Jack O'Toy, as the Data Controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of personal data (RGPD).

To provide its service, Jack O'Toy collects personal data from visitors to its website www.jackotoy.fr .

The purpose of this section is to explain to customers how Jack O'Toy uses the personal data they may provide on the site.

ARTICLE 1: Who collects the personal data?

The company collecting the personal data and implementing the data processing is:

Jack O'Toy, a sole proprietorship whose registered office is located at 1339 Bis Route de Brazoux, 86550 Mignaloux-Beauvoir, France, registered in the Poitiers Trade and Companies Register under number 908 226 681 R.C.S. Poitiers.

ARTICLE 2: Purposes of data processing.

Jack O'Toy is only allowed to use the personal data of its customers if it has a valid legal basis.

Jack O'Toy ensures that it has one or more of the following legal bases:

-the performance of a contract (e.g. to process and send an order or to open and manage a Jack O'Toy account), or ;

-the fulfilment of a legal obligation (e.g. keeping invoices), or ;

-when it is in the legitimate interest of Jack O'Toy, or ;

-where the Customer has given consent to the collection of the data.

Jack O'Toy's legitimate interest must not conflict with the rights and freedoms of Customers. Examples of legitimate interests mentioned in the GDPR include fraud prevention or direct marketing.

Jack O'Toy collects and processes the personal data of its customers for the following purposes

ARTICLE 3: What rights do I have to the data?

3.1 What rights can be exercised?

Pursuant to Articles 15 to 22 of Regulation 2016/679 of 27 April 2016, any natural person whose data has been collected may exercise the following rights:

• A right of access
• A right of rectification
• A right to object to the processing of his/her data and to have his/her data deleted
• A right to oppose profiling
• A right to limit processing
• A right to data portability
• A right to formulate advance directives on the fate of one's data after death

3.2 How to exercise them?

These rights can be exercised with the company Jack O'Toy who collected the personal data in the following way:

Electronically, to the address : rgpd@jackotoy.fr

The request must indicate the name, first name, postal address, e-mail and if possible the customer reference.

If there is any doubt about the identity of the person, proof of identity may be requested.

Jack O'Toy will respond within 1 month of the exercise of the right. In some cases, due to the complexity of the request or the number of requests, this period may be extended by 2 months.

These rights may be subject to exceptions in certain cases provided for in the regulations.

In the event of a non-response or unsatisfactory response, the data subject may refer the matter to the data protection supervisory authority (the CNIL).

ARTICLE 4: To whom are the data transmitted?

Your data will be passed on to partners of Jack O'Toy who may process the data on their behalf (these are recipients) or solely on behalf of and in accordance with the instructions of Jack O'Toy (these are processors).

The data recipients are :

-payment institutions (banks)

Jack O'Toy also uses subcontractors for the following operations:

-secure payment on the website

-data hosting

-shipping your orders and parcels

-carrying out technical maintenance and development of the website, internal applications and the Jack O'Toy information system

     -the sending of commercial prospecting e-mails

ARTICLE 5: Is the data sent outside the EU?

Personal data are not transferred to companies located in countries outside the European Union.

ARTICLE 6: How long are the data kept?

Jack O'Toy has determined precise rules concerning the duration of the storage of the personal data of Customers. As a matter of principle, the data is kept for the time necessary to fulfil the purposes for which it was collected.

Unless otherwise required by law, Jack O'Toy respects the retention periods recommended by the CNIL.

The retention periods used are as follows:

-data from prospects (people who have never bought) are kept for 3 years after the last contact from the prospect

-Customer data is kept for 3 years from the last purchase

ARTICLE 7: Is data collected on minors under the age of 16?

You must be 18 years old to create an account on the Jack O'Toy website and to make purchases.

Because Jack O'Toy does not collect data from minors under the age of 16, anyone under the age of 16 should not create an account.

ARTICLE 8: What are the rules on commercial prospecting?

Jack O'Toy uses your contact information to send you targeted advertisements, including by email, postal mail, SMS, on social networks or third party websites.

Jack O'Toy complies with the rules laid down by Directive 2002/58/EC of 12 July 2022, which provides for the prior express collection of the customer's consent for the sending of commercial prospecting by electronic means (email or sms).

Thus, when you create your account on the site, you are expressly asked for your consent to receive offers from Jack O'Toy by email.

Jack O'Toy will not send you personalised email or text messages if you have not consented to them.

There is an exception where the Customer, without having given his prior consent, may nevertheless be canvassed if he is already a customer of Jack O'Toy and the purpose of the canvass is to offer similar products or services.

In any case, the customer has the possibility to oppose the reception of these solicitations by carrying out the following actions:

-when creating the account, do not check the checkbox related to prospecting

-for email, by clicking on the unsubscribe link provided in each email

-for the sms, by sending a stop SMS to the number indicated in it

-by contacting customer service

Jack O'Toy may contact you by telephone to make offers on products or services. If you do not wish to be contacted, you can register on the telephone marketing opposition list accessible on the website www.bloctel.gouv.fr .

ARTICLE 9: Does Jack O'Toy use cookies, tags and tracers?

Information relating to navigation on the site may be recorded in "Cookies" files deposited on your terminal, subject to the choices you may have expressed concerning Cookies and which you may modify at any time.

9.1 What is a cookie?

The term "cookie" encompasses several technologies used to track browsing or analyse the behaviour of the Internet user. These technologies are numerous and constantly evolving. In particular, there are cookies, tags, pixels and Javascript code.

The cookie is a small file that makes it possible to remember the terminal used by the Internet user.

9.2 Why are cookies, tags and tracers used?

The Cookies that Jack O'Toy uses allow:

pll_language: The pll_language cookie is used by Polylang to remember the language selected by the user when they return to the website, and also to obtain language information when it is not otherwise available. cookielawinfo-checkbox-analytics: This cookie is set by the GDPR cookie consent plugin. The cookie is used to store the user's consent for cookies in the "Analytics" category. cookielawinfo-checkbox-functional: The cookie is set by the GDPR cookie consent plugin to store user consent for cookies in the "Functional" category. cookielawinfo-checkbox-necessary: This cookie is set by the GDPR cookie consent plugin. It is used to store the user's consent for cookies in the "Necessary" category. cookielawinfo-checkbox-others: This cookie is set by the GDPR cookie consent plugin. This cookie is used to store the user's consent for cookies in the "Other" category. cookielawinfo-checkbox-performance: This cookie is set by the GDPR cookie consent plugin. This cookie is used to store the user's consent for cookies in the "Performance" category. CookieLawInfoConsent: Stores the default button state of the corresponding category and the CCPA state. It only works in coordination with the primary cookie. viewed_cookie_policy: This cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not the user has consented to the use of cookies. It does not store any personal data.

9.3 How to set up the deposit of cookies, tags and tracers?

In accordance with Directive 2002/58/EC of 12 July 2002, Jack O'Toy collects your prior consent to the deposit of advertising, audience measurement or social network sharing cookies.

You can choose at any time to express and modify your wishes regarding cookies, by the means described below.

9.3.1 Setting up your browser software

You can configure your browser so that cookies are saved on your terminal or, on the contrary, that they are rejected, either systematically or according to their sender. You can also configure your browser software so that you are offered the option of accepting or rejecting cookies from time to time, before a cookie is likely to be recorded in your terminal.

How do you exercise your choices, depending on the browser you use?

Each browser has a different configuration for managing cookies and your choices. This is described in the help menu of your browser, which will tell you how to change your cookie preferences.

9.3.2 Setting cookies with a tool provided by Jack O'Toy

In order to comply with the regulations, Jack O'Toy uses a tool that allows the user to configure the deposit of cookies when connecting to the site www.jackotoy.fr .

To access the list of deposited cookies and configure their deposit. The button below allows you to access this tool:

9.3.3 Opposition list to manage the deposit of cookies

You also have the possibility to object to the deposit of cookies by accessing the website

http://www.youronlinechoices.com/fr/controler-ses-cookies/ .