We deem the privacy of our customers and website visitors to be paramount. We would therefore like to inform you about how we process your personal data. This Privacy Statement applies to all the personal data you provide us with or that is collated when you visit our website, use our services, buy our products (online or in-store), contact Fabienne Chapot, subscribe to our newsletters or consent to receiving personalised ads. The Privacy Statement covers the following topics:

1. Who is responsible for processing your personal data?
2. Amendments
3. Personal data
4. How do we use your personal data?
5. Newsletters
6. Legal basis
7. Retention period
8. Who has access to your personal data?
9. Cookies and Google Analytics
10. Protection, and the (international) transfer of, personal data
11. What are your rights?

1. Who is responsible for processing your personal data?

Fab B.V., trading as "Fabienne Chapot", located at No. 479 Herengracht, 1017 BS, Amsterdam, is responsible for the processing of personal data as outlined in this Privacy Statement.

Contact details:
No. 479 Herengracht
1017 BS, Amsterdam
+31 (0) 20 2400720

Business registration:
Fab B.V.
Chamber of Commerce number: 34357026
VAT number: NL 821208317B01

Privacy Officer:

We have appointed a Privacy Officer to ensure your personal data is processed legally and with due care. If you have any queries concerning this Privacy Statement or Fabienne Chapot's processing of your personal data, please contact our Privacy Officer at: info@fabiennechapot.com.

2.  Amendments

We reserve the right to amend this Privacy Statement as and when needed. The latest version of our Privacy Statement can be found at https://www.fabiennechapot.com/en/pages/privacy-statement/. This Privacy Statement was last updated on 08-08-2024.

3. Personal data

Personal data means any information that identifies you either directly or indirectly (in combination with other available data). For
instance, your name and address, but also IP addresses, location data or information about your activity on a website collated with the help of cookies.
We only process personal data necessary for the purpose of processing. Purposes for which we process personal data include the processing of orders, administration of payments, marketing and optimising the website and, with your consent, sending and personalising newsletters or (personalised) offers. In addition, we retain certain information when you create a customer account with us, such as your name and address details and order history.

Among other things, when you visit our website we collate your IP address, general preferences, settings and system specifications, including device IDs. Cookies or similar processes allow us (with your consent) to collate data on how you use our website and for how long, to analyse user data and to provide targeted offers based on visitor profiles.

We also collate personal data when you place an order via our website, subscribe to our newsletter and/or when you contact our customer service team or post a review. To do so, among other things, we collate your name, e-mail address, mobile number and order details. We also collate your address and payment details to process the order.

(Sensitive) personal data

We do not collate or process any sensitive personal data.

4. How do we use your personal data?

We use your personal data for the following purposes:

Facilitating a smooth user experience - when you use our website we collate certain data - including your IP address - to recognise your digital device and to optimise and improve interaction with the website.

Information provision - we collate certain personal data such as your name, e-mail address and telephone number in order to provide you with information, for example about your order, about new collections when you provide your number in-store, or for sending newsletters once you have signed up for them.

Customer account - we collate the following personal data to create and manage your customer account: your name, address
details, e-mail address, telephone number, date of birth and order history.

Order processing - In order to process and deliver your order, we collate the following personal data: your name, e-mail address, telephone number, address details and payment information.

Customer service - in order to help you as best we can when you contact our customer service team, we use certain personal data, such as your name, e-mail address, telephone number and address details, to:
- quickly and securely establish your identity and to keep track of your order history when you contact us with e.g. a complaint or in connection with a product warranty;
- advise on your order, should you have a query about it;
- facilitate follow-up communication by e-mail, phone and, in the future, via our live chat.

Customer satisfaction - we work with review platforms. When you post reviews on our partner websites, we collate the following personal data: your name and e-mail address, and order details. We do so to analyse user feedback on a product or service, to help us implement potential improvements.

Payment processing and management - To process and manage your payments on our website or in-store, we work with our payment service provider Stripe, whereby your personal data is shared and processed via a secure connection. For more information on how our payment service provider Stripe processes your transaction data, please refer to Stripe's Privacy Statement.

Personalised display and advertising- We also collate data to enable (personalised) communication, for instance in the form of a personalised customer profile, personalised website display and direct marketing on our websites and via advertising partners, such as Google Ads and Google Performance Max. We collate the following personal data for this purpose: your age, gender, place of residence, location data (via IP Internet address connection), Device ID, your areas of interest, and information derived from social media accounts for the purpose of targeted advertising. As part of our personalised marketing on social media, such as Instagram and Facebook, we work with Meta. However, we have no control over Meta's processing activities. We therefore would like to refer you to Meta's Privacy Policy.

5. Newsletters

You can subscribe to our newsletter via our website. This newsletter allows us to keep you up to speed of e.g. new collections, offers and promotions. Should you no longer wish to receive the newsletter, you can always unsubscribe via:

- The link listed at the bottom of every newsletter we send out;
- Your Fabienne Chapot customer account settings;
- By sending an e-mail to info@fabiennechapot.com.

6. Legal Basis

Pursuant to the General Data Protection Regulation (GDPR), personal data may only be processed when there is a legal basis for doing so. Our use of your personal data is based on four fundamentals:

Implementation of an agreement - When you place an order with us, we use your personal data to implement the agreement. We may subsequently use this information to, say, process the purchase of one or more of our products/services and deliver the order to you.

Legitimate interest - Where necessary, we may process your personal data to pursue a legitimate interest, for example, to tailor the content of our website and communications with you, to match your preferences, to refer you to our partners' websites, to optimise our services or to secure our website and detect fraud. These processing operations can always be appealed by getting in touch with us via the contact details listed under point 1 of this Privacy Statement.

Unambiguous consent - some processing only occurs with your unambiguous consent, including the sending of newsletters and the placement of marketing cookies. You have the option to withdraw your consent at any time. This can be done via our website. Withdrawing consent for the newsletter can be done via the link at the bottom of each newsletter.

Legal duty - In some cases, we may be under a legal duty to (continue to) process your personal data, such as retaining personal data contained in our financial records. 

7. Retention period

We keep your data for shorter or longer periods, depending on the personal data categories, the purpose for which the data is processed and any statutory time limits. We never keep your personal data for longer than is reasonably necessary. In any case, we keep data collated for direct marketing purposes until such a time that you withdraw your consent. You can also terminate your customer account at any time, after which your account will cease to exist. In some cases, we are obliged to keep your personal data for longer, such as personal data in our financial records for which there is a seven-year retention obligation.

8. Who has access to your personal data?

We only pass on your personal data to other parties if strictly necessary in relation to our service provision. In certain cases, your personal data will be shared with parties within the following categories:

Delivery partners - We may share your personal data with a select number of delivery service providers, such as PostNL. This information is used to pass on relevant address details so that
your order can be delivered. In some cases, and where relevant, this information may include your name, e-mail address and phone number.

Payment service providers - We use third-party service providers to process your online payments. We share your personal data, including your name and payment details with these service providers in order to make and complete your payment. This personal data is sent directly, via a secure connection, to our partners.

IT service providers - We use IT service providers, including our hosting party, who may access your personal data to the extent that is necessary within the context of, e.g., maintaining our
systems, troubleshooting or providing certain services we have outsourced to them.

Shopify - To facilitate and process orders in our webshop, we use Shopify, an online commerce platform, which processes certain personal data within that context on our behalf. 

Other third parties - We also use other third parties such as Google, management platforms, and media, advertising & research agencies that collate and analyse personal data. This allows us to optimise our services for you, and to personalise and distribute marketing materials.

Review platforms - We also use review platforms, where we can gather, view and process reviews. These platforms collate and share data with us in order to facilitate this process.

Legal obligations - In certain situations, we may be required to share your personal data by law, within the context of legal proceedings or pursuant to an order imposed on us by a competent
authority.

The parties given access to your personal data by us may only use this personal data to provide you with a service on behalf of Fabienne Chapot.

Furthermore, we will never forward, sell or exchange your personal data to/with third parties outside Fabienne Chapot for marketing purposes. Personal data transmitted to third parties is only used to facilitate our service provision to you.

9. Cookies and Google Analytics

Fabienne Chapot uses functional, analytical and tracking cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone the first time you visit this website. For the placement of non-essential cookies, such as functional and analytical cookies, explicit consent is requested when you first visit our website. Cookies may be placed by us or by a third party, such as Google Analytics.

Our website uses the following cookies:

Technical cookies - These cookies ensure our webshop works properly, and that we can deliver our services. For instance, logging in,
and being able to scroll through different pages on a website.

Functional cookies - Functional cookies enable our website to remember your personal preferences, such as language selection, search history and registration details.

Analytical cookies - These cookies are placed by third parties; Google Analytics in our case. These keep track of the way in which you use our website. With these cookies, we measure and analyse how you use our webshop. For example, we measure how many customers visit our website, the search terms used and which sections are of particular interest to our visitors. This helps us see what we can change to improve your experience, makes our website more findable and ascertains the impact of our online marketing. Statistics and reports are not traceable to individuals.
Third parties may also use information about you collated on other websites. We have no control over this. If you would like to know more about how Google Analytics collates and uses information, and how your privacy is ensured, please consult Google's Privacy Policy: https://www.google.com/policies/privacy/.

Commercial cookies - These cookies are used to tailor our newsletter and ads to your personal preferences. To best match these to your preferences, we collate data from your visit to get a picture of possible interests. We can also use these cookies to track which ads you have already seen, so that you don't see the same banners over and over again, for example. We also place these personalised ads on other websites ('retargeting'). We inform you of these cookies upon your first visit to our website, when we request your explicit consent for setting one or more
categories of cookies. More information about the cookies we use on our website, and how to withdraw your consent for optional cookies, can be found here.

You can revoke your consent given to us for storing and using our cookies and those of third parties at any time. You can do so by setting your internet browser to stop storing cookies. In addition, you can also delete all cookies previously stored via your browser's settings.

10. Protection, and the (international) transfer of, personal data

We store your personal data in various databases, including Google Cloud and Microsoft. Your personal data is almost always stored within the European Union. In the exceptional case that customer personal data is transferred to countries outside the European Union, we will provide appropriate safeguards to ensure that your privacy remains protected even in such a case, and will comply with applicable privacy laws governing the transfer of this personal data.

We take appropriate measures to prevent the misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification of your personal data. If you feel that your personal data is still not secure or there are indications of misuse, please contact our Privacy Officer at info@fabiennechapot.com.

11. What are your rights?

Under the GDPR, you enjoy the following rights in relation to the processing of your personal data:

Right of access - You have the right to know what personal data of yours we hold, and to peruse this personal data. This right also covers derived personal data.

Right to rectification - You have the right to request rectification or supplementation of your personal data should it be incorrect or incomplete.If you have created an account with Fabienne Chapot, you can edit your personal data yourself in your account.

Right to erasure- You have the right to request the erasure of your personal data when a basis for the processing of your personal data no longer exists.

Right to data portability- You have the right to receive the personal data we hold about you in a structured, commonly used and machine-readable format. You also have the right to ask us to transfer this personal data directly to another organisation. This right relates only to the personal data you have provided to us (both directly and indirectly), and not to derived personal data.

Right to restrict processing - You have the right to request that we temporarily or permanently cease processing all or part of your personal data.

Right to object - You have the right to object to the processing of your personal data for reasons relating to your particular circumstances.

Should you wish to exercise any of these rights, please send a request to info@fabiennechapot.com.

To ensure the request was indeed made by you, kindly send a copy of your identity document with the request. When sending the copy, black out your passport photo, MRZ (machine-readable zone, the strip of numbers at the bottom of the passport), passport number and Dutch Personal Identification
Number. This is to safeguard your privacy. After processing the request, the copy will be deleted from our systems. We will respond to your request as soon as possible, but at the latest within four weeks.

If you believe that Fabienne Chapot is processing your personal data incorrectly, you can contact us at any time at info@fabiennechapot.com. You also have the right to submit a complaint to the Data Protection Authority (the Dutch supervisory body).