01Preamble
ETHNEIA Cosmetics (hereinafter "ETHNEIA", "we") places particular importance on protecting your privacy and personal data.
This Privacy Policy describes, with full transparency, how we collect, use, retain and protect your data when you visit our website ethneia.com or contact us.
It applies exclusively to the ETHNEIA Site. When you purchase our products on Amazon, Amazon's privacy policy applies, accessible from their website.
02Data controller
The controller of your data is:
- Entity
- Alphamart Global LLC, operator of the ETHNEIA Cosmetics brand
- Address
- 64, rue Anatole France, 92300 Levallois-Perret, France
- info@ethneia.fr
Given the size of our structure, we have not appointed a Data Protection Officer (DPO). For any questions regarding your data, you may write to us at the address above.
03Data collected
Depending on your use of the Site, we may collect the following categories of data:
Browsing data
- IP address
- Browser type and version
- Operating system
- Pages viewed and visit duration
- Referring site
Contact data
When you write to us (email, contact form), we collect:
- First and last name
- Email address
- Content of your message
Correspondence data
When you subscribe to our Private Correspondence via the dedicated form, we collect:
- Email address
We do not collect any banking or payment data, as purchases are made directly on Amazon, which handles its own processing.
04Purposes & legal bases
Your data is processed for the following purposes, each based on a specific legal basis in accordance with article 6 of the GDPR:
- Ensuring the proper functioning of the Site — legitimate interest
- Responding to your contact requests — execution of pre-contractual measures or legitimate interest
- Sending our Private Correspondence (news, product updates, editorial content), if you have subscribed — consent (revocable at any time)
- Measuring Site traffic and improving the user experience — consent via cookie banner
- Meeting our legal and accounting obligations — legal obligation
05Retention periods
- Browsing data: up to 13 months maximum (CNIL recommendation)
- Contact requests: 3 years from the last exchange
- Private Correspondence subscription: until you withdraw consent, then deleted from our list within a reasonable time
- Form submissions stored by Web3Forms: 30 days, then automatically deleted by the provider
- Accounting and commercial documents: 10 years (legal obligation)
Beyond these periods, data is deleted or anonymized.
06Data recipients
Your data is never sold. It may be communicated:
- To authorized persons within ETHNEIA, within the limits of their missions
- To our technical subcontractors, all bound by a contract compliant with article 28 of the GDPR:
- Hostinger International Ltd — Site hosting (Cyprus, European Union)
- Web3Forms — collection and forwarding of Private Correspondence form submissions (United States, Amazon Web Services infrastructure)
- To competent authorities, upon duly substantiated legal request
07Transfers of data outside the European Union
Our form collection provider Web3Forms operates from the United States on Amazon Web Services infrastructure. When you submit the Private Correspondence form, your email address therefore transits through servers located outside the European Union.
These transfers are governed by appropriate safeguards compliant with the GDPR: Standard Contractual Clauses (SCCs) and, where applicable, certification under the Data Privacy Framework.
If we install a traffic analytics tool in the future (Google Analytics or equivalent), similar transfers may occur and this policy will be updated accordingly.
08Your rights
In accordance with articles 15 to 22 of the GDPR, you have the following rights over your personal data:
- Right of access — obtain confirmation that your data is being processed and receive a copy
- Right of rectification — have inaccurate or incomplete data corrected
- Right to erasure ("right to be forgotten") — request the deletion of your data in cases provided for by law
- Right to restriction of processing
- Right to portability — receive your data in a structured and commonly used format
- Right to object — object at any time, for reasons relating to your particular situation, to processing based on our legitimate interest
- Right to withdraw consent at any time, without affecting the lawfulness of prior processing
- Right to set guidelines regarding the fate of your data after your death
To exercise your rights, simply write to us at info@ethneia.fr specifying the subject of your request. Proof of identity may be requested in case of reasonable doubt as to your identity.
We undertake to respond to you within one month, possibly extended by two additional months in case of complex requests.
10Security
We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure, alteration or destruction: secure hosting, encryption of exchanges (HTTPS), restricted access to authorized personnel, strong passwords.
As no system is infallible, we cannot however guarantee absolute security.
11Policy modifications
This Privacy Policy may be modified at any time to reflect legal, regulatory, jurisprudential or technical developments. The last update date is indicated at the top of this page.
12Contact & complaints
For any question regarding your personal data, write to us at info@ethneia.fr.
If, after contacting us, you consider that your rights are not respected, you may file a complaint with the French Data Protection Authority (CNIL):
- Online: www.cnil.fr/en/plaintes
- By mail: CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Note to international visitors: ETHNEIA Cosmetics is a brand operated by Alphamart Global LLC and distributed in France. The CNIL is the competent authority for GDPR matters in France.