Privacy policy

Last updated: [À COMPLÉTER : date de mise à jour].

Protecting your personal data matters to us. This policy explains what data we collect when you use the Tyngda website or place an order, why we use it, who we share it with, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

• Company name: [À COMPLÉTER : raison sociale]
• Address: [À COMPLÉTER : adresse]
• Registration number: [À COMPLÉTER : numéro d’immatriculation]
• Email: contact@tyngda.com

2. Data collected

We only collect the data necessary for the purposes described below:

• Identification and contact data: surname, first name, email address, delivery and billing addresses, phone number if you provide it for delivery;
• Order data: products ordered, amounts, order history, returns and exchanges;
• Payment data: transaction status and reference. Full bank details are processed directly by our payment providers; we do not have access to them;
• Account data, if you create a customer account: login details and preferences;
• Communications with customer service: the content of your emails and attachments (photos, for example);
• Browsing data: IP address, device and browser type, pages viewed, collected via cookies or similar technologies, under the conditions set out in Article 7.

We do not ask for information about your health. If you share such information spontaneously, for example when asking for weight advice, we use it only to reply to you, and we invite you to keep it to the strict minimum.

3. Purposes and legal bases

• Order management (processing, payment, delivery, tracking, returns, exchanges, guarantees) and customer service: performance of the contract or of pre-contractual measures taken at your request;
• Invoicing, accounting and responding to requests from the authorities: compliance with our legal obligations;
• Fraud prevention, website security, improvement of our services and dispute management: our legitimate interest;
• Sending marketing information to our customers about products similar to those purchased: our legitimate interest, with the option to object at any time;
• Newsletter for people who are not customers: your consent;
• Non-essential cookies (non-exempt audience measurement, advertising): your consent.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand. Every marketing email contains an unsubscribe link.

4. Recipients of the data

Your data is intended for authorized Tyngda staff. It may be shared, to the extent necessary, with our service providers acting on our behalf:

• payment providers, to process your payments;
• carriers and our logistics partner, to prepare and deliver your orders;
• our hosting provider, OVH SAS (2 rue Kellermann, 59100 Roubaix, France);
• our email tool, for sending transactional emails and, where applicable, the newsletter.

These providers are required to respect the confidentiality and security of your data. Your data may also be disclosed to the authorities where required by law. We do not sell your personal data.

5. Transfers outside the European Union

We favor service providers that process data within the European Union. If any of our providers process data outside the European Economic Area, these transfers are subject to appropriate safeguards, such as an adequacy decision by the European Commission or standard contractual clauses. You can obtain information about these safeguards by writing to us.

6. Retention periods

• Customer data: for the duration of the business relationship, then for the applicable limitation periods, for evidence purposes and to manage guarantees and disputes;
• Prospecting data (newsletter, non-customers): 3 years from the last contact initiated by you;
• Accounting documents (invoices): 10 years, in accordance with legal obligations;
• Cookies and trackers: 13 months maximum from when they are placed;
• Communications with customer service: for the time needed to handle your request, then according to the periods applicable to customer data.

At the end of these periods, the data is deleted or anonymized.

7. Cookies

When you visit, cookies may be placed on your device. Cookies that are strictly necessary for the website to work (cart, security, remembering your cookie choices) do not require your consent. Other cookies, in particular non-exempt audience measurement or advertising cookies, are only placed with your consent, obtained via the banner displayed on your first visit.

You can accept, refuse or customize your choices, and change them at any time via the cookie settings link on the website [À COMPLÉTER : emplacement du lien de gestion des cookies]. You can also set your browser to block cookies; some features may then be limited.

8. Your rights

Under the GDPR, you have the following rights over your data:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object, in particular to direct marketing, at any time and without giving a reason;
• right to portability of the data you have provided to us;
• right to withdraw your consent at any time;
• right to set instructions regarding what happens to your data after your death.

To exercise these rights, write to us at contact@tyngda.com. We may ask you for additional information to verify your identity if there is reasonable doubt. We will reply within one month, which may be extended by two months for complex requests; you will be informed if this is the case.

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the data protection authority of your country of residence.

9. Security

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure or alteration: encrypted connection (HTTPS), access restricted to authorized persons only, secure hosting and specialized payment providers. As no system is infallible, we also invite you to choose a strong password for your customer account and not to share it.

10. Updates to this policy

We may amend this policy to reflect changes in our services or in regulations. The version in force is the one published on this page, with its date of update. In the event of a significant change, we will inform you by appropriate means.

For any question about this policy, contact us at contact@tyngda.com or via our contact page. See also our legal notice and our terms and conditions of sale.