PRIVACY POLICY

This privacy policy aims to inform users of the website www.bahrsama.com ("Site") about the processing carried out by BAHR SAMA in accordance with the provisions set forth by French Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, as amended by Law No. 2018-493 of June 20, 2018, following the entry into force of the General Data Protection Regulation (together, the "Law"). "BAHR SAMA" as used in this privacy policy refers to the individual entrepreneur whose contact details are provided in the Legal Notice.

Users of the Site are invited to read this privacy policy carefully.

1. Definitions

Personal Data/Data mean any information relating to an identified or identifiable natural person, directly or indirectly, by reference to an identification number or one or more elements specific to them. This may include, in particular, the User's name, first name, phone number, email and postal address, and IP address.
Data Controller means BAHR SAMA, the entity determining the purposes and means of processing as defined herein.
Processing means any operation or set of operations relating to Data, such as collection, recording, storage, consultation, communication, deletion, and destruction of Data.
User means any natural person accessing the Site, whether or not they have placed an order.

2. General Provisions

The privacy policy may be modified at any time by BAHR SAMA to comply with changes in the Law, jurisprudence or requirements of authorities. Users are encouraged to review this privacy policy before browsing the Site and to regularly check for updates made by BAHR SAMA. This privacy policy is an integral part of the Site's General Terms and Conditions of Sale. For any questions regarding this document or the processing of the User's Data, the User may contact: contact@bahrsama.com.

3. Processed Data

During the use of the Site, User's Personal Data is collected either directly or automatically by BAHR SAMA.

3.1. Creating and accessing a personal account

To create an account on the Site and/or to log in, the User must provide the following information:

Email address
Password

The User can also create and log in to their personal account via their Gmail or Facebook accounts. This implies the sharing of certain Data that the User has provided through Gmail and Facebook with BAHR SAMA.

Providing this Data is mandatory for account creation and login.

3.2. Purchasing a product

To purchase a product on the Site, the User must provide the following information:

Name, surname
Postal address, email address, phone number
Selected payment method and credit card details

Providing this Data is mandatory for placing an order. If the User fails to provide the required information, the order cannot be processed.

BAHR SAMA does not have access to the User's credit card number. Payments made via the Site using a credit card are processed by a secured payment provider.

3.3. Subscribing to the newsletter

To subscribe to the Site's newsletter, the User must provide his/her email address. Providing this Data is mandatory for subscription. Otherwise, the request cannot be validated.

3.4. Offering a gift card

If a User wishes to offer a gift card to a third party, he/she must ensure that the recipient consents to their Data (including name, surname, postal address, and email address) being shared with BAHR SAMA and processed in accordance with this policy.

3.5. Data Collection via Cookies

Other User Data may be collected due to the placement of cookies on the Site, in accordance with BAHR SAMA's Cookies Policy.

BAHR SAMA does not collect any "sensitive data" as defined by the Law.

4. Lawfulness of Processing

Data is used by BAHR SAMA in compliance with the Law. Data processing is lawful when:

It is necessary for the execution of a contract with the User; and/or
It is necessary to comply with legal obligations imposed on BAHR SAMA; and/or
The User has consented to Data processing; and/or
There is a legitimate interest pursued by BAHR SAMA, primarily for commercial and financial reasons requiring Data processing.

5. Purposes of Processing

Data collected through the Site are processed for the following purposes:

Account creation and log in: To manage User accounts, provide access to the Site, maintain security, and send promotional offers.
Product or gift card purchase: For order management, customer service, accounting, fraud prevention, and customer relationship management.
Cookie usage: To collect information on the User's navigation.
Newsletter subscription: To manage subscription to the newsletter and send promotional offers.

6. Data Retention Period

Data is retained by BAHR SAMA for the duration necessary to achieve the purpose which justified the collection/recording of such Data, in accordance with the Law. Data required to establish a right or contract, or retained for legal obligations, may be securely archived for as long as necessary. Data used for marketing purposes may be retained for 3 years from the end of the commercial relationship. After this period, BAHR SAMA may contact the User to determine whether he/she wishes to continue receiving promotional offers.

7. Data Access and Storage

BAHR SAMA is the Data Controller. Its collaborators responsible for logistics and IT management may have access to Data when necessary to fulfill the purposes referred to in Article 5 above.

The Site is hosted on Wix.com which provides the online platform that enables BAHR SAMA to sell its products and services. Data may be stored through Wix's data storage, databases and general applications. Data is stored on secure servers behind a firewall. Payment processing follows PCI-DSS standards. Data is stored within the European Union.

8. Data Protection

BAHR SAMA implements appropriate technical and organizational measures in compliance with the Law to protect Data against alteration, accidental or unlawful loss, misuse, unauthorized disclosure or access. In case of a Data breach that constitutes a risk to individuals' rights and freedoms, BAHR SAMA will notify the CNIL (French Data Protection Authority) as soon as possible, in compliance with the Law.

9. User Rights

Users have the right to access, correct, complete, or update their Data. They may also request Data deletion or object to processing on legitimate grounds. Users can withdraw their consent to the processing at any time. Users may provide instructions regarding the management of their Data after their death. To exercise such rights, please send a request to contact@bahrsama.com. BAHR SAMA may request proof of identity to respond to the request. For more information on data protection, Users may contact the CNIL (https://www.cnil.fr) or other competent authorities.

Last update: 1 March 2025.