Privacy and cookie policy

This policy provides you with information about how DFS France and DFS Group Limited collect your personal data, and about the cookies which are used by DFS France and DFS Group Limited on websites belonging to DFS.

1. Identity and contact details of the data controller

This policy outlines the way in which the company DFS France SAS, a limited liability company whose registered office is at 21 rue de la Monnaie, Paris 75001 listed in the Register of Commerce and Companies of Paris under No. 537 758 583 (hereinafter, “DFS France”), and DFS Group, whose registered office is at 8/F, Chinachem Golden Plaza 77 Mody road, Tsimshatsui East, Kowloon, Hong Kong, as joint controllers (“DFS”), collect and process the personal data which concerns you ( hereinafter, your “Data”)

The provisions of Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation or “GDPR”), as well as the provisions of the French Act n° 78-18 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended (hereinafter, the “French Data Protection Act”) apply to the processing of your Data by DFS . Terms used for the purposes of this policy have the meanings given to them by the GDPR.

2. Identity and contact details of the Data protection officer (DPO)

The company TNP Consultants SAS is the Data protection officer for DFS .
If you have any questions relating to the collection and/or processing of your Data by DFS France, please contact the data protection officer at the following address : dpofrance@dfs.com

3. Data protection collection

The websites www.dfs.com/en/samaritaine and https://shop-samaritaine.dfs.com/ (hereinafter, the “Websites”) allows DFS to collect your Data. Your Data may also be collected by DFS applications.

The staff in Samaritaine may also collect your Data and carry out Data processing within the framework of their activities.

Your Data is notably obtained from:

• Loyal T sign up and upgrade;
• Book an experience;
• Concierge and alteration services;
• Reservation and purchase of products,
• Product delivery;
• Click & Collect services;
• Refund tax services;
• Gift cards
• Loan of equipment.

The DFS customer services department may also collect and process your Data when you contact it with your requests.

Children Data
Protecting the safety and privacy of children is very important to DFS. We do not knowingly collect or use the Data of minors under the age of majority in accordance with local legislations in force.
If you are under the minimum age requirement, please do not submit any Data without the express consent and participation of your parent or guardian.
If you believe that we have collected Data about a minor without such consent, please contact us at dpofrance@dfs.com and we will delete this information.

4. Processed Data that we collect

The Data which relates to you and which is collected by DFS is mainly:

• First name and last name;
• Civil status;
• Company name;
• Email address;
• Mailing address;
• Mobile and telephone numbers;
• Contact preferences;
• Date of birth;
• Bank details in the context of sales;
• Purchase and reservation history;
• Preferences and interests;
• IP address;
• Cookies and trackers;
• Login data.

5. For which purpose do we collect your personal data, on which legal basis and for how long ?

Your Data is either:

• collected based on your consent; or
• required for the completion of your orders according to a contract; or
• collected for the purpose of pursuing a legitimate interest of DFS (e.g. the development of our commercial activity or to prevent fraud and counterfeiting)
• collected to fulfil DFS legal requierements.

Your Data is therefore collected and/or processed notably for the following purposes:

Purposes	Personal data collected	Legal basis	Retention period
… to answer your questions sent via the “Contact us” form available on our Website	Title First name Last name Email Mobile number (optional) Country Request content Loyal T account number (optional)	It is in our legitimate interest to respond to your requests to ensure your satisfaction and to maintain our relationship.	Time required to process the request
… to enable you to create a “Loyal T” account and thus be part of the DFS membership program	Title First name Last name Email address Mailing address Mobile number Date of birth (optional)	Performance of a contract	As long as your account remains active, on the condition that you do not close it (for more information, please see the Loyal T terms and conditions). If your account remains inactive for a period of five (5) years, DFS will contact you to determine whether you wish to maintain it or not. Otherwise your account will be closed and your Data erased
… to allow you to create a wish list via the Website or via other applications	Title First name Last name Email address Mobile number	Performance of a contract	This data will be kept for a maximum of 30 days
… to send you information on our offers, products, latest news and events (newsletters, invitations to events organised by DFS , including private sales and other news publications)	Title First name Last name Email address Mailing address Mobile number	Your consent, where required.	Five (5) years from their collection or your last purchase or until you unsubscribe
… to manage your orders and to access to your order history on our Website.	Title First name Last name Email address Mailing address Transaction data Mobile number Order history	Performance of a contract	As long as your account remains active, on condition that you do not close it
… to manage the delivery of your purchases. The data is collected by DFS and sent to TopChrono to process the delivery. For more information on this processing please consult TopChrono privacy policy.	Title First name Last name Email address Mailing address Mobile number	Performance of a contract	The delivery forme is kept five (5) years in archive
… to manage your online reservation, ( on our Website or via Wechat )	Title First name Last name Email address Mailing address Mobile number Contact or reservation references	Performance of a contract	Until the purchase is made or up to 30 days
… to ensure the security of online transactions, prevent fraud and payment incidents (see our e-commerce General Terms and Conditions  for more details)	Identification details Billing informations (transaction details and credit card number)	Legal obligations It is also in our legitimate interest to make sure that our transactions are secure.	Your data will be erased within a year after the order
… to manage, optimise and personalize customer relations (notably within the framework of the management of complaints and the after-sales service)	Title First name Last name Mailing address Request	Performance of a contract	Time required to process the request
… to save your details and usage preferences for our Website in order to optimize your navigation	Cookies and trackers Login data	Your consent, where required It is also in our legitimate interest to offer a better user experience on our Website.	Until you withdraw your consent and no later than 13 months
… to manage retargeting tools and suggest targeted advertising	Cookies and trackers	Your consent, where required	Until you withdraw your consent and no later than 13 months
… to organize DFS private sales and other events: your Data may then be processed in order to fulfill DFS’s legitimate interest in promoting its products and activities. Thus, DFS uses your contact Data to inform you about DFS news, to select guests for DFS events according to the nature of the relationship you have with DFS (customer, LVMH Group employee, VIP guest, etc.), the history of relationships (e.g. participation in other sales or events, purchasing history, etc.)	Title First name Last name Email adress Mailing address Mobile number Loyal T number Purchase and reservation History	Your consent, where required	The Data will be kept for a period of five (5) years from the date of collection or from the date of your last contact with DFS Before the expiry of this period, DFS may contact you again to find out whether you wish to continue to receive communications relating to our offers, products, news and events
… to carry out statistics, segmentations and marketing analysis following your visits to La Samaritaine, your visits to our Website, or your use of applications , in order to send you personalized messages and to implement an adapted relational program	Cookies and trackers Login data	Your consent, where required It is also in our legitimate interest to understand better our customers and to contact them more efficiently	Duration of the analysis
… to manage the invoicing and payment of your transactions in La Samaritaine	Title First name Last name Company name (if provided) Email address Purchase and reservation history	Performance of a contract	Invoces are kept for 10 years after the purchase
… to manage tax refunds of your transactions in La Samaritaine	Title First name Last name ID card Company name (if provided) Mailing address Purchase and reservation history	Performance of a contract	Six (6) months, unless there are specific, documented and approved purposes to retain cardholder data for longer
… to allow you to pay in cash above 1.000 euros	First name Last name Number of your ID card or copy of your ID for payments above 10.000 euros	Legal obligation	The Data will be kept five (5) years in archive
… to lend you equipment (wheelchairs, pushchairs, sound guide box, magnifying glass)	First name Last name Borrowed equipment Credit Card information	Performance of a contract	The form is destroyed after the return of the material In the event of non-return, it will be retained until all means of appeal have been exhausted or until full recovery has been made
… to allow you to book a tour or an experience	Title First name Last name Email address Mailing address Transaction data Mobile number Order history	Performance of a contract	Time required to carry out the service and manage any possible complaints
… to allow you to benefit from concierge and alteration services	Title First name Last name Email address Any information provided by you and collected with your consent	Performance of a contract	The Data will be kept for a period of five (5) years from the date of collection or from the date of your last contact with DFS
… to allow you to use the free wifi	First name Last name Email address Logs	Performance of a contract Legal obligation	The Data will be kept for one (1) year

In the particular case where you wish to communicate with DFS staff through third-party instant messaging services, DFS cannot guarantee the confidentiality and security of your Data or any other information exchanged through such messaging services. Companies offering this type of messaging services are themselves responsible for processing of your Data and comply with their own data protection and confidentiality policies. In this specific context, the processing of your Data by third-party messaging services remains outside DFS’s control: DFS therefore declines any responsibility in the context of this use.

6. Cookies

Browsing on the Website results in the deposit of cookies, with your consent where required.

Cookies are stored on your device when you have browsed the DFS’s Website. Cookies are small text files which are likely to be stored in a dedicated space on the hard drive of your device (computer, tablet, smart phone, etc.) when you consult an on-line service using your browser .

The deposit of certain cookies on your device requires that you give your prior consent. Thus, as soon as you arrive on our Website, an information banner indicates that we are using this technology and that by clicking on "Accept cookies", you agree to the deposit of these cookies on your device.

The cookies used on our Website are categorised, as follows:

“Strictly necessary” cookies: DFS uses Cookies that are “strictly necessary” for the functionality of the Website’s platforms. These cookies are essential to enable users to visit the Website and fulfil express requests from the user (e.g., cookies that allow you to hold items in your cart while you shop online or cookies that temporarily store the contents of an online form).

The legal basis for this processing is our legitimate interest. A deactivation of this type of Cookies would reduces all or part of the functions of the Website.

“Statistic” or “Performance” cookies: Analytics Cookies gather general information on how users use a website, e.g. which pages they visit most frequently and whether they receive any error messages from websites. The data collected with these Cookies will not be merged with any other information on the visitors of the Website. All information collected through such cookies exclusively serves the purpose to comprehend and improve the functionality and services of the Website.
For doing so, DFS uses cookies such as:

Cookie	Third party	Privacy policy
_gid; ; _gscs; _gscbrs; _gscu; _gat ; _utma; _gat_UA; _utmc ; _ga; _shopify_sa_p; _gclxxxx	Google Inc.	https://support.google.com/analytics/answer/6004245?hl=en
S_cc	Adobe	https://www.adobe.com/fr/privacy/policy.html
Curalate.com	Bazaarvoice	https://www.bazaarvoice.com/fr/legal/politique-de-confidentialite/
Inspectlet.com	Inspectlet	https://www.inspectlet.com/terms-of-service#privacy
_s; _shopify_fs; _shopify_sa_t ; _y; _shopify_s;	Shopify	https://www.shopify.fr/legal/confidentialite
dtLatC; dtPC	Dynatrace	https://www.dynatrace.com/support/help/how-to-use-dynatrace/data-privacy-and-security/data-privacy/
AKA_A2	Akamai	https://www.akamai.com/fr/fr/privacy-policies/
x-ms-routing-name; GRIDSUMID; UDMP_SERVER_SIGN; gs_tc	Gridsum	https://www.gridsum.com/

“Functional” cookies: these cookies allow the Website to remember choices you make and your preferences (for example, cookies that allow you to register/sign-up for events, products and/or services, or cookies that allow you to set the language or the currency).
DFS uses the following cookies:

Cookie	Third party	Privacy policy
_pk_id*	Matomo	https://fr.matomo.org/privacy-policy/
_zm_id; _gd; _ga; _gat; _zm_lev; _gid; _zm_p; _pk_id	Zmags	https://www.creatorbyzmags.com/privacy-policy
__utmc; __utmb; __utma; __utmz; _utmt;	Jrni	https://www.jrni.com/privacy

These cookies are kept for a maximum of thirteen (13) months. This period is not extended by your new visits.

“Advertising” cookies: Targeting and advertising cookies are used to better customize advertisements to your interests. They limit the number of times the same advertisement is shown to you, evaluate the efficacy of an advertising campaign, and analyse how the viewing of a certain advertisement influences the behavior of individual users. Such Cookies are usually placed by advertising networks with the consent of the respective website operator. They register a user’s visit of the website and either pass such information on to other entities, e.g. advertising companies, or directly adapt advertisements accordingly so that, based on your browsing behaviour, you will be shown exactly such advertisements as may potentially interest you.

DFS uses the following cookies for advertising:

Cookie	Third party	Privacy policy
test_cookie; IDE;NID; _gat	Google Inc.	https://policies.google.com/privacy
VISITOR_INFO1_LIVE; YSC; GPS; CONSENT	YouTube	https://www.youtube.com/intl/ALL_fr/howyoutubeworks/our-commitments/protecting-user-data/
Fr; _fbp	Facebook	https://fr-fr.facebook.com/policy.php
Demdex; AMCV_	Adobe	https://www.adobe.com/fr/privacy.html
recommender.scarabresearch	Scarab Research	https://www.scarabresearch.com/
B	Yahoo	https://policies.yahoo.com/ie/fr/yahoo/privacy/index.htm?redirect=no
webdissector	Gridsum	http://www.dissectorgridsum.com/products/2019-08-28/7.html
sessionID; CMBMP	Ipinyou	http://www.ipinyou.com/index.php/danyemian/145.html?admin_id=1&t=1579400606

Facebook Pixel: We utilize “Facebook Pixel” of Facebook Ireland Ltd. The Facebook pixel enables us to group the visitors to our website into specific target groups to have relevant advertisements (“ads”) displayed to you on Facebook. We do not have access to the data collected (e.g. IP addresses, information on the web browser, location of the website, buttons you clicked on, Pixel IDs and other features), we may only use it to display certain ads.

If you have a Facebook account and are logged in, your visit to this Website will be associated with your Facebook user account.

We also use Facebook’s remarketing feature “Custom Audiences”. This feature enables the display of interest-based ads (“Facebook Ads”) to users of our website that are visiting Facebook or other websites that use this function. We pursue the interest of displaying ads to you that are relevant to your interests to provide you with a more interesting experience on our website.

Your browser automatically establishes a direct connection with the Facebook server to exchange the relevant data. We have no control over the extent and further processing of the data collected by Facebook using this tool and therefore we provide the information available to us: the integration of Facebook Custom Audiences provides Facebook with the information that you visited the relevant web page or clicked on one of our ads. In case you are logged into a “Facebook” service, Facebook can associate your visit with your account. Even if you do not have a Facebook account or are not logged in, there is a possibility that the provider ascertains your IP address and other identifiers and stores them.

If you have given your consent, we might pass your telephone number or e-mail address to Facebook to be able to display ads that are relevant to your interests.

Find out more about how the Facebook pixel is used for advertisement campaigns at https://fr-fr.facebook.com/business/help/742478679120153id=1205376682832142.

Find more information on Facebook’s data policy at https://www.facebook.com/policy.php.

DFS processes your personal data for the purposes of advertising, market research and demand-oriented offers designed by us and Facebook.

The legal basis for this processing is your consent given when you click on the cookie banner displayed when accessing our Website.

If you are logged in to Facebook, you can adjust your Facebook ads settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

You can manage your consent to the use of cookies and trackers via the cookie consent management tool chosen by DFS . This tool allows you to manage your consent for each category of cookie or tracker.

Click here to express your consent to cookies and tracking devices.

7. Data recipients

Your Data will be processed by DFS and its business partners.

In this regard, our Data is processed by the following DFS departments:

• Concierge and alteration services;
• DFS Communication Department for the management of your requests and questions, and for sending you newsletters;
• DFS Security Department for managing the cybersecurity of the Website;
• DFS Legal and Internal Control Departments for the management of any possible fraudulent acts or legal actions.

Within the framework of the provision of its services, DFS may transmit or grant access to your Data for technical, logistical or commercial reasons (clients services, hotsport wifi providers, trasporters, guides, accommodation service providers, Website security and maintenance service providers, fraud management service providers, technical service providers in charge of sending emails and newsletters, anti-spam and anti-robot service providers).

DFS may also disclose your Data to third parties if this is required by law, a statutory provision or legal decision or if such communication is required in order to protect and defend its rights.

Except for these cases, your Data will not be transferred or made accessible to any third parties, subject to any restructuring of DFS, including a total or partial asset transfer, merger, absorption, acquisition, demerger and in general any reorganisation operation, subject to appropriate security and confidentiality measures.

8. Data transfers to third countries

Since DFS is an international group and works with data processors located abroad, the recipients of your Data may also be located abroad, including outside the European Economic Area ( hereinafter, the “EEA”) in countries/regions where runs its activities such as Singapore, the People’s Republic of China (PRC), Hong-Kong, and Japan (this list is not exhaustive).

Any transfer of Data outside the EEA, notably to a state for which no adequacy decision has been reached by the European Commission under Article 45 of the GDPR, it will be governed by appropriate guarantees, notably contractual safeguards, in accordance with the regulations applying to the protection of personal data, such as the standard data protection clauses under Article 46 §2 of the GDPR.

A copy of the relevant safeguards can be obtained by writing to our Data protection officer at the addresses given in Article 2 of this Privacy and cookie Policy.

9. Your rights

In accordance with the regulations in force, you have the following rights:

• Withdrawal of consent: you can withdraw at any time your consent for of any processing of personal data based on your consent, without affecting the lawfulness of processing based on your consent before its withdrawal.
• Access: you can ask us to confirm whether we process your personal data and, as the case may be, inform you of the characterisics of such processing, allow you to access such data and give you a copy of it.
• Rectification: you can ask us to rectify or complete inaccurate or incomplete personal data.
• Erasure: you can ask us to erase your personal data in the following cases: when it is no longer necessary for the purposes of which it was collected; you have withdrawn your consent and there is no other legal basis on which your data are processed; you objected to the processing of your personal data and DFS has no compelling legitimate grounds to refuse it; your personal data has been processed unlawfully; or to comply with a legal obligation. We are not required to comply with your request notably if the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.
• Restriction: you can ask us to restrict the processing of your personal data (i.e., keep but not use your personal data) where: the accuracy of your personal data is contested; the processing is unlawful, but you do not want it to be erased; it is still necessary to establish, exercise or defend legal claims; to verify the existence overriding grounds following the exercise of your right to object.. We can continue to use your personal data following a request for restriction, where: we have your consent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.
• Portability: you can ask us to provide your personal data to you in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller, but only where the processing is based on your consent or on the performance of a contract with you, and the processing is carried out by automated means.
• Digital legacy: you have the right to define (general or specific) directives regarding the fate of your personal data afte your death.

These rights may be exercised at any time by contacting DFS’s Data Protection Officer at the addresses given in Article 2 of this Privacy and cookie Policy.

10. Right to lodge a complaint

You may contact any competent supervisory authority, such as the one in the Member State of your habitual residence, place of work or of an alleged infringement of the GDPR with any claims concerning the way in which DFS collects and processes your Data.

In France, the local supervisory authority is the French Data Protection Authority (CNIL), 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07.

11. Changes to this policy

In the event of a change to this policy, DFS will inform you of the update of its Privacy policy, by mentioning it on the Privacy policy page of its Website and/or by email.