1.3. In the context of the processing of Personal Data, Health Wellness acts as data controller, as defined by the Regulations on Personal Data.
Intermediate Archiving : designates the movement of Personal Data which is still of administrative interest for Health Wellness (for example in the event of litigation and / or in the event of legal obligation) in a separate database, logically or physically separated and from which , in any event, access is restricted. This archive is an intermediate step before the deletion of the Personal Data concerned or their anonymization.
CGV : means the General Conditions of Sale accessible at the following address: https://www.annabiol.com/terms-and-conditions
Personal Data (s) :Refers to the Customer’s personal data, within the meaning of the Personal Data Regulations, collected and processed by Health Wellness in the context of the creation and management of their Personal Profile and the use of its part of the Services.
Confidentiality policy : means this confidentiality and personal data protection policy for Customers implemented by Health Wellness which is an integral part of the GTC.
Terminal (aux) : designates (s) the material equipment (computer, tablet, smartphone, telephone, etc.) used by the Customer to consult or view the Website and / or contact Health Wellness
Terms starting with a capital letter that are not defined in this article have the meaning given to them in the GTCS.
- Legal bases for processing
3.1. The processing is necessary for the execution of the sale and / or the services that the company Health Wellness has undertaken to provide to the Customer under a contract to which the Customer is a party, materialized by the acceptance, by the latter , of the GTC.
The Personal Data entered by the Customer is necessary for the performance of a number of processing operations related to the execution of the contractual relationship between the Customer and Health Wellness.
3.2. Processing is necessary for the purposes of the legitimate interests pursued by Health Wellness such as monitoring website traffic, monitoring customer relations, personalizing the display of the Website in particular to respond to Orders and Serenity Offers, l improvement of the Website and management of arrears and the creation of evidence in the event of disputes with the Client.
3.3. The processing is necessary to enable Health Wellness to comply with its legal obligations, in particular accounting and tax, as well as to fight against fraud.
- The purposes of the processing
The Customer’s Personal Data is necessary to allow him access to the Website and / or contact Health Wellness by any means of communication, in particular by telephone, and the placing of Orders, and to allow Health Wellness to / from:
- carry out operations relating to its commercial relationship with the Client, that is to say concerning invoices, accounting, monitoring of the “client relationship” with the Client, such as carrying out satisfaction surveys, management complaints, use of the Website and sending parcels following an Order, etc. ;
- carry out operations relating to prospecting, that is to say the management of technical prospecting operations (which notably includes technical operations such as standardization, enrichment and deduplication);
- carrying out commercial solicitation operations;
- the development of trade statistics; marketing analysis and tools (including classification, score, etc.)
- the management of requests to exercise the rights designated in article 9 below;
- litigation management;
- the fight against fraud.
- Storage of Personal Data
5.1. The Website is hosted by the company Infomaniak, the general conditions of which are available by clicking here <General Conditions >.
5.2. All precautions have been taken to store Personal Data of Customers in a secure environment and prevent it from being distorted, damaged or from unauthorized third parties having access to it.
- Collection of Personal Data on the Website
6.1. Health Wellness collects all or part of the following Personal Data when browsing the Website as t placing an Order by a Customer, which is kept for a period of three (3) years or last telephone contact, etc. ):
- Last name ;
- First name;
- Address ;
- Email address ;
- Telephone number ;
- Behavior on the Website ;
- Payment identifier ;
- The connection data (date, time, IP address, pages viewed) of the Customer when browsing the Website.
The above Personal Data is also kept in Intermediate Archiving for an additional period of two (2) years in accordance with the common limitation period.
- Amount of transactions made and the date and time of these transactions.
The above Personal Data may also be stored in Intermediate Archiving for an additional ten (10) years, in accordance with Health Wellness’s tax and accounting obligations.
6.2. All the Personal Data listed in article 1 collected by Health Wellness is essential to place an Order.
7. Recipients or categories of recipient if they exist
|Identity of the recipient||Country of establishment of the data recipient||Nature of data transferred||Purpose of the proposed transfer||Data recipient categories||Level of protection offered by the country or exception provided for by the Personal Data Regulations|
|Infomaniak||Swiss||All||Website Hosting||Service provider||Countries with adequate guarantees
|United States||Behavior on the Website||Analysis of Customer behavior
|Service provider||Privacy Shield|
|United States||Behavior on the Website||Analysis of Customer behavior
|Service provider||Privacy Shield|
8. Security of transactions on the Internet
8.1. In accordance with the GTC, the Website uses the technology of the bank company, to secure Customers’ banking transactions.
8.2. Thus, when paying on the Website, the Customer’s bank details are transmitted encrypted to the Bank company, without Health Wellness being able to become aware of them. These bank details may be kept for the execution of the Order, in particular for Serenity Offers.
8.3. Health Wellness does not collect the full number of the Customer’s bank card or its cryptogram.
To exercise their rights such as those identified in article 9, relating to their credit card details, the Customer is invited to contact the Bank company directly.
9. Customer rights
In accordance with the Personal Data Regulations, the Customer may, at any time, benefit from the following rights from / to:
- access (article 39 of Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms),
- rectification (article 40 of Law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms),
- erasure (article 40 of Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms),
- limitation of processing (article 40 of Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms),
- portability (article L224-42-1 of the Consumer Code),
- opposition (article 38 of Law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms),
- post-mortem directives (article 40-1 of Law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms),
Nevertheless, Health Wellness can oppose manifestly abusive requests (number, repetitive or systematic nature), on the responsibility of Healt Wellness to demonstrate their abusive nature.
9.1. Access rights
The Customer has the possibility of obtaining from Health Wellness the confirmation that the Personal Data concerning him are processed or not and, if necessary, to access said Personal Data as well as the following information:
- the purposes of the processing;
- the categories of Personal Data processed;
- the recipients or categories of recipients to whom the Personal Data have been or will be communicated;
- where possible, the envisaged period of retention of Personal Data or, when this is not possible, the criteria used to determine this period;
- the existence of the right to request from Healt Wellness the rectification or erasure of Personal Data, or a limitation of the processing of its Personal Data, or the right to oppose this processing;
- the right to lodge a complaint with the CNIL;
- when the Personal Data are not collected from the Client, any available information as to their source;
- the existence of automated decision-making based on processing, including profiling, and, at least in such cases, useful information regarding the underlying logic, as well as the importance and expected consequences of this processing to the customer.
Health Wellness provides, on request, a copy of the Personal Data being processed.
Health Wellness may require the payment of reasonable costs which may not exceed the reproduction costs for any copy requested by the Customer on tangible medium.
When the Customer submits his request electronically, the information is provided in an accessible form, unless requested otherwise.
The Customer’s right to obtain a copy of their Personal Data may be limited by the need for Health Wellness to preserve the rights and freedoms of others.
9.2. Right of rectification
The Customer has the possibility of obtaining from Health Wellness, as soon as possible, the rectification of Personal Data concerning him which is inaccurate, outdated or incomplete. He also has the possibility of having the incomplete Personal Data completed, including by providing an additional declaration.
9.3. Erasure rights
The Customer has the possibility of obtaining from Health Wellness the erasure, as soon as possible, of Personal Data concerning him when one of the following reasons applies:
- Personal Data is inaccurate, incomplete, ambiguous or outdated;
- the collection, use, communication or conservation of his Personal Data is prohibited;
- the Customer exercises his right of opposition under the conditions recalled below and there is no overriding legitimate reason for the processing;
- Personal Data must be erased to comply with a legal obligation;
- Personal Data has been collected from a minor.
9.4. Limitation rights
The Customer has the possibility of obtaining from Health Wellness the limitation of the processing of his Personal Data when one of the following reasons applies:
- Health Wellnessverifies the accuracy of Personal Data following the Customer’s challenge to the accuracy of Personal Data,
- the processing is unlawful and the Customer opposes the erasure of Personal Data and instead requires the limitation of their use;
- Health Wellness no longer needs Personal Data for processing purposes, but these are still necessary for the Client for the establishment, exercise or defense of legal claims;
- the Customer has objected to the processing under the conditions recalled below and Health Wellness checks whether the legitimate reasons pursued prevail over the alleged reasons.
9.5. Right to data portability
The Customer has the possibility of receiving Personal Data concerning him / her from Health Wellness, in a structured format, commonly used and readable by one when:
- the processing of Personal Data is based on consent, or on a contract to which the Client is a party; and
- the processing of Personal Data is carried out using automated processes.
The Customer who exercises his right to portability can request that his Personal Data be transmitted directly by Health Wellnessto another controller who he designates when technically possible.
The right to the portability of the Customer’s Personal Data must not infringe the rights and freedoms of others.
9.6. Right to object
The Customer may object at any time, for legitimate reasons, to the processing of Personal Data concerning him. It can also oppose any processing intended for commercial prospecting. Health Wellness will then no longer process Personal Data, unless it demonstrates that there are compelling and legitimate grounds for processing which prevail over the interests and rights and freedoms of the Client, or may keep them for the record, the exercise or defense of legal claims.
If a Customer wishes to oppose a processing of his Personal Data for which a button has not been provided by Health Wellness, he can always exercise his right of opposition under the conditions of paragraph 10.
9.7. Limitations on the exercise of rights
The Customer cannot exercise the rights set out in articles 9.2 to 9.6 when the processing of his Personal Data is necessary:
- The exercise of the right to freedom of expression and information;
- Compliance with a legal obligation which requires the processing of his Personal Data;
- For archival purposes in the public interest, for research purposes
Finally, compliance with the Customer’s requests does not prevent Health Wellness from keeping the Personal Data necessary for the establishment, exercise or defense of legal claims.
9.8. Post-mortem guidelines
The Customer has the possibility of communicating to Health Wellness directives, general or specific, relating to the conservation, erasure and communication of his Personal Data after his death, which directives can also be registered with « a third party certified digital trust ». These directives, or sort of « digital will », can designate a person responsible for their execution; otherwise, the Client’s heirs will be designated.
In the absence of any directive, the heirs of the Client may apply to Health Wellness in order to:
- access Personal Data processing allowing « the organization and the settlement of the deceased’s estate» ;
- receive communication of « digital goods » or « data akin to family memories, transmissible to heirs » ;
- cause the Client’s Account to be closed on the Website and oppose the further processing of his Personal Data.
In any event, the Customer has the possibility of indicating to Health Wellness, at any time, that he does not wish, in the event of death, that his Personal Data be communicated to a third party.
10. Exercise of specific rights of Customers
10.1. These rights can be exercised at any time with Health Wellness :
- By email to the following address: firstname.lastname@example.org
- By post to the following address:Health Wellness Carlyle House, 235-237 Vauxhall Bridge Road, London, England, SW1V 1EJ
- Directly from the Client’s Account on the Website.
10.2. For the purposes of asserting his rights under the conditions referred to above, the Customer must prove his identity by mentioning his surname, first name, e-mail address, in particular that indicated in his Account and, where applicable, Customer number .
10.3. A response will be sent to the Client within a maximum of one (1) month following the date of receipt of the request, unless it is incomplete.
If necessary, this period may be extended by two (2) months by Health Wellness, which will inform the Customer, taking into account the complexity and / or the number of requests.
10.4. In the event of the Customer’s request to delete his Personal Data and / or in the event of the exercise of his right to request the erasure of his Personal Data, Health Wellness may however keep them in the form of intermediate Archiving, for the duration necessary to meet its legal, accounting and tax obligations.
10.5. The Customer can also file a complaint with the competent supervisory authority (la CNIL).
11. The security of your password
11.1. Health Wellness takes all necessary precautions to ensure the secure storage of the Customer’s password.
11.2 However, the security of this password also depends on its design.
11.3 Also, the Customer is reminded that his password, to be valid, must be composed, at least of 8 characters at least 3 of the following 4 types: capital letters, small letters, numbers, special characters
11.4 Blocking multiple attempts: time delay for accessing the account after several failures, locking the account after 5 failures.
11.5 Mnemotechnical means allow the creation of complex passwords, such as:
- keep only the first letters of words in a sentence; for example, the sentence « A Password is remembered! » Corresponds to the password 1mdp @ sr!
- by capitalizing if the word is a name (ex: word)
- keeping punctuation marks (ex:!)
- by expressing the numbers using the digits from 0 to 9 (ex: A -> 1)
12. Cookies placed on the Customer’s Terminal after browsing the Website
12.1 Cookies are used on the Website.
A cookie is information deposited on the Terminal which is used by the Customer to access the Website.
12.3 Cookies are related to the navigation of the Customer on the Website and allow to determine the pages he has visited, their date and time of consultation.
12.4 At no time do these cookies allow Health Wellness to personally identify the Customer.
12.5 The shelf life of these cookies in the Customer’s Terminal does not exceed thirteen (13) months.
12.6 More specifically, the Personal Data collected from cookies issued by Health Wellness or third parties allow:
- to establish statistics and volumes of frequentation and use of the Website allowing to improve the interest and the ergonomics of our Services;
- adapt the presentation of the Website to the display preferences of the Customer’s Terminal (language used, display resolution, operating system used, etc.);
- allow the Customer to access his Account using his pre-registered identifiers;
- memorize information relating to a form completed by the Customer on the Website (registration or access to their Account);
- to implement security measures, for example when the Customer is asked to connect again to the Website after a certain period of time;
12.7. Thanks to cookies, Health Wellness collects and processes for the purposes determined above, all or part of the following Personal Data:
- Information on his browsing and behavior on the Website :
- statistics on the consultation of the different pages of the Website ;
- full URL tracking to, via and from the Website;
- Information concerning the Client (presumed centers of interest, etc.) linked to its activity on the Internet and communicated by third parties (advertisers, advertising management, etc.).
13. Health Wellness Cookies
|Service and type of cookie||Role of the cookie and data collected||Duration|
|PHPSESSID||Client Identification||3 months|
|Cookieconsent_||Acceptance of the cookie banner||1 year|
14. Third party cookies
|Service and type of cookie||Role of the cookie and data collected||Duration|
|_ga (Google Analytics)||Analysis of Customer behavior||13 months|
|_gid (Google Analytics)||Analysis of Customer behavior|
|_ym_d||Date of first connection to the Website by the Customer||1 year|
|_ym_isad||Determines the presence of ad blocker||2 days|
|_ym_uid||Client Identification||1 year|
|_ym_visorc_ *||Refresh user sessions||30 minutes|
15. Opposition to cookies
15.1. The Customer is informed, during his first visit, that he has the right to oppose the registration of cookies which are incidental to the operation of the Website and this in particular by configuring his Internet browser to do this.
15.2. When the Customer browses the Website, information may be recorded, or read, in his Terminal, subject to his choices.
15.3 You will find more help on the dedicated pages of your browser (below the most common browsers):
- Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
- Google Chrome : http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647
- Safari : https://support.apple.com/kb/PH19214?locale=fr_FR&viewlocale=fr_FR
- Firefox : http://support.mozilla.org/fr/kb/Activer%20et%20désactiver%20les%20cookies
- Opera : http://help.opera.com/Windows/10.20/fr/cookies.html
15.4 The Customer can also configure his browser so that it sends a code indicating to websites that he does not wish to be followed (Do No Track « option ») :
- Internet Explorer™ : http://windows.microsoft.com/fr-fr/internet-explorer/use-tracking-protection#ie=ie-11
- Safari™ : http://support.apple.com/kb/PH11952
- Chrome™ : https://support.google.com/chrome/answer/114836
- Firefox™ : https://support.mozilla.org/fr/kb/comment-activer-option-ne-pas-pister
- Opera : http://help.opera.com/Windows/12.10/fr/notrack.html