GDPR

Kumiko Matcha's personal data protection principles (VALICOM & DECO)

Introduction

On this page, we present the principles by which C/O VALICOM & DECO Kumiko Matcha collects different types of data about its customers, as well as our commitments regarding C/O VALICOM & DECO Kumiko Matcha's security and data protection policy. 

Definitions

To avoid inaccurate interpretation, here are some points to understand about the terms used:

  • Personal data: any information relating to an identified or identifiable natural person. An "identifiable natural person" is a natural person who can be identified, directly or indirectly.
  • Processing: any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means (collection, recording, transmission, storage, retention, retrieval, consultation, use, interconnection, segmentation, etc.).

Data controller

All processing of personal information communicated to C/O VALICOM & DECO Kumiko Matcha is carried out under the responsibility of the company C/O VALICOM & DECO Kumiko Matcha, 38 Rue le Laboureur, 95160, Montmorency, SIRET No. 794 117 051 00019.

If you have any questions about the processing of personal data, or any requests for access, retrieval, portability, rectification, or erasure of your personal data, please contact our data controller and data protection representative, Mr. NGUYEN VAN NHUT Valentin, at the following address: val@kumikomatcha.fr

Request for changes to your personal data 

  • As a user of Kumiko Matcha's services, you can edit your personal data from your customer account.
  • For any other requests regarding access, retrieval, portability, rectification, or erasure of your personal data, please contact our data controller and data protection representative, Mr. NGUYEN VAN NHUT Valentin, at the following address: val@kumikomatcha.fr

How do we collect data about you?

The collection of your personal data (such as your email address) is most often based on your customer relationship, prospect relationship, or other relevant relationship with us. For example, we collect data when you perform actions on our services, subscribe to our website newsletter, use our website services, or provide us with other information.

When you use Kumiko Matcha's network and communication services, for example by sending an email, identification data is stored in our systems for the purpose of using the services. When you visit the website or load pages, you leave us various types of anonymous browsing data, such as your IP address and browsing history. The operation of the services is based on the use of cookies. We may collect data based on your consent. 

What data do we collect?

When you make a purchase from our shop, as part of our buying and selling process, we collect the personal information you give us, such as your name, address, and email address. When you browse our shop, we also automatically receive your computer’s internet protocol (IP) address, which allows us to obtain more details about the browser and operating system you are using.

We stock what can be connected to you. The data created and collected during communication includes information about the communicating parties, the time of log in, routing information, data transfer protocol, connection format, and location information. When browsing the Internet, "measurement data" is collected using cookies. This data cannot be associated with a specific person. The customer information we collect helps us to personalize and continually improve your experience on our site. We use this information to process orders, deliver products and services, process payments, and communicate with you about your orders, products, services, and weekly items, maintain and update our records, provide you with contents such as blog posts and customer reviews, and recommend products and services that may be of interest to you. We also use this information to improve our shops and websites, notify us when fraud or abuse occurs on our website, and allow third parties to provide technical, logistical, or other functions on our behalf.

List of types of information we collect 

Information you provide to us

We collect and store all information you provide to us via our website or other means. You may choose not to provide us with certain information, but this may limit your ability to use our services. We use the information you provide to us, in particular to respond to your requests, improve our services, and communicate with you.

Information collected automatically

Every time you interact with us, we receive and record certain types of information. Like many other websites, we use "cookies" and obtain certain types of information when your browser accesses the Kumiko Matcha website.

Information relating to emails

To optimize the usefulness and interest of our emails, we frequently receive confirmation of the emails we send that you have opened. If you do not wish to receive emails from us, simply unsubscribe at the bottom of the email. With your permission, we may send you emails about our shop, new products, and other updates. Kumiko Matcha sends customer messages about its products and services to its customers via the consent available in the newsletter subscription or after ordering on the website. You have the right to prohibit Kumiko Matcha from sending you messages. You can prohibit marketing by following the instructions included in the messages.

How do we manage your details?

Please note that Kumiko Matcha and its subcontractors are bound by confidentiality when processing your data. We maintain the confidentiality of your data and ensure that it is only used for predefined purposes.

Your data is processed for the purpose of producing and delivering communication services and other contents, developing services, invoicing, providing you with the best and most comprehensive services possible, and informing you about our services.

We also use your data for customer communications, such as sending information about our services and for direct marketing purposes.

We process our potential customers' data for direct marketing purposes.

We strive to ensure that customer data is up to date and correct.

We delete obsolete and unnecessary data whenever possible.

We protect all data relating to you through personal access rights based on tasks and prevent third parties from accessing the data.

Where do we send your data? 

We only submit your data to authorities and other telecommunications companies to the extent permitted by applicable law and as indicated in the file description.

When we use subcontractors, we will sign a security agreement with them that also covers the use of your data. We are also responsible for this type of handling on your behalf.

Kumiko Matcha's data protection principles

The purpose of this data protection policy is to describe the principles and practices we observe at Kumiko Matcha to ensure the protection of privacy, confidentiality of communication, and legal protection of our customers. Kumiko Matcha regularly updates this policy as operations or services change or develop. For this reason, we encourage you to regularly review the latest statement.The core values that are important to Kumiko Matcha include the confidentiality of customer data and communications, as well as the protection of customer privacy in all company operations. When handling our customers' personal data, we follow French law, orders and instructions from authorities, and best practices for data processing. Kumiko Matcha implements a high level of data protection. Personal data and location-related data are collected only for specific, predefined, and legal purposes and are not processed in a manner incompatible with these purposes. We maintain physical and electronic security measures and backup procedures in connection with the collection, storage, and communication of customers' personal information. 

General principles of customer data management 

The processing of personal data must always be justified for Kumiko Matcha's operations. Kumiko Matcha has defined the purpose of collection, handling, and submission of personal data in the next section. Kumiko Matcha only processes customer data necessary for its operations, as defined in the purpose of use indicated in the file description for the customer register. We strive not to process incorrect, incomplete, or outdated data. The processing of customer data is generally based on a relevant relationship, information received when using or registering for a service, or your consent. We may also process your data for other reasons, such as at your request or when required by law. Your information may be processed within Kumiko Matcha. We encourage our customers who have created an account to regularly update their contact details. Please note that as a Kumiko Matcha customer, you have the right to check what data about you has been stored in our information systems, or that there is no data about you in our file. You may also refuse the use of your data in accordance with relevant legislation. The inspection can be carried out once a year free of charge. The request for data inspection must be made with a signed document between Kumiko Matcha and you.

Collection, storage, extraction, and processing of personal data  

Register of subcontractors involved in the collection of personal data transmitted via Kumiko Matcha services: 

Shopify :

  • Data collected: Name; First name; Address; Phone number; Email address; Direct marketing information and consent; Company contact information, company name, information provided by you, customer classification information, order, delivery, agreement, and billing information
  • Service provider information: https://www.shopify.fr
  • Localization provider: Canada 
  • Objective: Website management and online sales of products 
  • Is data stored or processed outside the EU: Yes 
  • GDPR charter for service providers: https://www.shopify.com.au/legal/dpa
  • Retention period: 3 years after the last aperson's activity 
  • Access to data: Kumiko Matcha internal services; Logistics subcontractors

Our shop is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our services and products to you.

Your data is stored in Shopify's data storage system and databases, and in Shopify's general application. Your data is stored on a secure server protected by a firewall.

Klaviyo :

  • Data collected: Email address; direct marketing information and consent
  • Service provider information: https://www.klaviyo.com
  • Localization provider: United States
  • Objective: External communication for the website; Newsletter
  • Is data stored or processed outside the EU: Yes 
  • GDPR charter for service providers: https://www.klaviyo.com/privacy/dpa
  • Retention period: 3 years after the person's last activity
  • Data access: Kumiko Matcha internal services

Helpscout : 

  • Data collected: Name; First name; Phone number; Email address; Personal information; Company name, Information provided by you
  • Service provider information: https://www.helpscout.com
  • Localization provider: United States
  • Objective: Customer support and messaging with company stakeholders 
  • Is data stored or processed outside the EU: Yes 
  • GDPR charter for service providers: https://www.helpscout.com/company/legal/dpa/
  • Retention period: 3 years after the person's last activity 
  • Data access: Kumiko Matcha internal services 

Register of service providers involved in the collection of personal data transmitted via the subcontractors listed above:

Google Analytics :

 Sympl :

 Order desk :

 Stripe :

 Paypal :

If you realise your purchase through a direct payment gateway, Shopify will store your credit card information. This information is encrypted in accordance with the data security standard established by the payment card industry (PCI-DSS). Information relating to your purchase transaction is retained for as long as necessary to complete your order. Once your order is complete, the information relating to the purchase transaction is deleted.

All direct payment gateways comply with the PCI-DSS standard, managed by the PCI Security Standards Council, which is the result of a joint effort by companies such as Visa, MasterCard, American Express, and Discover.

PCI-DSS requirements ensure that credit card data is processed securely by our shop and its service providers.

 Typeform :

  • Service provider information: https://www.typeform.com
  • Localization provider: Spain
  • Objective: Gather customer opinions 
  • Is data stored or processed outside the EU: No 
  • GDPR charter for service providers: https://www.typeform.com/blog/news/gdpr/ 

 Stamped :

  • Service provider information: https://stamped.io
  • Localization provider: United States
  • Objective: Generate customer reviews 
  • Is data stored or processed outside the EU: Yes 
  • GDPR charter for service providers: https://stamped.io/privacy

 Disqus :

 In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to realise the services they provide to us.


However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies with respect to the information we are required to provide to them for your purchase transactions.

With regard to these providers, we recommend that you carefully read their privacy policies so that you can understand how they will process your personal information.

Keep in mind that some suppliers may be located or have facilities located in a jurisdiction other than yours or ours. So if you decide to proceed with a transaction that requires the services of a third-party supplier, your information may be governed by the laws of the jurisdiction in which that supplier is located or those of the jurisdiction in which its facilities are located.

For example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, your information used to complete the transaction may be disclosed under U.S. law, including the Patriot Act.

Once you leave the shop's website or are redirected to a third-party website or application, you are no longer governed by this privacy policy or the shop's terms of sale and use.

Sending and sharing data 

Kumiko Matcha may only submit your data to third parties in accordance with applicable law. We submit information upon request to authorities, such as the police and security authorities, as well as other authorities for reasons specified by law. Information about our customers is an important part of our business, and it is not our business to trade in it. We only share this information in the previous cases and for the purposes described in this privacy policy with Kumiko Matcha, which is either subject to this privacy policy or applies rules that are at least as protective as those described in this privacy policy. In addition, we may submit your data to subcontractors, in which case we will ensure that data confidentiality is maintained, and we will also be responsible for data management in this case. If we process your data outside the EU region, we will protect your data by ensuring that the subcontractor guarantees the appropriate processing of the data.

Processing of identification and location data related to electronic communications

Kumiko Matcha treats all data and messages created during communication as confidential. We are bound by an obligation of secrecy and a prohibition on using messages or other confidential information. When communication takes place via a network, it always leaves a trace. These network traces are called identification data if they can be connected to a person. Network traces are created, for example, when making phone calls, sending e-mails and text messages, and surfing the Internet, and may contain information about the correspondents, the connection or routing path, the data transfer protocol used, the event, and the terminals used or their location. Our service providers manage communication identification and location information in accordance with applicable law for purposes such as service implementation and use, invoicing, and technical development. Our subcontractors may also manage identification data in the event of misuse, data security breaches, and fault repair. In all of the above situations, we only process identification and location data to the extent necessary to perform a specific task.

Persons authorized to manage identification and location data 

Only specific individuals at our service providers whose labour requires access to identification and location data may process this data. In practice, authorization is only granted to individuals performing tasks related to invoicing, maintenance or development of communication networks or services, prevention and investigation of abuse, customer service, and marketing. Individuals with the right to handle data may only manage it to the extent required to perform individual tasks.

Duration of processing of identification and location data and data storage 

We process identification and location data for as long as necessary for invoicing, technical development, troubleshooting, marketing, investigating misuse, or data security purposes. However, handling only takes place to the extent required by the actions and without unduly compromising the confidentiality of a message and the protection of privacy. We stock the required billing data for at least one year from the invoice due date and for a period not exceeding three years from the invoice due date, unless it is necessary to retain the data for a longer period in connection with the collection of the invoice. Otherwise, the data is stored to the extent permitted and required by relevant legislation.

Website, tracking visits  

We also collect data about website visits. This data includes the IP address and corresponding DNS name, the organisation that registered the IP address, the name and address of the page visited, the time the page was loaded, and the type of browser. Please note that the IP address is an identification required for the functioning of the Internet, used to direct messages transmitted over the Internet to the appropriate locations. As a rule, the IP address is not connected to the person using the computer, but it may be connected to the organisation that registered the IP address. The IP address connection can be established at the request of the authorities.

Cookies 

This site also uses cookies. The purpose of cookies is to signal the visitor's visit to the site. Cookies are only used by VALICOM & DECO for the purpose of improving the personalized service provided to visitors.

Under no circumstances do we engage in the collection of visitors' email addresses without them deliberately providing them to us.

The data collected is our customers' contact information (name, first name, address, phone number, email address). As a Kumiko Matcha customer, you can browse our websites anonymously. However, like most websites, we use cookie technology. When you view our website, the cookie sets a random number for the browser that does not indicate your identity. Cookies help Kumiko Matcha determine which sections of its websites are most popular, where visitors go, and how long they stay there. The data is used to implement and develop services and target advertisements on websites. You can prevent the cookie from being stored by editing your browser settings. In some cases, prevention may slow down or make it impossible to navigate the pages or website.

Here is a list of cookies we use. We have listed them here so that you can choose whether or not to allow them.


_session_id, a unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.).

_shopify_visit, no data held, persists for 30 minutes from last visit. Used by our website provider's internal statistics tracking system to record the number of visits.

_shopify_uniq, no data retained, expires at midnight (based on visitor location) the next day. Calculates the number of visits to a shop by a unique customer.

cart, unique identifier, persists for 2 weeks, stores information related to your shopping basket.

_secure_session_id, unique session identifier

storefront_digest, unique identifier, undefined if the shop has a password, it is used to determine whether the current visitor has access.

When browsing Kumiko Matcha, advertising cookies will be placed on your computer so that we can understand what interests you. Our advertising partners then allow us to show you retargeting ads on other sites based on your previous interaction with Kumiko Matcha. The techniques our partner uses do not collect personal information such as your first name, address, phone number, or email address. 

You may leave our website by clicking on certain links on our site. We are not responsible for the privacy practices of these other sites and recommend that you carefully read their privacy policies.

Consent

When you provide us with your personal information to complete a transaction, verify your credit card, place an order, schedule a delivery, or return a purchase, we assume that you consent to our collecting your information and using it for that specific reason only.


If we ask you to provide your personal information for another reason, such as for marketing purposes, we will ask for your explicit consent directly, or we will give you the option to decline.

If, after giving us your consent, you change your mind and no longer consent to us contacting you, collecting your information, or disclosing it, you can notify us by contacting us at val@kumikomatcha.fr or by mail at the following address:

VALICOM & DECO
38 rue Le Laboureur
95160 Montmorency
France

As mentioned previously, we are required to collect your phone details (phone number). You have the right to object to telephone marketing by registering with the BLOCTEL system: https://www.bloctel.gouv.fr/

By using this site, you represent that you are at least the age of majority in your state or province of residence, and that you have given us your consent to allow any minor dependents to use this website.

Data security 

We ensure the security of our services' data by using methods proportionate to the severity and sophistication of the threats and the cost. Kumiko Matcha takes care to carry out actions aimed at notifying users when data security breaches occur or eliminating disruptions that affect data security. In addition, we use all means to ensure that the confidentiality of messages or the protection of privacy is not unduly compromised when performing the above actions. We provide information about actions related to the data security of our services and other issues concerning data security through appropriate channels. In order to prevent data security breaches and eliminate disruptions affecting data security, we may, among other things, monitor our service providers. For example, they prevent the receipt of electronic messages, delete viruses and other malware from messages, and take other comparable technical measures. These measures are necessary within the limits permitted. Our service providers use physical, administrative, and technical protective measures to keep messages and identification data transmitted over the communications network confidential. These actions reduce the risk of your data being disclosed to third parties and prevent misuse or other unauthorized access. Some of our services also use standardized encryption methods. Please note that as a user of Kumiko Matcha's services, you must also use the most appropriate methods to ensure your own data security. We encourage you to stock and use our services and your devices with care and to control their use, for example by using secure codes and unique passwords, and to use adequate antivirus and firewall services and keep them and the operating system up to date.

To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not lost, misused, accessed, disclosed, edited, or destroyed inappropriately.

If you provide us with your credit card details, they will be encrypted using SSL security protocol and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional standards generally recognized by the industry.

Intellectual and industrial property rights 

All elements published on the Kumiko Matcha website, such as sounds, images, photographs, videos, writings, animations, programmes, graphic charter, database utilities, software, and other underlying technology are protected by the provisions of the Intellectual Property Code and belong to VALICOM & DECO.

The Kumiko matcha brand, as well as all figurative and non-figurative brands and, more generally, all other brands, illustrations, images, and logos appearing on the items, their accessories, or their packaging, whether registered or not, are and will remain the exclusive property of VALICOM & DECO, with the exception of the rights held on the visuals of the products, brands, and logos of the suppliers of the products presented on the kumikomatcha.fr website.

Any total or partial reproduction, modification, or use of these trademarks, illustrations, images, and logos, for any reason and on any medium whatsoever, without the express prior consent of VALICOM & DECO, is strictly prohibited. The same applies to any combination or conjunction with any other trademark, symbol, logo, and more generally any distinctive sign intended to form a composite logo, with the exception of logos and descriptive signs belonging to the trademarks present on the site. The same shall apply to all copyrights, designs, and patents that are the property of VALICOM & DECO.

Responsibility

VALICOM & DECO is not responsible for the contents and functioning of the sites linked to this site, nor for any damage of any kind that may be suffered by visitors when visiting these sites.

Use of this site implies that visitors are aware of and accept the features and limitations of the Internet and related technologies, the lack of protection of certain data against possible misuse or hacking, and the risk of contamination by viruses circulating on the network. VALICOM & DECO declines all responsibility in the event of misuse or incidents related to the use of the computer, Internet access, maintenance or malfunction of servers, phone lines or any other technical connection, and the sending of forms to an incorrect or incomplete address, any computer errors or defects found on the site.

Applicable law

This website is submitted to French law.