PRIVACY POLICY
Commitment and Framework
KamaBrasa pays particular attention to the protection of personal data of its Customers and visitors. This policy describes the conditions for the collection, processing, storage, and protection of personal data, in accordance with the General Data Protection Regulation number 2016 679 and French law number 78-17 of January 6, 1978, as amended. The data controller is KamaBrasa, reachable at support@kamabrasa.com.
Collected Data and Purposes
The collected data may include, depending on the visitor's or Customer's interactions with the site, first and last name, email address, phone number, delivery and billing postal address, order history, payment data which are processed exclusively by approved secure service providers, browsing data such as IP address, browser type, pages viewed and visit duration, as well as any information voluntarily provided by the visitor or Customer during an exchange by email or phone. This data is collected and processed for the following purposes: processing and tracking orders, customer relationship management, product delivery, payment processing via secure service providers, sending commercial communications and newsletters subject to the Customer's explicit consent, improving the site and services, fraud prevention, compliance with legal obligations including tax and accounting, as well as managing potential disputes.
Legal Basis, Recipients, and Transfers
The processing is based, depending on the case, on the performance of the sales contract, on the explicit consent of the data subject, on compliance with legal obligations, particularly tax and accounting, or on the legitimate interest of the data controller, particularly for security, fraud prevention, and service improvement. The data may be transmitted, strictly to the extent necessary to achieve the described purposes, to payment providers, carriers and logistics providers, hosting and maintenance providers, email and marketing service providers, customer review providers, as well as administrative and judicial authorities upon request. KamaBrasa does not sell, rent, or transfer personal data to third parties for commercial purposes. Some service providers may be established outside the European Union. In this case, KamaBrasa ensures that transfers are governed by appropriate safeguards such as standard contractual clauses of the European Commission, adequacy decisions, or other mechanisms provided for by the General Data Protection Regulation.
Retention, Rights, and Security
Data is retained for the period necessary for the purposes for which it was collected and in compliance with applicable legal retention periods, namely three years after the last contact for prospective data, ten years for accounting documents in accordance with legal obligation, and the period necessary for legal defense for data related to disputes. In accordance with the General Data Protection Regulation, the Customer has the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent at any time when processing is based on it. The Customer can also lodge a complaint with the French National Commission for Informatics and Freedoms (CNIL). These rights can be exercised by email at support@kamabrasa.com, accompanied by proof of identity. KamaBrasa undertakes to respond within one month, which may be extended by two months in case of complexity. The site uses cookies for operational purposes, audience measurement, and, where applicable, marketing. The visitor has the option at any time to accept, refuse, or configure cookies via the dedicated banner or their browser settings. Refusing non-essential cookies does not prevent viewing the site but may limit certain functionalities. KamaBrasa implements appropriate technical and organizational measures to protect data against loss, alteration, disclosure, or unauthorized access. However, as no data transmission over the internet can be guaranteed one hundred percent secure, KamaBrasa cannot be held responsible for incidents resulting from circumstances beyond its reasonable control. This policy may be amended at any time to reflect legal or operational changes. The applicable version is the one published on the site on the date of consultation.
Executive Summary of the Privacy Policy
The data controller is KamaBrasa, reachable at support@kamabrasa.com. Collected data is used to fulfill orders, communicate, and prevent fraud. No resale of data. Transfers outside the European Union are governed by GDPR safeguards. Data is retained for three years for prospects and ten years for accounting. GDPR rights can be exercised by email with proof of identity. Cookies are managed via a consent banner, and refusal is possible.