PRIVACY POLICY

2 – Who is responsible for the data processing implemented?

The data processing controller implemented under this Policy is the company COMPAGNIE DES MONTRES SERICA, a simplified joint-stock company with a capital of 10,000 euros, identified under number 887 674 232 RCS Paris, whose registered office is located at 48 rue Lepic 75018 Paris (France), represented by its President (hereinafter “SERICA” or “We“).

3 – When are Data collected and processed by SERICA?

SERICA may collect and process Data in the following ways:

• When contacting through the website www.serica-watches.com or by phone: the SERICA website includes a contact form, under the “Services” tab and then the “Contact” section, allowing anyone interested to contact SERICA and request information about the company and its products; likewise, the SERICA website allows registration to receive a newsletter; finally, the SERICA customer service is accessible by phone;
• When ordering a product sold by SERICA: in this case, the creation of a customer account is necessary, and, in this context, Data is collected by SERICA to ultimately process the order;
• In the case of contractual relations with SERICA: this scenario concerns, in particular, SERICA’s suppliers;
• In the use of the website www.serica-watches.com: browsing the site may generate certain Data through cookies. A cookie management module is present on the SERICA website, allowing each user to accept or refuse cookies. A dedicated cookie policy is also available at the bottom of the SERICA website;
• When using social media login features (especially Facebook).

4 – What Data is collected and processed by SERICA?

SERICA applies the principle of data minimization, meaning that it only collects and processes Data strictly necessary for the performance of its activities. SERICA does not trade personal data.

The data collected and processed by SERICA includes:

• When contacting through the website www.serica-watches.com: The collected Data is limited to the name, email address, phone number, order number (if applicable), and any Data that the Data Subject wishes to share with SERICA in the contact form (“Your Message”);
• When ordering a product sold by SERICA: In the case of ordering through the website, the collected Data includes the buyer’s name, first name, postal address, email address, and phone number, as well as the type of product purchased and information regarding the credit card used for payment;
• During the execution of contractual relations with SERICA: SERICA may collect certain Data to enable contract execution and, in particular, issue invoices or implement payments. This includes the name and contact details (email address, phone number) of SERICA’s interlocutor;
• In the use of the website www.serica-watches.com: Some Data related to website usage, such as pages viewed, time spent on the site, type and version of the internet browser used, types and versions of your browser’s plugins, operating system, Data regarding your browsing path, etc., may be collected entirely automatically;
• When using features related to social media login: SERICA will have access to some of the Data (including your first name, last name, photograph, email address, phone number, and number of Facebook friends) from your account on the respective social network in accordance with the terms of use of the relevant social network. We may also collect some of your Data when you interact with features of these social networks, such as the “Like” button.

5 – On what legal basis are Data collected and processed?

SERICA does not engage in any unlawful collection or processing of Data. All Data collected and processed by SERICA is done so under a duly identified legal basis:

• Contract or pre-contractual measures: For the most part, Data collected by SERICA is necessary for the performance of contracts, whether it be sales contracts related to product orders or contracts related to SERICA’s suppliers;
• Consent: Other Data collected and processed by SERICA is based on the consent of the Data Subjects, who choose to share it with SERICA, particularly through the contact form;
• Legitimate interest of SERICA: SERICA processes Data collected automatically to establish statistics and improve its website. SERICA may also use Data for marketing purposes, such as sending a follow-up email to a Data Subject who has placed a product in their shopping cart without completing the purchase.

6 – USE OF COLLECTED DATA BY SERICA

SERICA only processes the collected Data in the scenarios described above for specific and legitimate purposes, primarily related to the products it markets.

Broadly, these purposes are as follows:

• Allowing Data Subjects to obtain information about SERICA and its products.
• Enabling SERICA to fulfill orders placed on its website.
• Facilitating, in accordance with applicable legal provisions and with your consent when required by law, marketing, advertising, and promotional messages, as well as information about our products or services. SERICA may suggest and advise on products or services that may interest you. We may also use your Data to send you advertising messages on social media platforms or third-party sites. For more information on this, please refer to the contractual documents of these platforms.
• Enabling SERICA to fulfill its contractual obligations.

7 – TO WHOM ARE THE COLLECTED DATA DISCLOSED?

The Data collected by SERICA is intended for its use only.

However, some Data related to practitioners may be communicated to SERICA’s service providers, such as its accounting firm or law firm, especially in the event of a dispute related to an order.

Your Data may be transmitted to any buyer or other successor in the event of a merger, sale, restructuring, reorganization, dissolution, or other sale or transfer of part or all of SERICA’s assets due to insolvency proceedings or any other process in which the Data of SERICA’s customers are among the transferred assets.

Additionally, we may be required to disclose your Data to comply with any court order, including any government or regulatory request.

If we believe that disclosure is necessary or appropriate to protect the rights, property, or safety of SERICA, its customers, or other stakeholders. Such disclosure includes the exchange of information with other companies and organizations for the purposes of fraud and counterfeit protection.

8 – HOW LONG ARE DATA RETAINED BY SERICA?

SERICA retains Data related to Data Subjects in an identifiable form for the strictly necessary duration for the accomplishment of the purpose of the relevant processing. Schematically:

• Data related to prospects (individuals) are retained for a maximum duration of 3 (three) years from the last contact.
• Data related to SERICA’s customers are kept for the duration of the contractual relationship with them and up to 3 (three) years after the last order.
• Data related to SERICA’s suppliers are retained for the duration of the contractual relationship and for the period imposed by law or regulation at the end of said relationship.

9 – WHAT ARE YOUR RIGHTS REGARDING YOUR DATA?

SERICA respects the rights granted by the GDPR and the Data Protection Act.

Thus, any Data Subject whose Data has been collected by SERICA has the right to request access to the Data concerning them and held by SERICA, as well as the rectification or erasure of such Data, or the restriction of processing regarding their personal data, and the right to object to processing.

It is specified that in case of processing limitation or objection to processing, SERICA may possibly no longer be able to provide the subscribed training, for example. Furthermore, in the case of exercising the right to object or the right to be forgotten, some information may still be retained by SERICA to comply with its legal obligations.

Any Data Subject can also define directives regarding the retention, erasure, and communication of their Data after their death. In the absence of such directives, the Data concerning them will be kept in accordance with the paragraphs above unless their heirs request faster deletion.

To exercise these rights, any Data Subject can send an email to privacy@serica-watches.com or send a postal mail to the following address:

COMPAGNIE DES MONTRES SERICA

Data Protection

48 rue Lepic 75018 Paris

FRANCE

Any correspondence must be accompanied by a copy of the Data Subject’s identification document. This document will not be kept after verifying the Data Subject’s identity.

Any Data Subject can opt out of telemarketing by registering on www.bloctel.fr.

Finally, any Data Subject has the right to lodge a complaint with the competent data protection authority, namely the CNIL for France: www.cnil.fr.

10 – HOW ARE PERSONAL DATA PROTECTING YOU IMPLEMENTED BY SERICA?

As the data controller, SERICA undertakes to implement and maintain, at its expense, appropriate technical and organizational measures for data processing and security, in accordance with Articles 32 to 34 of the GDPR and 70-13 of the Data Protection Act.

SERICA ensures that these technical and organizational measures are at all times adapted to the particular risks presented by its processing activities, especially to protect Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Regarding the technical measures implemented by SERICA:

• All Data related to SERICA’s customers, including Data on orders placed with SERICA, is hosted within the WOOCOMMERCE solution published by AUTOMATTIC and protected by security measures conforming to the highest standards, including double authentication, reducing the risk of unauthorized intrusion or disclosure of Data.
• The Data is hosted on servers located within the European Union or in the United States, protected by protection measures defined by the providers and offering security guarantees adapted to the risks incurred. In particular, Data is end-to-end encrypted, and the servers are secured according to the highest standards.

Regarding organizational measures:

• Data is only accessible to SERICA’s executives and staff who need to know it.

SERICA also undertakes to keep, update, and retain a complete and accurate register of processing regarding the personal data processing activities carried out by SERICA. This register details its processing activities.

11 – ARE INTERNATIONAL DATA TRANSFERS IMPLEMENTED?

As a principle, Data collected by SERICA is stored on computer servers located within the European Union.

If applicable, certain Data may be accessible from countries outside the European Union. In this case, SERICA ensures that this access is based on appropriate contractual guarantees provided for by European law and regulations.

12 – ANY ADDITIONAL QUESTIONS?

For any additional questions regarding how SERICA collects and processes Data, please send an email to the following address: [email protected].