Personal data protection

We undertake to ensure that the collection and processing of your data, carried out from the https://www.my-new-design.com/fr/content/5-protection-des-donnees-personnelles website, complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

This policy informs you about how My New Design, its subcontractors and its potential partners process your personal data.

This policy is notably applicable to customers and users of My New Design's offers and services.

It may be supplemented by specific information brought to the attention of the user, concerning a particular offer or service.

Form and online service

Each form or online service limits the collection of personal data to what is strictly necessary (data minimisation) and notably indicates:

• the purposes of collecting this data;
• whether this data is mandatory or optional for processing your request;
• who may have access to it (primarily My New Design, unless specified in the form when transmission to a third party is necessary for processing your request);
• your rights regarding personal data protection and how to exercise them with the CNIL.

Personal data collected within the framework of services offered on https://www.my-new-design.com/fr/content/5-protection-des-donnees-personnelles are processed according to secure protocols and allow My New Design to manage requests received in its IT applications.

Each individual has a right to access, rectify, and delete data concerning them. They can request the portability of this data. They also have the right to object to the processing carried out or to request its limitation.

They can also issue directives on the retention, deletion or communication of your personal data after your death.

Specific rule for telemarketing: any consumer can register for free on an opt-out list called "Bloctel" to no longer be telemarketed by a professional with whom they do not have an ongoing contractual relationship. The consumer can register on the website www.bloctel.gouv.fr or by mail addressed to: Société Opposetel, Service Bloctel, 6, rue Nicolas Siret – 10 000 Troyes

You can exercise your rights and contact the Personal Data Protection Officer at any time at the addresses below.

For any information or to exercise your rights regarding the processing of personal data managed by My New Design, you can contact its Data Protection Officer (DPO):

• via this form or by email "contact@my-new-design.com":
• or by signed mail accompanied by a copy of an identity document to the following address:
  My New Design
  To the attention of the Data Protection Officer (DPO)
  13 Rue Maupertuis, 29200 BREST

If you do not receive an adequate response, you can lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the supervisory authority responsible for enforcing personal data obligations in France.

Purposes of processing your personal data

My New Design processes personal data only for specific, explicit and legitimate purposes. My New Design does not process this data in a manner incompatible with these purposes. To this end, the purposes pursued by My New Design are as follows:

Processing of contact form data
The collection, transmission and recording of data to contact the company

• Quote management
• Sending a reply email
  
  

Order management and customer relationship

My New Design needs your information for managing your orders and their follow-up (e.g. deliveries), invoices, accounting, and especially customer account management, customer relationship monitoring such as satisfaction surveys, complaint management and after-sales service.

Payment for your orders and payment details

When you pay on our site, your payments are secure. My New Design does not collect your payment data. All your bank details are collected only by our PCI-DSS certified payment service provider (PayPal) which guarantees payment security. When you pay for an order, the card used for payment is kept for the time necessary for the transaction and then for 13 months from the payment to guarantee proof of the transaction and fight against payment card fraud.

Customer knowledge and site audience statistics

My New Design may use data to better understand its customers or for statistical purposes to analyze our site's activity and improve the services we offer. We perform audience measurements, for example, we measure the number of page views, the number of site visits, as well as visitor activity on the site and their return frequency.

Sending emails

Following the creation of your account and if you have not objected, you may receive information and offers from us via electronic communication (email). We measure the open rate of our electronic mailings to best adapt them to your needs.

My New Design processes a data or category of data only if it is strictly necessary for the purpose pursued. You can find information on these purposes above.

My New Design processes the following data categories:

• Identity data: First name, last name, date of birth, identifier, age, company profile
• Contact data: Email, postal address, phone number
• Connection data: Customer connection logs, order history
• Content data: Transactional emails, invoices
• Location data

The collected data is intended for the internal services of the site and its subcontractors

The processed data may also be transmitted to the competent authorities, upon their request, as part of judicial proceedings, judicial investigations, requests for information from authorities, or to comply with other legal obligations.

Subcontractors

The collected data may be processed outside the European Union. In this case, My New Design takes the necessary arrangements with its subcontractors and partners to guarantee an adequate level of protection for your data, in full compliance with applicable regulations.

If the concerned subcontractors and partners are not members of the Privacy Shield agreement for transfers to the United States of America, or are not located in a country with legislation considered to offer adequate protection, they will have previously signed the European Commission's "standard contractual clauses" or will be subject to binding corporate rules approved by the authorities.

My New Design ensures that your data is processed securely and confidentially, including when certain operations are carried out by subcontractors. To this end, appropriate technical and organizational measures are implemented to prevent the loss, misuse, alteration, and deletion of your personal data. These measures are adapted according to the sensitivity level of the data processed and the risk level presented by the processing or its implementation.

The user must, when creating their account, indicate whether they are over 16 years old. Otherwise, they will not be able to order on the My New Design online site.

Data retention period

The administrative retention period (DUA) is the period during which archived documents, data or information must be retained and kept in a state suitable for consultation and use, either by those who produced them or by archive services.

Below are the administrative retention periods (DUA) applicable to the main procedures managed by My New Design. The DUA covers the retention period in active database and in internal archives.

This Personal Data Protection Policy may be subject to change.