Latest update: 18 July 2025
This privacy policy applies to visitors (hereinafter referred to as the “Visitors” or “You”) of the website (accessible through the following links: www.valae-cosmetiques.fr and www.valae-cosmetiques.com, hereinafter referred to as the “Website”) of VALAE, a simplified limited company (société par actions simplifiée), registered with the Trade Register of Toulouse, France, under number 941 327 272, with its head office located at 188 chemin de la Masquère Zac de la Masquère – 31750 Escalquens, France (hereinafter referred to as “VALAE”).
VALAE is committed to protecting the privacy and personal data of Visitors (hereinafter referred to as the “Data”). Therefore, it has adopted and abides by a personal data processing policy that complies with the laws and regulations in force, in particular the EU General Data Protection Regulation No. 2016/679 of 27 April 2016 (the “GDPR”) and the amended French Data Protection Act of 1978 (together, hereinafter referred to as the “Applicable Regulations”).
The purpose of this privacy and personal data protection policy (the “Privacy Policy”) is to set out the terms and conditions under which VALAE processes Data relating to Visitors.
VALAE reserves the right to amend this Privacy Policy at any time and undertakes to inform Visitors of such changes via a notification on the Website.
1. Data Controller
VALAE shall be the Data Controller for the Visitor Data collected and processed under the terms and conditions of this Privacy Policy.
You can contact VALAE using the contact details provided in Article 9 “Contact” of this Privacy Policy.
2. Sources and categories of personal data
2.1. Source and collection of personal data
VALAE collects Visitor Data when Visitors browse the Website. In particular, VALAE collects and processes Visitor Data in the following cases:
- when Visitors contact VALAE using the “Contact Us” form available on the Website (the “Contact Form”);
- in any exchanges with Visitors via the contact address “commande@valae-cosmetiques.fr”, in particular to provide information about the products marketed by VALAE;
- when Visitors browse the Website (especially through Cookies); and/or
- through statistical analysis of the Data.
VALAE also processes all Data communicated spontaneously and voluntarily, particularly when Visitors contact VALAE.
2.2. Categories of personal data
VALAE collects and processes the following categories of Data:
Data processed when Visitors contact VALAE using the Contact Form available on the Website:
Title, full name, phone number and email address of the Visitor.
Data processed during exchanges with You, through the Contact Form or the contact address “commande@valae-cosmetiques.fr”:
Any item of Data that You would spontaneously communicate to us in your message.
Data processed when browsing the Website:
- Data relating to the type of device used, IP address, operating system, browser type and language, mobile device and mobile operating system identifiers, IP or MAC address.
- Data relating to your search queries on the Website and how You browse the Website.
- Data collected by cookies installed on our Website, such as the pages viewed. For further information on VALAE’s use of cookies, please refer to the cookie management policy (hereinafter referred to as the “Cookie Management Policy”) available here: Cookies Management Policy.
2.3. Mandatory provision of Data
Some items of Data may be mandatory for browsing the Website or contacting VALAE on the Website. When using the “Contact Us” form, the mandatory Data is indicated on our forms with an asterisk. If you do not provide the mandatory Data, we will not be able to offer the relevant services.
2.4. Accuracy of Data
VALAE shall use its best efforts to keep the Data accurate and complete. To make sure that the Data we have is up to date, You can notify us of any changes in your contact details or any other item of Data by contacting VALAE at the contact details mentioned in Article 9 “Contact” below.
2.5. Location of Data
The Data collected on our Website shall be hosted in France.
3. Purposes and legal basis for processing
The Data shall be processed by VALAE on the ground of the legal basis and for the purposes described below:
On the basis of the consent You have given us with regard to the Data freely communicated by You in the Contact Form or in emails sent via the address “commande@valae-cosmetiques.fr” or as part of cookie settings:
Management of communications with Visitors;
Provision of information on the products marketed by VALAE;
Cookie management requiring the Visitor’s prior consent.
As part of the performance of a contract for the provision of services:
Management of the relationship with Visitors: management of the acceptance of this Privacy Policy and the Cookie Management Policy;
As part of our legitimate interest:
Compilation of statistics on the use of the Website; and
Availability, maintenance and improvement of the Website.
As part of our legal obligations:
Compliance with the legal and regulatory obligations to which VALAE is subject;
Management of Visitor’s requests regarding their rights in relation to personal data.
4. Communication of the Data
The Data collected and processed may be disclosed:
- To authorised and relevant persons within VALAE;
- To service providers or subcontractors contracted by VALAE to fulfil the purposes set out in Article 3 of this Privacy Policy, in particular to ALWAYSDATA, the Website hosting provider, whose head office is located at 91 RUE DU FAUBOURG SAINT-HONORÉ – 75008 PARIS – France, and whose unique identification number is Paris B 492 893 490 R.C.S.
- To administrative and judicial authorities and, more generally, public organisations in connection with VALAE’s legal obligations or to enable VALAE to defend its rights and interests;
In the event of the sale or transfer of VALAE’s business or part thereof, and when your Data relates to the part sold or transferred.
5. Security of the Data
VALAE shall implement organisational, technical, software and physical security measures to protect the Personal Data against any loss, unauthorised access, disclosure or alteration.
As Personal Data is confidential, VALAE shall restrict access to it to only those employees of the company or service providers who need it in order to carry out the processing.
All persons with access to Personal Data shall be bound by a duty of confidentiality and shall be liable to penalties should they fail to comply with these obligations.
When VALAE uses subcontractors or service providers to whom it may transmit Personal Data, such communication shall be covered by a contract in order to ensure the protection of Personal Data.
6. Transfer of Data outside the European Economic Area
Your Data will not be transferred to countries outside the European Economic Area (hereinafter referred to as the “EEA”).
Should Personal Data be transferred outside the European Union, VALAE shall inform you in advance and take all measures to ensure that such transfers of data outside the European Union are governed by adherence to an adequacy decision by the European Commission, the conclusion of standard contractual clauses of the European Commission, or any other appropriate safeguards provided for in Article 46 of the GDPR.
7. Storage of the Data
VALAE shall store your Data for as long as necessary to fulfil the purposes described above, and, where applicable, any additional periods required by law for archiving or retaining certain data and any limitation period. At the end of the processing period, the Data will be either deleted or anonymised by VALAE.
In this context, VALAE applies the following storage periods:
The Data communicated when contacting VALAE will be deleted three years after your last contact with VALAE;
In the event of any complaint, we will store the Data relating to said complaint for as long as necessary to process said complaint and for the applicable limitation periods;
Personal Data necessary and/or facilitating browsing of the Website and collected during browsing on the Website will, depending on the circumstances, be stored for a maximum period of one (1) year or for the duration of browsing on the Website.
8. Visitor’s rights
Visitors are informed that, under the terms and conditions of the GDPR and applicable laws in France, they have the following rights:
- Right of access: the right to be informed about how Personal Data is processed and (i) the right to obtain confirmation that Personal Data is processed by VALAE and, where applicable, (ii) the right to access this data and obtain a copy of it;
- Right to rectification: the right to obtain the rectification of inaccurate Personal Data concerning them, and the right to have incomplete data completed, by providing an additional statement. If this right is exercised, VALAE undertakes to communicate any rectification to all recipients of the Personal Data;
Right to erasure: the right to obtain the erasure of Personal Data. However, this is not an absolute right and VALAE may, for legal or legitimate reasons, retain the User’s data;
Right to restriction of processing: the right to obtain restriction of Personal Data processing;
Right to portability: the right to receive the Personal Data provided to VALAE, in a structured, commonly used, machine-readable format, for personal use or to transmit such data to a third party of their choosing;
Right to object to processing: the right to object, at any time, to the processing of Personal Data, when processing is based on VALAE’s legitimate interest or a task carried out for reasons of public interest and when processing is done for direct marketing purposes. This is not an absolute right and VALAE may, for legal or legitimate reasons, reject such request to object to processing;
Right to withdraw consent at any time: withdrawal of consent does not compromise the lawfulness of the processing based on consent and carried out prior to such withdrawal;
Right to lodge a complaint with the CNIL (French Data Protection Agency): the right to lodge a complaint with the CNIL, whose website is available at the following address http://www.cnil.fr, and whose head office is located at 3 Place de Fontenoy, 75007 Paris, France. However, we recommend You contact us before lodging a complaint with the CNIL if You feel that we have not responded adequately to your request;
The right to give instructions regarding the use of Personal Data after death: the right to give instructions to VALAE regarding the use of Personal Data in the event of death.
Visitors may exercise their rights free of charge by contacting VALAE at the address indicated in Article 9 “Contact” below, except in the case of clearly excessive requests, in which case fees may apply.
If, after contacting VALAE, You consider that your “Data Protection” rights have not been respected, you can submit a complaint online to the CNIL at www.cnil.fr.
9. Contact
For further information on the processing of your Data or to exercise your rights, You can contact us at the following address:
VALAE, single-shareholder simplified limited company (société par actions simplifiée unipersonnelle) with a share capital of € 1,000
Head office: 188 chemin de la Masquère, Zac de la Masquère, 31750 Escalquens, France
Registered with the Trade Register of Toulouse, France, under number 941 327 272
EU VAT number: FR70941327272
Email: commande@VALAE-cosmetiques.fr
Phone number: +33 (0)5.54.55.85.80