data with any other person or company other than those mentioned in the first paragraph, including for marketing purposes.

Personal data collected and processed by PHK is hosted and stored on servers located in France and will not be transferred outside the European Union.

However, should personal data be transferred outside the European Union, PHK will take all necessary measures to ensure that the countries receiving the personal data provide an equivalent level of personal data protection to those of the European Union and France.

The transfer will then be limited either to countries listed by the European Commission as providing adequate personal data protection or to recipients that comply with the European Commission’s standard contractual clauses applicable and in force on the day of the transfer of personal data.

Personal data are collected, recorded and retained in accordance with the GDPR and the French Data Protection Act (n°78-17 January 6, 1978) in its latest version in force, and are kept for limited periods determined according to the purpose of the processing and the legal and regulatory provisions in force.

When Users contact PHK but do not place an order with PHK, their personal data is retained for a period of 3 years after the first contact with the prospect who did not follow up, or after the last contact with this User.

When Users place an order with PHK, their personal data will be retained for the duration of the execution and completion of the order and, thereafter, for the duration of the legal statute of limitations.

Personal data related to any fraud or money laundering is kept for 5 years after the order is completed and accounting personal data is retained for 10 years.

In the case of legal proceedings, Users’ personal data is retained until a final court decision is made.

If you request that we no longer send you direct marketing communications, we will keep a record of your request and contact information to ensure that your request is honored.

These retention periods may be modified in the event of changes in French and European laws and regulations, which will then be immediately enforceable against Users.

At the expiration of these retention periods, PHK will delete the Users’ personal data in order to comply with the legal provisions in force without the need to obtain Users’ express and prior approval.

According to current knowledge, it is technically impossible to guarantee the unfailing security of data exchanged on the open Internet network. However, PHK has taken all reasonable measures to ensure the utmost confidentiality and security of personal data collected or communicated by Users and to protect the actions done on the Website (antivirus, restricted access to the back office of the Website, etc.) in order to prevent data theft, used without authorization, distortion, etc.

These personal data are only visible to authorized personnel who is aware of the issues of personal data protection.

In the event of a personal data breach, PHK will notify the CNIL in the forms and deadlines provided for by the GDPR and the French Data Protection Act (n°78-17 January 6, 1978) in its latest version.

In accordance with the GDPR, Users have the following rights:

• Right of access: to confirm their personal data, and, where applicable, to gain access to their personal data and obtain details on the nature of the processing carried out,

• Right to request the rectification: to obtain the rectification of their inaccurate personal data,

• Right to portability: to receive their personal data from PHK, in a structured, commonly used and computerized format in order to transfer them to another platform,

Right to be forgotten: to delete their personal data,

• Right to limitation of processing: to effectively block their personal data, to store them and to interrupt their processing,

Right to object: to object to the way their personal data is processed.

The Users wishing to assert one of these rights must send their request, with a copy of their identity card, by post to the following address Peggy Huynh Kinh, 9 rue Coëtlogon – 75006 Paris – France or by e-mail to contact@phk.fr. PHK will send a reply to this request within a maximum of thirty (30) days from the receipt by PHK of the request from the User concerned.

Users also have the right to refer any claims or complaints to the CNIL.