This CAHU Privacy Policy (hereinafter referred to as the "Privacy Policy") governs the relationship between:

The User (as defined in Section 1 below),
On the one hand,
and
The person in charge of the processing:
CAHU, a limited liability company with a share capital of €10,000, registered in the Paris Trade and Companies Register under number 835 126 947, whose registered office is located at 16 rue du Grand Prieuré, 75011 Paris, represented by its manager, Mrs. Clémence CAHU,
On the other hand.

Hereinafter referred to collectively as the "Parties" and individually as a "Party".

• CAHU's business involves the development and operation of the website accessible at the URL address: https://cahuparis.com (hereinafter the "Site").
• The Site is a platform offering the online sale of travel items, leather goods, and accessories (as defined in Article 1 below).

The Parties agree and accept that the following terms, used with a capital letter, in the singular and/or plural, have the meaning given to them below in the context of these General Conditions:

• "Buyer": Any User who purchases one or more Items on the Site.
• "Item": Any travel product, leather goods, and fashion accessories offered for sale on the Site.
• "Order": The process of purchasing an Item online by any Buyer on the Site.
• "Personal data" or "Data": Any information that directly or indirectly identifies a natural person (e.g., surname, first name, age, IP address, email address, etc.), within the meaning of Article 4 of the GDPR.
• "User": Any Internet user browsing the Site.

The purpose of this Privacy Policy is to define how CAHU processes Personal Data.

Collection of Data

CAHU collects and uses the User's Personal Data in compliance with Law No. 78-17 of January 6, 1978, known as "Informatique et Libertés", and Regulation (EU) 2016/679 (the GDPR).

Personal Data is collected when Users visit the Site, subscribe to the CAHU newsletter, communicate with customer service, or during the Order process.

If the User refuses to adhere to this Privacy Policy, they shall not access the Site or place Orders.

Legal Basis for Processing Personal Data

• Performance of CAHU's Contractual Relations with Users
  To use the Site and benefit from its services, Users must accept the General Conditions available on the Site. This document formalizes a contractual relationship between the User and CAHU, serving as the legal basis for the collection and processing of Personal Data.
• User Consent
  CAHU may install various cookies on Users' devices (e.g., computers, mobile devices). When required by law, CAHU obtains the User's consent for installing these cookies.
• Compliance with a Legal Obligation
  Certain processing of Personal Data may be imposed by legal obligations on CAHU.
• Legitimate Interests of CAHU
  In certain cases, CAHU may process Personal Data based on legitimate interests (e.g., fraud prevention). CAHU ensures that such processing is necessary and does not infringe on Users' rights.

Purposes of Processing Personal Data

Personal Data is primarily processed to:

• Allow User navigation on the Site.
• Enable subscription to the CAHU newsletter.
• Ensure the proper processing of Orders (e.g., payment, delivery, invoicing).

As a subsidiary purpose:

• Prevent and fight against fraud (e.g., hacking, anti-money laundering).
• Improve navigation on the Site.
• Optimize the Site's use across different devices (e.g., computer, tablet, smartphone).
• Communicate with Users (e.g., Order information, newsletters, customer service).
• Conduct satisfaction surveys.
• Comply with legal requirements or legal proceedings.
• Manage User rights as outlined in Article 3.7.
• Perform statistics and generate internal reports.

CAHU may also use the User's email address to send promotional emails about news, offers, or relevant information.

Categories of Data Processed

CAHU may process:

• Name, first name, postal address, phone number, email address
• Transaction history
• Bank details
• Date and time of connection and navigation
• Browser type and language
• URL accessed
• IP address
• Device used

Recipients of Personal Data

Personal Data is strictly confidential. However, CAHU may temporarily transfer Personal Data to third parties when necessary, for example, to:

• Execute Orders placed by Users.
• Operate and maintain the Site through SHOPIFY.
• Respond to legal authorities' requests.

CAHU ensures that third parties receiving Personal Data take adequate measures to ensure security and confidentiality.

CAHU does not share Personal Data for commercial purposes.

The Site is hosted by Shopify Inc. with headquarters at 151 O'Connor Street, Ottawa, Ontario K2P 2L8, Canada.

Security of Personal Data

Personal Data is stored in France. CAHU takes all necessary precautions to preserve the security and confidentiality of Personal Data, preventing it from being modified, damaged, or accessed by unauthorized persons, in compliance with applicable laws.

Users' Rights

Under the applicable legislation, Users have the following rights:

• Right of access, rectification, and update of Personal Data.
• Right to block or delete inaccurate or prohibited Personal Data.
• Right to withdraw consent at any time.
• Right to limit processing of their Personal Data.
• Right to object to the processing of their Personal Data.
• Right to data portability.
• Right to determine the fate of Personal Data after death.

Users can exercise these rights by contacting CAHU by mail at:
CAHU
38 rue Lucien Sampaix,
75010 Paris,
or by email at: dpo@cahuparis.com

Retention Periods

Personal Data is retained for three (3) years from the last contact with CAHU. Audience measurement data is retained for no more than thirteen (13) months.

At the end of these periods, Personal Data may be archived for legal retention requirements.

Complaint

If a User believes their data security has been compromised, they should contact CAHU via:
Email: dpo@cahuparis.com
Mail: CAHU, 38 rue Lucien Sampaix, 75010 Paris

Users may file complaints with the CNIL (https://www.cnil.fr/fr/plaintes).

CAHU uses session cookies to facilitate access to the Site. Third-party cookies may also be used. The User may request information about cookies used and request adjustments via email or mail.

CAHU reserves the right to modify the Privacy Policy at any time. Users will be notified of changes via email, and consent will be required for the new policy to apply.

We wish to guarantee your confidentiality and use your data with the greatest respect.