Privacy Policy

  • Home
  • Privacy Policy

Introduction

At SMOKE4ONE® , protecting our users' personal data is a top priority. This Privacy Policy aims to inform you transparently about how we collect, use, store and protect your data, in accordance with the General Data Protection Regulation (GDPR) No. 2016/679 and the recommendations of the French National Commission for Information Technology and Civil Liberties (CNIL) .

1. Data Collected

As part of our interactions with users and customers, SMOKE4ONE® may collect different types of personal data, including:

  • Identity and contact data : first name, last name, email address, telephone number, postal address.
  • Transactional data : order information, payment details (encrypted), purchase history, etc.
  • Connection and navigation data : IP address, connection logs, pages viewed, location data.
  • Communication data : newsletter subscription preferences, email correspondence, responses to satisfaction surveys.

This information is collected primarily through contact, order, and account creation forms. The collection of certain data is essential to the performance of our services; it is then marked as such.

2. Purposes and Legal Basis of Processing

In accordance with Article 6 of the GDPR , the processing carried out by SMOKE4ONE® is based on the following legal bases:

  • Execution of a contract : Order management, product delivery, after-sales service.
  • Consent : Sending newsletters, personalizing marketing offers, collecting analytical and marketing cookies.
  • Legitimate interest : Improvement of services, IT security, fight against fraud.
  • Legal obligation : Retention of invoices to meet accounting and tax obligations
    .

3. User Rights

In accordance with Articles 15 to 22 of the GDPR , SMOKE4ONE® users have the following rights:

  • Right of access : Consult the data collected concerning them and obtain a copy.
  • Right of rectification : Request the correction of inaccurate or incomplete information.
  • Right to erasure : Request the deletion of their data when it is no longer necessary or when the processing is unlawful.
  • Right to restriction : Limit the processing of their data in specific cases.
  • Right to portability : Receive data in a structured and commonly used format to transmit it to another data controller.
  • Right to object : Refuse the processing of data for legitimate reasons, in particular for commercial prospecting purposes.

Users can exercise their rights by contacting us by email at contact@smoke4one.com or by mail to our head office. We undertake to respond within 30 working days , in accordance with Article 12 of the GDPR .

4. Data Security

SMOKE4ONE® implements appropriate technical and organizational measures to ensure the security and confidentiality of personal data, in accordance with Article 32 of the GDPR . The measures deployed include:

  • SSL encryption of data transmitted during transactions and communications.
  • Firewalls and protocols to protect against intrusions and unauthorized access.
  • Two-factor authentication for access to customer accounts.
  • Regular vulnerability monitoring and testing to identify and correct potential vulnerabilities.

In the event of a data breach likely to affect users' privacy, SMOKE4ONE® undertakes to notify the CNIL as well as the users concerned, in accordance with articles 33 and 34 of the GDPR .

5. Management of Subcontractors

SMOKE4ONE® uses subcontractors for certain data processing operations (e.g. hosting services, sending newsletters). All our subcontractors are carefully selected and sign subcontracting agreements that comply with GDPR requirements, ensuring sufficient guarantees in terms of security and confidentiality.

6. International Data Transfers

The data collected by SMOKE4ONE® is hosted in France by our service provider o2switch . Exceptionally, transfers outside the European Union may be made, only if appropriate safeguards have been put in place (such as standard contractual clauses , binding corporate rules , or adequacy decisions). These transfers are governed by Articles 44 to 49 of the GDPR .

7. Data Retention Period

SMOKE4ONE® retains personal data for a period proportionate to the purposes of the processing, taking into account legal retention obligations. For example, order data is retained for a period of 10 years to meet tax obligations, in accordance with Article L.123-22 of the French Commercial Code . Data collected via cookies is retained for 13 months , unless otherwise stated.

8. Cookies and Similar Technologies

When browsing our website smoke4one.com , cookies may be placed on the user's device to collect information about their browsing and improve their user experience. The cookies used are divided into several categories:

  • Technical cookies : Necessary for the proper functioning of the site.
  • Analytical cookies : Used to measure audience and performance.
  • Marketing cookies : Intended to personalize advertisements based on users' interests.

Users can manage their cookie preferences via the consent banner displayed on their first visit or at any time via their browser settings.

9. Claims and Disputes

If you have a complaint regarding the use of your personal data, you can contact our customer service. If you cannot find an amicable solution, you can contact the CNIL or another competent data protection supervisory authority, in accordance with Articles 77 and 79 of the GDPR .

10. Changes to the Privacy Policy

SMOKE4ONE® is committed to periodically reviewing this policy to comply with legislative and regulatory developments. An annual review is planned, but updates may be made at any time. Changes will be effective immediately upon posting on smoke4one.com. Users will be informed via a notification on the site or by email.

11. Additional Information

For any additional information on this policy, users can contact SMOKE4ONE® by email or by mail addressed to the head office.