Privacy and cookie policy
This policy provides you with information about how DFS France and DFS Group Limited collect your personal data, and about the cookies which are used by DFS France and DFS Group Limited on websites belonging to DFS.
1. Identity and contact details of the data controller
This policy outlines the way in which the company DFS France SAS, a limited liability company whose registered office is at 21 rue de la Monnaie, Paris 75001 listed in the Register of Commerce and Companies of Paris under No. 537 758 583 (hereinafter, “DFS France”), and DFS Group, whose registered office is at 8/F, Chinachem Golden Plaza 77 Mody road, Tsimshatsui East, Kowloon, Hong Kong, as joint controllers (“DFS”), collect and process the personal data which concerns you ( hereinafter, your “Data”)
The provisions of Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation or “GDPR”), as well as the provisions of the French Act n° 78-18 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended (hereinafter, the “French Data Protection Act”) apply to the processing of your Data by DFS . Terms used for the purposes of this policy have the meanings given to them by the GDPR.
2. Identity and contact details of the Data protection officer (DPO)
The company TNP Consultants SAS is the Data protection officer for DFS .
If you have any questions relating to the collection and/or processing of your Data by DFS France, please contact the data protection officer at the following address : dpofrance@dfs.com
3. Data protection collection
The websites www.dfs.com/en/samaritaine and https://shop-samaritaine.dfs.com/ (hereinafter, the “Websites”) allows DFS to collect your Data. Your Data may also be collected by DFS applications.
The staff in Samaritaine may also collect your Data and carry out Data processing within the framework of their activities.
Your Data is notably obtained from:
- Loyal T sign up and upgrade;
- Book an experience;
- Concierge and alteration services;
- Reservation and purchase of products,
- Product delivery;
- Click & Collect services;
- Refund tax services;
- Gift cards
- Loan of equipment.
The DFS customer services department may also collect and process your Data when you contact it with your requests.
Children Data
Protecting the safety and privacy of children is very important to DFS. We do not knowingly collect or use the Data of minors under the age of majority in accordance with local legislations in force.
If you are under the minimum age requirement, please do not submit any Data without the express consent and participation of your parent or guardian.
If you believe that we have collected Data about a minor without such consent, please contact us at dpofrance@dfs.com and we will delete this information.
4. Processed Data that we collect
The Data which relates to you and which is collected by DFS is mainly:
- First name and last name;
- Civil status;
- Company name;
- Email address;
- Mailing address;
- Mobile and telephone numbers;
- Contact preferences;
- Date of birth;
- Bank details in the context of sales;
- Purchase and reservation history;
- Preferences and interests;
- IP address;
- Cookies and trackers;
- Login data.
5. For which purpose do we collect your personal data, on which legal basis and for how long ?
Your Data is either:
- collected based on your consent; or
- required for the completion of your orders according to a contract; or
- collected for the purpose of pursuing a legitimate interest of DFS (e.g. the development of our commercial activity or to prevent fraud and counterfeiting)
- collected to fulfil DFS legal requierements.
Your Data is therefore collected and/or processed notably for the following purposes:
|
Purposes |
Personal data collected |
Legal basis |
Retention period |
|
… to answer your questions sent via the “Contact us” form available on our Website |
Title First name Last name Mobile number (optional) Country Request content Loyal T account number (optional)
|
It is in our legitimate interest to respond to your requests to ensure your satisfaction and to maintain our relationship. |
Time required to process the request |
|
… to enable you to create a “Loyal T” account and thus be part of the DFS membership program |
Title First name Last name Email address Mailing address Mobile number Date of birth (optional)
|
Performance of a contract |
As long as your account remains active, on the condition that you do not close it (for more information, please see the Loyal T terms and conditions). If your account remains inactive for a period of five (5) years, DFS will contact you to determine whether you wish to maintain it or not. Otherwise your account will be closed and your Data erased |
|
… to allow you to create a wish list via the Website or via other applications |
Title First name Last name Email address Mobile number
|
Performance of a contract |
This data will be kept for a maximum of 30 days |
|
… to send you information on our offers, products, latest news and events (newsletters, invitations to events organised by DFS , including private sales and other news publications) |
Title First name Last name Email address Mailing address Mobile number
|
Your consent, where required. |
Five (5) years from their collection or your last purchase or until you unsubscribe |
|
… to manage your orders and to access to your order history on our Website. |
Title First name Last name Email address Mailing address Transaction data Mobile number Order history |
Performance of a contract |
As long as your account remains active, on condition that you do not close it |
|
… to manage the delivery of your purchases. The data is collected by DFS and sent to TopChrono to process the delivery. For more information on this processing please consult TopChrono privacy policy. |
Title First name Last name Email address Mailing address Mobile number |
Performance of a contract |
The delivery forme is kept five (5) years in archive
|
|
… to manage your online reservation, ( on our Website or via Wechat ) |
Title First name Last name Email address Mailing address Mobile number Contact or reservation references |
Performance of a contract |
Until the purchase is made or up to 30 days
|
|
… to ensure the security of online transactions, prevent fraud and payment incidents (see our e-commerce General Terms and Conditions for more details) |
Identification details Billing informations (transaction details and credit card number) |
Legal obligations |
Your data will be erased within a year after the order |
|
… to manage, optimise and personalize customer relations (notably within the framework of the management of complaints and the after-sales service) |
Title First name Last name Mailing address Request |
Performance of a contract |
Time required to process the request |
|
… to save your details and usage preferences for our Website in order to optimize your navigation |
Cookies and trackers Login data
|
Your consent, where required |
Until you withdraw your consent and no later than 13 months |
|
… to manage retargeting tools and suggest targeted advertising |
Cookies and trackers
|
Your consent, where required |
Until you withdraw your consent and no later than 13 months |
|
… to organize DFS private sales and other events: your Data may then be processed in order to fulfill DFS’s legitimate interest in promoting its products and activities. Thus, DFS uses your contact Data to inform you about DFS news, to select guests for DFS events according to the nature of the relationship you have with DFS (customer, LVMH Group employee, VIP guest, etc.), the history of relationships (e.g. participation in other sales or events, purchasing history, etc.) |
Title First name Last name Email adress Mailing address Mobile number Loyal T number Purchase and reservation History |
Your consent, where required |
The Data will be kept for a period of five (5) years from the date of collection or from the date of your last contact with DFS Before the expiry of this period, DFS may contact you again to find out whether you wish to continue to receive communications relating to our offers, products, news and events |
|
… to carry out statistics, segmentations and marketing analysis following your visits to La Samaritaine, your visits to our Website, or your use of applications , in order to send you personalized messages and to implement an adapted relational program |
Cookies and trackers Login data
|
Your consent, where required |
Duration of the analysis |
|
… to manage the invoicing and payment of your transactions in La Samaritaine |
Title First name Last name Company name (if provided) Email address Purchase and reservation history |
Performance of a contract |
Invoces are kept for 10 years after the purchase |
|
… to manage tax refunds of your transactions in La Samaritaine |
Title First name Last name ID card Company name (if provided) Mailing address Purchase and reservation history |
Performance of a contract |
Six (6) months, unless there are specific, documented and approved purposes to retain cardholder data for longer |
|
… to allow you to pay in cash above 1.000 euros |
First name Last name Number of your ID card or copy of your ID for payments above 10.000 euros |
Legal obligation |
The Data will be kept five (5) years in archive |
|
… to lend you equipment (wheelchairs, pushchairs, sound guide box, magnifying glass) |
First name Last name Borrowed equipment Credit Card information |
Performance of a contract |
The form is destroyed after the return of the material In the event of non-return, it will be retained until all means of appeal have been exhausted or until full recovery has been made |
|
… to allow you to book a tour or an experience |
Title First name Last name Email address Mailing address Transaction data Mobile number Order history
|
Performance of a contract |
Time required to carry out the service and manage any possible complaints |
|
… to allow you to benefit from concierge and alteration services |
Title First name Last name Email address Any information provided by you and collected with your consent |
Performance of a contract |
The Data will be kept for a period of five (5) years from the date of collection or from the date of your last contact with DFS |
|
… to allow you to use the free wifi |
First name Last name Email address Logs
|
Performance of a contract Legal obligation |
The Data will be kept for one (1) year |
In the particular case where you wish to communicate with DFS staff through third-party instant messaging services, DFS cannot guarantee the confidentiality and security of your Data or any other information exchanged through such messaging services. Companies offering this type of messaging services are themselves responsible for processing of your Data and comply with their own data protection and confidentiality policies. In this specific context, the processing of your Data by third-party messaging services remains outside DFS’s control: DFS therefore declines any responsibility in the context of this use.
6. Cookies
Browsing on the Website results in the deposit of cookies, with your consent where required.
Cookies are stored on your device when you have browsed the DFS’s Website. Cookies are small text files which are likely to be stored in a dedicated space on the hard drive of your device (computer, tablet, smart phone, etc.) when you consult an on-line service using your browser .
The deposit of certain cookies on your device requires that you give your prior consent. Thus, as soon as you arrive on our Website, an information banner indicates that we are using this technology and that by clicking on "Accept cookies", you agree to the deposit of these cookies on your device.
The cookies used on our Website are categorised, as follows:
“Strictly necessary” cookies: DFS uses Cookies that are “strictly necessary” for the functionality of the Website’s platforms. These cookies are essential to enable users to visit the Website and fulfil express requests from the user (e.g., cookies that allow you to hold items in your cart while you shop online or cookies that temporarily store the contents of an online form).
The legal basis for this processing is our legitimate interest. A deactivation of this type of Cookies would reduces all or part of the functions of the Website.
“Statistic” or “Performance” cookies: Analytics Cookies gather general information on how users use a website, e.g. which pages they visit most frequently and whether they receive any error messages from websites. The data collected with these Cookies will not be merged with any other information on the visitors of the Website. All information collected through such cookies exclusively serves the purpose to comprehend and improve the functionality and services of the Website.
For doing so, DFS uses cookies such as:
|
Cookie |
Third party |
Privacy policy |
|
_gid; ; _gscs; _gscbrs; _gscu; _gat ; _utma; _gat_UA; _utmc ; _ga; _shopify_sa_p; _gclxxxx |
Google Inc. |
|
|
S_cc |
Adobe |
|
|
Curalate.com |
Bazaarvoice |
https://www.bazaarvoice.com/fr/legal/politique-de-confidentialite/ |
|
Inspectlet.com |
Inspectlet |
|
|
_s; _shopify_fs; _shopify_sa_t ; _y; _shopify_s; |
Shopify |
|
|
dtLatC; dtPC |
Dynatrace |
https://www.dynatrace.com/support/help/how-to-use-dynatrace/data-privacy-and-security/data-privacy/ |
|
AKA_A2 |
Akamai |
|
|
x-ms-routing-name; GRIDSUMID; UDMP_SERVER_SIGN; gs_tc |
Gridsum |
“Functional” cookies: these cookies allow the Website to remember choices you make and your preferences (for example, cookies that allow you to register/sign-up for events, products and/or services, or cookies that allow you to set the language or the currency).
DFS uses the following cookies:
|
Cookie |
Third party |
Privacy policy |
|
_pk_id* |
Matomo |
|
|
_zm_id; _gd; _ga; _gat; _zm_lev; _gid; _zm_p; _pk_id |
Zmags |
|
|
__utmc; __utmb; __utma; __utmz; _utmt; |
Jrni |
These cookies are kept for a maximum of thirteen (13) months. This period is not extended by your new visits.
“Advertising” cookies: Targeting and advertising cookies are used to better customize advertisements to your interests. They limit the number of times the same advertisement is shown to you, evaluate the efficacy of an advertising campaign, and analyse how the viewing of a certain advertisement influences the behavior of individual users. Such Cookies are usually placed by advertising networks with the consent of the respective website operator. They register a user’s visit of the website and either pass such information on to other entities, e.g. advertising companies, or directly adapt advertisements accordingly so that, based on your browsing behaviour, you will be shown exactly such advertisements as may potentially interest you.
DFS uses the following cookies for advertising:
|
Cookie |
Third party |
Privacy policy |
|
test_cookie; IDE;NID; _gat |
Google Inc. |
|
|
VISITOR_INFO1_LIVE; YSC; GPS; CONSENT |
YouTube |
https://www.youtube.com/intl/ALL_fr/howyoutubeworks/our-commitments/protecting-user-data/ |
|
Fr; _fbp |
|
|
|
Demdex; AMCV_ |
Adobe |
|
|
recommender.scarabresearch |
Scarab Research |
|
|
B |
Yahoo |
https://policies.yahoo.com/ie/fr/yahoo/privacy/index.htm?redirect=no |
|
webdissector |
Gridsum |
|
|
sessionID; CMBMP |
Ipinyou |
http://www.ipinyou.com/index.php/danyemian/145.html?admin_id=1&t=1579400606 |
You can manage your consent to the use of cookies and trackers via the cookie consent management tool chosen by DFS . This tool allows you to manage your consent for each category of cookie or tracker.
Click here to express your consent to cookies and tracking devices.
7. Data recipients
Your Data will be processed by DFS and its business partners.
In this regard, our Data is processed by the following DFS departments:
- Concierge and alteration services;
- DFS Communication Department for the management of your requests and questions, and for sending you newsletters;
- DFS Security Department for managing the cybersecurity of the Website;
- DFS Legal and Internal Control Departments for the management of any possible fraudulent acts or legal actions.
Within the framework of the provision of its services, DFS may transmit or grant access to your Data for technical, logistical or commercial reasons (clients services, hotsport wifi providers, trasporters, guides, accommodation service providers, Website security and maintenance service providers, fraud management service providers, technical service providers in charge of sending emails and newsletters, anti-spam and anti-robot service providers).
DFS may also disclose your Data to third parties if this is required by law, a statutory provision or legal decision or if such communication is required in order to protect and defend its rights.
Except for these cases, your Data will not be transferred or made accessible to any third parties, subject to any restructuring of DFS, including a total or partial asset transfer, merger, absorption, acquisition, demerger and in general any reorganisation operation, subject to appropriate security and confidentiality measures.
8. Data transfers to third countries
Since DFS is an international group and works with data processors located abroad, the recipients of your Data may also be located abroad, including outside the European Economic Area ( hereinafter, the “EEA”) in countries/regions where runs its activities such as Singapore, the People’s Republic of China (PRC), Hong-Kong, and Japan (this list is not exhaustive).
Any transfer of Data outside the EEA, notably to a state for which no adequacy decision has been reached by the European Commission under Article 45 of the GDPR, it will be governed by appropriate guarantees, notably contractual safeguards, in accordance with the regulations applying to the protection of personal data, such as the standard data protection clauses under Article 46 §2 of the GDPR.
A copy of the relevant safeguards can be obtained by writing to our Data protection officer at the addresses given in Article 2 of this Privacy and cookie Policy.
9. Your rights
In accordance with the regulations in force, you have the following rights:
- Withdrawal of consent: you can withdraw at any time your consent for of any processing of personal data based on your consent, without affecting the lawfulness of processing based on your consent before its withdrawal.
- Access: you can ask us to confirm whether we process your personal data and, as the case may be, inform you of the characterisics of such processing, allow you to access such data and give you a copy of it.
- Rectification: you can ask us to rectify or complete inaccurate or incomplete personal data.
- Erasure: you can ask us to erase your personal data in the following cases: when it is no longer necessary for the purposes of which it was collected; you have withdrawn your consent and there is no other legal basis on which your data are processed; you objected to the processing of your personal data and DFS has no compelling legitimate grounds to refuse it; your personal data has been processed unlawfully; or to comply with a legal obligation. We are not required to comply with your request notably if the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.
- Restriction: you can ask us to restrict the processing of your personal data (i.e., keep but not use your personal data) where: the accuracy of your personal data is contested; the processing is unlawful, but you do not want it to be erased; it is still necessary to establish, exercise or defend legal claims; to verify the existence overriding grounds following the exercise of your right to object.. We can continue to use your personal data following a request for restriction, where: we have your consent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.
- Portability: you can ask us to provide your personal data to you in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller, but only where the processing is based on your consent or on the performance of a contract with you, and the processing is carried out by automated means.
- Digital legacy: you have the right to define (general or specific) directives regarding the fate of your personal data afte your death.
These rights may be exercised at any time by contacting DFS’s Data Protection Officer at the addresses given in Article 2 of this Privacy and cookie Policy.
10. Right to lodge a complaint
You may contact any competent supervisory authority, such as the one in the Member State of your habitual residence, place of work or of an alleged infringement of the GDPR with any claims concerning the way in which DFS collects and processes your Data.
In France, the local supervisory authority is the French Data Protection Authority (CNIL), 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07.
11. Changes to this policy
In the event of a change to this policy, DFS will inform you of the update of its Privacy policy, by mentioning it on the Privacy policy page of its Website and/or by email.
