The personal data (hereinafter referred to as the Data) collected on the Site in order to provide the services accessible on the Site are processed by the Company Root-Me Pro in its capacity as Data Controller, in accordance with the provisions of Law no. 78-17 of 6 January 1978 as amended and EU Regulation 2016/679 on data protection of 27 April 2016.

The purpose of this policy is to inform users of the Site about the processing carried out by the Company on the basis of their data. As the content of this information may change or be updated, users are invited to consult it regularly on our Site.

In the remainder of this document, capitalised terms refer to the definitions introduced by the provisions of Article 4 of Regulation (EU) 2016/679.

1. Purpose of processing and data collected

The data collected is processed by the Company in order to provide you with its services and to enable you to purchase products online.

Processing is based on one or more of the legal bases defined within Regulation 679/2016 "RGPD", for the following purposes:

- To enable the activation of a customer account, the recording and processing of orders and their payment, based on the performance of the contract ;

- To respond to a request from our users or to send them the newsletter, on the basis of the performance of the contract;

- For the administrative management of the Company: on the basis of its legal and regulatory obligations;

- To carry out statistical studies for internal use: on the basis of legitimate interest;

- To enable browsing on the Site and the management and traceability of services ordered by the user: on the basis of legitimate interest.

The following data is processed:

- To manage the customer account: surname, first name(s), e-mail address, billing and delivery address; associated with the history of orders and any returns;

- To respond to a request from our users or to send them the newsletter: name, email address and telephone number;

- For the administrative management of the Company: accounting and financial data relating to the order;

- To carry out statistical studies for internal use: data is anonymised;

- To enable browsing on the Site: connection and usage data, computer equipment used for browsing, IP address, etc;

- To conduct optional satisfaction surveys: email address.

2. Recipients of the Data

The Data is processed by the Company's employees who have access to it within the limits of their respective responsibilities and for the purposes set out above. It may be passed on to third party service providers and subcontractors and their staff in respect of the specific services entrusted to them. In this context, these third parties are bound by strict obligations, in particular with regard to security and confidentiality.

When required by current regulations, the Company may transmit Data to bodies and authorities legally authorised to access it (in particular judicial and administrative authorities).

The Data will also be transmitted in the event of the sale of all or part of its business by the Company, as well as in the event of restructuring or reorganisation. The eventual purchaser would in turn be bound by the same obligation to preserve and modify the data with respect to the user of the Site.

3. Data retention periods

Data is kept for no longer than is necessary for the purposes set out in this policy. Beyond this period, it is deleted or anonymised for statistical purposes.

Data used to establish proof of a right or a contract, or kept to comply with a legal obligation by the Company, are archived in accordance with the provisions in force.

In all cases, the Data is kept in an active database for a defined period and then in an intermediate archive, in a secure manner.

The Company implements appropriate technical, software and physical organisational measures to preserve and guarantee the security, integrity and confidentiality of the data processed.

4. Rights of the Data Subject

In accordance with the applicable regulations, users, in their capacity as Data Subjects, have the right to access and rectify Data concerning them.

Where applicable, they also have a right to portability and deletion, a right to limit Processing, a right to object and the right to define specific directives concerning the fate of their data after death, it being specified that these rights are exercised only and only under the conditions strictly defined by the applicable regulations.

Where Data is processed on the basis of consent, consent may be revoked at any time without this affecting the lawfulness of processing previously carried out on this basis.

These rights may be exercised at the following address: confidentialite@pro.root-me.org 

Users also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL).

5. Security

The Company undertakes to take all necessary precautions to protect the security of the Information and in particular to ensure that it is not disclosed to unauthorised persons.

6. Summary table

Purpose of processing	Legal basis	Data retention period
Customer account and order management	Execution of the contract	During the period of registration in the active database, then archived for 5 years after termination of the account.
Management of payments	Execution of the contract	Bank details are kept by our secure payment service provider for the periods defined by law.
prospecting by third-party contacts	Consent	3 years after the user's last activity
Management of contact requests	Fulfilment of a contract	while the request is being processed
Sending of the Newsletter	Fulfilment of a contract	for the duration of the subscription to the Newsletter
Accounting	Legal obligation	as an active base, then archiving for a total period of 10 years from the end of the financial year concerned
Follow-up of requests for access to Data	Legal obligation	On an active basis for 1 year, then archived for 5 years from the date of the request

 

Cookie management

The Site uses cookies to optimize its use, to offer different functionalities to Site users and to improve the content of the Site.

1. What is a "Cookie"?

A cookie is a file that records information relating to the browsing of the user's computer on the Site, such as the user's IP address, the identification of the user's Internet service provider, the user's operating system and the date and time of access. Cookies are in no way likely to damage the user's terminal.

2. Cookies used on the Site

- Cookies necessary for the operation of the Site

These cookies are necessary for the proper operation of the Site and to optimise its use. In accordance with current regulations, these cookies do not require the user's consent to be used.

- Cookies for audience measurement

Audience measurement services are used to generate visitor statistics, which are useful for improving the Site. These cookies are implemented by a module enabling them to be managed. In accordance with applicable regulations, they are used with the user's consent.

- Targeted advertising cookies

These cookies make it possible to display more relevant advertising from our partners on the Internet based on the user's browsing habits. They are used with the user's consent.

- Cookies implemented by services offered by third-party sites

These cookies enable content hosted by third parties to be viewed directly or content on the Site to be shared. These include, in particular, social network sharing buttons. With the user's consent, these functions use third-party cookies deposited directly by these services in accordance with their confidentiality policy, which the user is invited to consult.

3. Cookie retention period

Cookies and tracers used on the Site are kept for a maximum of 13 months or in accordance with the periods defined below.

4. Cookie management

The user may deactivate these cookies at any time, free of charge, using the deactivation options offered and described below, bearing in mind that this may reduce or prevent access to all or part of the services offered by the Site.

If the user refuses to save cookies on his/her terminal or browser, or if the user deletes the cookies saved there, the user is informed that his/her browsing and experience on the Site may be limited. This could also be the case when the Site or one of its service providers cannot recognise, for technical compatibility purposes, the type of browser used by the terminal, the language and display settings or the country from which the terminal appears to be connected to the Internet.

Where applicable, the Site declines all responsibility for the consequences linked to the degraded operation of the Site and any services offered by the Site, resulting from (i) the refusal of Cookies by the user (ii) the impossibility for the Site to record or consult the Cookies necessary for their operation due to the user's choice. For the management of Cookies and user choices, the configuration of each browser is different. It is described in the browser's help menu, which will indicate how the user can modify his or her wishes with regard to Cookies.

The cookie management interface allows users to define their usage choices. Consent to the placement of a cookie may be withdrawn at any time. This withdrawal does not compromise the lawfulness of the processing based on the consent given prior to the withdrawal.

Users may accept or refuse the installation of cookies or configure them as they wish by selecting the appropriate browser settings.

 5. Summary table of cookies

Required cookies for the functioning of the shop

 

Name	Function	Duration
_ab	Use linked to access to the administrator interface.	2 years
_customer_account_shop_sessions	Use of the _secure_account_session_id cookie to track user sessions for new customer accounts	30d
_secure_account_session_id	Use to track user sessions for new customer accounts	30d
_secure_session_id	Used for browsing in an online shop.	24 h
_shopify_country	Use linked to payment.	session
_shopify_m	Used to manage customer confidentiality parameters.	1 year
_shopify_tm	Used to manage customer confidentiality parameters.	30 min
_shopify_tw	Used to manage customer confidentiality parameters.	2 weeks
_storefront_u	Used to update customer account information.	1 min
_tracking_consent	Tracking preferences.	1 year
_cmp_a	Used to manage customer confidentiality parameters.	1 d
c	Use linked to payment.	1 year
cart	Use linked to the shopping basket.	2 weeks
cart_currency	Use linked to the shopping basket.	2 weeks
cart_sig	Use linked to payment.	2 weeks
cart_ts	Use linked to payment.	2 weeks
cart_ver	Use linked to the shopping basket.	2 weeks
checkout	Use linked to payment.	4 weeks
checkout_token	Use linked to payment.	1 year
customer_account_locale	Use for new customer accounts	1 year
dynamic_checkout_shown_on_cart	Use linked to payment.	30 min
hide_shopify_pay_for_checkout	Use linked to payment.	session
keep_alive	Use linked to the location of buyers.	2 weeks
master_device_id	Use linked to merchant identifiers.	2 years
previous_step	Use linked to payment.	1 year
discount_code	Use linked to payment.	session
remember_me	Use linked to payment.	1 year
secure_customer_sig	Use linked to customer IDs.	1 year
shopify_pay	Use linked to payment.	1 year
shopify_pay_redirect	Use linked to payment.	30 minutes, 3 weeks or 1 year according to value
shop_pay_accelerated	Use linked to payment.	1 year
source_name	Used with mobile applications to personalise payment if the shop is viewed from a compatible mobile application.	session
storefront_digest	Use linked to customer IDs.	2 years
tracked_start_checkout	Use linked to payment.	1 year
checkout_session_lookup	Use linked to payment.	3 weeks
checkout_prefill	Use linked to payment.	5 months
checkout_queue_token	Use linked to payment.	1 year
checkout_queue_checkout_token	Use linked to payment.	1 year
checkout_worker_session	Use linked to payment.	3d
checkout_session_token	Use linked to payment.	3 weeks
checkout_session_token_<<token>>	Use linked to payment.	3 weeks
cookietest	Use to ensure the correct operation of our systems.	1m
order	Use in connection with the order status page.	3 weeks
identity-state	Use related to customer authentication	24 h
identity-state-<<token>>	Use related to customer authentication	24 h
identity_customer_account_number	Use related to customer authentication	12 weeks
card_update_verification_id	Use related to payment.	20 months
customer_account_new_login	Use linked to customer authentication.	20 months
customer_account_preview	Use linked to customer authentication.	7 days
customer_payment_method	Use linked to payment.	1 h
customer_shop_pay_agreement	Use linked to payment.	20 months
pay_update_intent_id	Use linked to payment.	20 months
localization	Use linked to payment.	2 weeks
profile_preview_token	Use linked to payment.	5 weeks
login_with_shop_finalize	Use linked to customer authentication.	5 m
preview_theme	use linked to the theme editor	session
shopify-editor-unconfirmed-settings	use linked to the theme editor	16 h
wpm-test-cookie	Use to ensure the proper functioning of our systems.	session

 

Reports and data analysis

Name	Function	Duration
_landing_page	Landing page tracking.	2 weeks
_orig_referrer	Landing page tracking.	2 weeks
_s	Analysis of data supplied by Shopify.	30 min
_shopify_d	Analysis of data supplied by Shopify	session
_shopify_fs	Analysis of data supplied by Shopify	30 min
_shopify_s	Analysis of data supplied by Shopify	30 min
_shopify_sa_p	Analysis of marketing and sponsorship data provided by Shopify.	30 min
_shopify_sa_t	Analysis of marketing and sponsorship data provided by Shopify.	30 min
_shopify_y	Analysis of data supplied by Shopify.	1 year
_y	Analysis of data supplied by Shopify.	1 year
_shopify_ga	Shopify and Google Analytics.	session
customer_auth_provider	Analysis of data supplied by Shopify.	session
customer_auth_session_created_at	Analysis of data supplied by Shopify.	session
unique_interaction_id	Analysis of data supplied by Shopify.	10 min