Terms of service

This Privacy Policy ("Privacy Policy") applies to the data of customers and online users of the website www.boomeparis.com. This Privacy Policy also concerns the information we automatically collect during online visits (data collected by cookies, for example).

BOOME collects, stores and processes this data for the purpose of managing the website, among others. The term "Personal Data" refers to any data that allows you to be identified, directly or indirectly (name, phone number, email address, IP address, location data...).

BOOME is committed to complying with the General Data Protection Regulation 2016/679, which organises the protection of personal data of natural persons.

The term "Business Partner" refers to any subcontractor, supplier or other entity with which we maintain business relations.

Please note that this Privacy Policy does not apply to the websites of our Business Partners (as defined below), even if they are linked to the boomeparis.com website. Therefore, we advise you to consult the privacy policies of other parties if you interact with them.

This policy applies to BOOME worldwide.

Article 1 – Data collected

Article 1.1 - Cases of data collection
Personal Data may be requested from customers and users in several cases:
● when using our websites or applications;
● when using services, support services or requesting information;
● when ordering products or purchasing subscriptions;
● when creating and managing an account;
● when registering and participating in workshops;
● when participating in promotional activities online or in any other context;
● when submitting a testimonial or review;
● when subscribing to newsletters, marketing and promotional emails or other resources;
● when participating in surveys or questionnaires (for example, to best advise the user on the choice of products suited to their expectations);
● when interacting with BOOME's or third-party social networks (subject to the terms of use and privacy policies of the third party);
● when the user/customer makes a contact request.

Article 1.2 - Types of data collected
The Personal Data requested may include:
● first and last names;
● email address;
● home address;
● telephone contact details;
● user identifier;
● passwords;
● credit card number and billing details in case of purchase.

Each time BOOME requests Personal Data, BOOME indicates whether this data is mandatory or optional. BOOME may cross-reference data collected on the site with data requested from partners or third parties. For any questions regarding the use of cookies and the use of Personal Data, please contact us at rgpd@boomeparis.com.

Article 1.3 - Automatically collected information
Information that may be retrieved includes:
● information relating to visits to our websites, including pages viewed, links and advertisements clicked by users;
● keywords entered;
● other actions performed in connection with BOOME's services and websites;
● information from the browser used to access our website;
● IP address;
● device identifier;
● browser type and language;
● access times;
● the URL of the website that referred to our website and the URLs accessed by clicking on a link on our site.

Article 1.4 - Information from third-party sources
BOOME may also obtain information from third-party sources such as:
● public databases;
● our business partners;
● marketing partners;
● social media platforms.

Article 2 – Data controller for personal data
BOOME is the data controller for Personal Data, as defined in Article 4 of the GDPR. Access to BOOME's service is conditional on obtaining Personal Data. BOOME maintains a record of Personal Data processing activities in accordance with the GDPR.

Article 3 – Purpose of personal data processing
BOOME collects, stores and processes its users' Personal Data solely for the needs of its commercial activity. The purposes of processing are as follows:
● management of product orders on the website www.boomeparis.com;
● management of customer follow-up;
● sending of a newsletter;
● personalising, analysing and improving our services (including content and advertising on our website), our communications and our relationships;
● preventing fraud and other illegal or prohibited activities;
● preserving the security and integrity of our websites, our company and services;
● fulfilling other functions or serving other purposes, as indicated at the time of collection, or as required or permitted by law;
● commercial prospecting and marketing purposes.

Article 4 – Recipients, subcontractors and communication of data to third parties
BOOME uses a service provider for the hosting of Personal Data. All transmitted data is archived by Shopify International Limited, a private limited company incorporated in Ireland under registration number 560279, whose registered office is located at 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, VAT number IE 3347697KH, and whose privacy policy is accessible at: https://www.shopify.fr/legal/condition. This platform presents numerous security standards and compliance certifications, which you may consult, including the EU data protection directive. Transmitted data is not exported to non-European Union member states. Any changes will be communicated to the user, who may object by email to rgpd@boomeparis.com.

Article 5 – Legal basis for processing
The legal basis depends on the type of Personal Data concerned and the context of collection. The legal bases are:
● User consent: the user is free to withdraw their consent at any time by sending an email to rgpd@boomeparis.com. Any prior processing carried out with the user's consent remains lawful; the withdrawal of consent cannot under any circumstances be retroactive.
● Compliance with a contractual obligation.
● The legitimate interests of BOOME (and its Business Partners) which include the present website and/or relevant services, and/or the implementation of profiling and marketing activities, provided that the harm suffered, both in terms of your rights and your freedoms, does not exceed our legitimate interests.

Article 6 – Retention of your data
Personal Data is retained for as long as the user account remains active, and then for three years after its closure, in accordance with the GDPR. BOOME may retain this data beyond the aforementioned period if it appears necessary to establish proof of a finding, the exercise or defence of its rights in court.

Article 7 – International transfers
BOOME may transfer your Personal Data to its Partners, if and only if this is necessary for the objectives set out in this Privacy Policy. In the event of a transfer outside the European Economic Area and to a country with a different level of data protection, contractual provisions have been put in place with the partner to ensure adequate protection.

Article 8 – Security measures
BOOME is committed to implementing all necessary measures to protect access to Personal Data:
● encryption for the collection or transfer of sensitive data, such as credit card details;
● technical measures to maintain the integrity, availability and resilience of processing services and systems;
● restricted access to user information;
● adapted security measures to ensure the protection of Personal Data;
● destruction of Personal Data or rendering it anonymous in cases required by law.

Each user of the website authenticates themselves using a personal and confidential password. The user undertakes to ensure the complete confidentiality of their password. We recommend never disclosing your passwords and being cautious about phishing scams.

Article 9 – Rights of persons concerned by the processing of Personal Data
● Right of access: the user has the right to request how we process their Personal Data. They may also obtain a copy of their Personal Data.
● Right of rectification: the user may request the rectification of inaccurate or incomplete Personal Data concerning them.
● Right to object: the user may object to the processing of their Personal Data, which is based on our legitimate interests.
● Right to erasure: the user may request the deletion of their Personal Data (under certain conditions).
● Automated decision-making: the user may refuse automated decision-making concerning them if it produces notable legal effects.
● Restriction: the user may ask us to limit our processing of their Personal Data.
● Portability: the user may request to receive the Personal Data provided in a structured, commonly used and machine-readable format, and that this information be transmitted to another organisation in certain circumstances.

Article 10 – Supervisory authority
The user is informed that they may lodge any complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL).

Article 11 – Cookies
When browsing the website, information relating to the user's navigation may be recorded in "cookie" files installed on the user's computer or mobile device, subject to the choices expressed by the user regarding cookies locally on the computer or mobile device concerned, which may be modified at any time. Cookies are alphanumeric identifiers transferred to the user's hard drive via the Internet browser, in order to allow the system to recognise the user's browser and offer them adapted services. Some cookies are installed until the user's browser is closed, others are retained for longer. Cookies are retained for a maximum period of 12 months.

We use cookies to remember user preferences. This allows us to optimise and improve the use of the website.
Cookies are used to:
● identify the user when logging into the website;
● determine the user's browser settings, such as the type of browser used and the plug-ins installed;
● know the web pages consulted and/or searched on the website by the user in order to offer them adapted suggestions.
● the Help section of the toolbar of most browsers indicates how to refuse new "cookies", obtain a message notifying their receipt, or disable all "cookies".

Several options are available to the user to manage cookies. Any configuration by the user regarding the use of cookies may modify their browsing experience and their conditions of access to certain services requiring the use of cookies. The user may at any time choose to express and modify their preferences regarding cookies by expressing their refusal directly on the homepage of the website via the banner provided for this purpose.

Article 12 – Targeted email marketing
We may send personalised marketing messages based on the user's visits to www.boomeparis.com, their purchase history and their searches. By clicking on a hyperlink in marketing emails received, the user allows the email service provider to place a cookie on the browser. This type of cookie is linked to the email address or IP address. It is possible to refuse this feature by clicking on the unsubscribe link appearing in all personalised marketing emails received.

Article 13 – Use of web beacons, spy pixels and tracking technologies by our partners and ourselves
BOOME and its Business Partners may use web beacons on their websites, in their emails, in their advertisements on other websites or in their advertisements contained in third-party electronic messages. A web beacon is an electronic image that can be used to recognise a cookie on your computer when a user views a web page or an electronic message. Web beacons help measure the effectiveness of our website and our advertisements. The user may render certain web beacons unusable by rejecting cookies on their web browser.

Article 14 – Social media features
www.boomeparis.com features social media functionalities, including the "Like" button from Facebook and Instagram. These features may collect the IP address, the page viewed on our site, and place a cookie to activate the functionality. Social media features are hosted either by a third party or directly on our site. Interactions with these features are governed by the privacy policy of the company providing them.

Article 15 – Links to third-party sites and services
BOOME offers links to other websites that may collect Personal Data when clicked. This Privacy Policy does not cover the practices of these websites.

Article 16 – Selection of communication preferences, opting out of advertising messages and creating personalised profiles
It is possible to click "Unsubscribe" in the marketing communications we send by email, or to send us an email at hello@boomeparis.com. "My Account" allows you to choose to receive BOOME communications, subscribe or unsubscribe.

Article 17 – Amendments to this Privacy Policy
We may update this Privacy Policy.