Privacy policy

IN-CARNATION SARL, a French company registered at the Paris Trade and Companies Register under the number 529 751 034, located at 40 rue de Paradis 75010 Paris, France, email : customerservice@yproject.fr, (hereinafter referred to as “Y/PROJECT”)

Date: October 8, 2020. This document has been updated to comply with the requirements of the General Data Protection Regulations (GPDR) which came into force on 25 May 2018.

Y/PROJECT is determined to respect your privacy and protect your personal data.

This Confidentiality and Data Protection Policy (the “Confidentiality Policy”) is designed  to inform you about our use of your personal data that we gather when you access the website yproject.fr (the “Website”), when you purchase any goods at Y/PROJECT points of sale or when you contact Y/PROJECT.

The Website is hosted by SHOPIFY. Its publication director is Mr. Gilles ELALOUF.

This Confidentiality Policy will enable you to determine the origin and the use of the information that we gather, as well as your rights and options under the applicable data protection rules and regulations.

We therefore ask you to read this document carefully.

Y/PROJECT may modify this Confidentiality Policy from time to time depending on the legal and regulatory context, and to keep you informed about changes in our personal data processing practices.

Y/PROJECT therefore recommends that you always become acquainted with the latest version of this Confidentiality Policy whenever you plan on having any interaction with Y/PROJECT, by visiting this section or by clicking on the “Confidentiality Policy” link at the bottom of the home page of the Website (see Section 3.9 “Modifications and updates of the Confidentiality Policy”).

Unless otherwise specified in separate provisions regarding specific instances of processing of personal data, the processing of your personal data that is described in this Confidentiality Policy shall be performed by the company IN-CARNATION, publisher of the Website and which is thus the “data controller” under the applicable data protection laws.

However, when you purchase a Y/PROJECT product (hereinafter “Product”) in any point of sale (whether physical or online) other than those owned by IN-CARNATION, the boutique where you place your orders or purchase the Products shall be solely and fully responsible for any processing of your personal data performed for purposes of transaction management and invoicing in connection with your purchases.

Y/PROJECT gathers your personal data when you use the Website, interact with Y/PROJECT or make purchases in the Y/PROJECT stores.

In addition to the information that you actively provide (e.g. when creating an account, indicating your address), information is likely to be automatically gathered or generated by our systems (e.g. in order to determine your favourite Products).

The data that we gather enables us:

To understand how you may oppose such use and withdraw your consent, please consult section 3.11 below.

Besides, controls are carried out in order to ensure the security of the Website and of the payments made on the Website, in accordance with article 3.2 below.

Your personal data is only accessible to authorised personnel working for Y/PROJECT and, if necessary, to our subcontractors and service providers, in order, notably, to ensure transportation and delivery of the Products ordered on the Website.

In general, your personal data will be kept by Y/PROJECT in accordance  with article 3.6 below, as long as you remain a client and until the expiry of the applicable warranties. It will only be kept beyond that time with your permission or to meet our legal obligations.

You have a right to access, to amend, to request the erasure and to exercise other rights over your personal data, under the data protection laws and regulations, and in accordance with the conditions set forth in articles 3.10 and 3.11 below.

You may also contact us at any time at the address and details featured in the “Contact” section of the Website.

Your personal data is only gathered when Y/PROJECT has a legal basis for doing so.

We therefore process your personal data only when necessary:

For all these purposes founded on our legitimate interest, we take into consideration any potential impact that the gathering of this data may have upon you and upon the users of the Website in general. Should we believe that your interests or your fundamental rights and freedoms transcend our legitimate interests, we will refrain from using your personal data on this basis and may ask you for your consent on a case by case basis.

In order to combat fraud over the Internet, information concerning your order and concerning the terminal used to place the order (such as the operating system used, the location of the machine, whether or not a proxy was used, etc.) is gathered automatically and used, subject to your consent, to analyse your transactions for purposes of fraud detection and prevention of payment defaults. The information may be transmitted to our payment service provider and to any third party that is duly authorised by law for the sole purposes of checking your identity, the validity of the order, of the payment method used and of the requested delivery address.

You may withhold or withdraw your consent at any point in time in accordance with the terms hereinafter set forth in our Cookies Policy. However, should you refuse to allow us to use Cookies to secure the transactions, your order may not be approved automatically and will have to be reviewed manually. You may be asked for proof of identity in order to confirm your order.

We gather the information that you disclose to us directly when you use our Website and our services.

This is for instance the case when you create an account online, you register to receive our news, you make a purchase online or from our stores.

The categories of personal data that we gather directly from you include:

The personal data that is indispensable for Y/PROJECT to fulfil the purposes described above is highlighted in the various pages of the Website. Should you not disclose this data in the mandatory fields, Y/PROJECT may not be able to respond to your requests and/or supply you with the Products and services that you want. All other data is merely optional and enables us to know you better and to improve the way in which we communicate with you and the services that we provide to you.

In our stores or during the events that we organise (for instance: fashion shows or private sales in your local store), we may gather additional personal data under terms and for uses that shall be specifically notified to you on this occasion.

Other data is gathered automatically when you access the Website, use our services or perform a transaction with us:

In some cases, Y/PROJECT will gather information that you provide about other people, for instance when you decide to buy and send Products to someone else. This information is only used to fulfil your requests and never to send marketing communications to your contacts, unless they personally choose to receive information from Y/PROJECT.

Your personal data is processed by Y/PROJECT. It will not be transferred or made accessible to any third party other than (i) Y/PROJECT’s subcontractors and service providers (for example, our Customer Service unit) who are involved in a purely technical or logistical capacity (carriers, providers of hosting and maintenance services to the Website, payment and fraud prevention service providers, etc.), and (ii) upon any reorganisation of our company, including a total or partial disposal of our assets, merger, takeover, acquisition, de-merger, and in general any reorganisation operation, in order to ensure the continuity of the services provided. 

Your personal data is accessible to the authorised personnel working in Y/PROJECT’s stores and entities with which you are in contact, as well as to our Customer Service and sales promotion teams.

You may thus receive from them, subject to your consent, information about the offers, news and events of our company in France and abroad.

Finally, Y/PROJECT may disclose your personal data to third parties when such disclosure is required by a law, a regulatory provision or a court ruling, or if this disclosure is necessary to ensure the protection and the defence of its interests (for instance to our external agents and counsels in case of debt recovery; to our insurance companies in case of the loan of a Product).

Your personal data may be transferred to our service providers located inside the European Union (and/or the European Economic Area, and/or in countries acknowledged as adequate by the European Union regarding personal data protection), in charge, among others of the delivery of your orders and the process of your requests.

These transfers shall only occur, to the necessary extent, to deal with your requests and provide you with the same level of service in all the stores you may be in contact with.

Your personal data may also be transferred to service providers located outside the European Union or the European Economic Area, and non-acknowledged as adequate by the European Union regarding personal data protection, especially the United States. Should the case arise, such transfers shall only take place subject to appropriate guarantees designed to ensure a sufficient level of protection to your privacy and fundamental rights, such as the signature of the standard contractual terms adopted by the European Commission. A document detailing the guarantees implemented by Y/PROJECT shall be disclosed immediately upon receipt of a request sent to Y/PROJECT.

Moreover, your personal data may also be transferred as part of your orders to our service providers based outside the European Union that are involved in delivering your orders.

Y/PROJECT shall not retain your personal data beyond the duration that is strictly necessary for the accomplishment of the purposes for which it was gathered.

The identification data of the client that is used with the client’s consent to send out promotional messages, newsletters and other Y/PROJECT publications shall be kept for a period of three years as of its gathering or as of the last contact initiated by the client.

Any personal data and general information about your requests (for example, opening date, closing date, subject of the request) that is gathered and processed under the section entitled “Contact us” or pursuant to contact with the Customer Service unit will be kept for 5 years in our unique customer repository. Call recordings are kept for 6 months by our Customer Services unit.

Y/PROJECT may also keep for archiving purposes copies of its correspondence with the users of the Website and any response to the questions or comments sent to the users by our Customer Service unit.  

Y/PROJECT will keep the data concerning your orders for as long as you remain a client (i.e. have an active client account or are a regular contact of our stores) and until the expiry of the applicable warranties. This data will only be kept beyond that time with your consent or for accounting and evidential purposes or to meet our legal obligations, or, after having been anonymised, for purposes of studies and statistics.

Your payment data will be kept securely for the duration that is needed to confirm your order and payment and will then be immediately destroyed. In case of a problem with payment, your data will be kept throughout the duration of the management of the incident, then for a period of three (3) to five (5) years, depending on the severity of the incident.

Your client account on our Website will remain active until you decide to close it and for as long as you make purchases on our Website. In case of protracted inactivity on your part over a period of 3 years, this account will be deactivated.

After the expiry of this three-year period, Y/PROJECT may get in contact with its clients to find out whether or not they want (i) to continue to receive promotional messages, newsletters and other publications from Y/PROJECT and/or (ii) to retain their client account on the Website. Your data will be destroyed within 2 working days as of your sending us a request to unsubscribe.

Clients may close their accounts and/or unsubscribe from our promotional communications, announcements, newsletters, etc. at any time. In order to do so, please contact our Customer Service unit by sending an e-mail to [customerservice@yproject.fr] or by clicking on the “unsubscribe” link featured in each message. You may also exercise this right by sending a request to the contact address featured on the homepage of the Website.

The connection logs that are gathered with your consent by the Cookies and other tracers implemented on our Website will be kept in accordance with the applicable regulations for a period of time that shall not exceed thirteen (13) months. For more details, see our Cookies Policy.

The Website may contain links to third party websites. Y/PROJECT has no control over the content, the confidentiality policy and the data protection policy or the actions of these third party websites. The use of the information that you may provide to third parties on other sites or that these third parties may gather on those other websites is not governed by this Confidentiality Policy. You should carefully examine the confidentiality and data protection policies of any third party web sites and contact the publishers of these websites should you have any questions about the way they use your personal data. Y/PROJECT hereby disclaims liability for any failure by a third party to use your personal data in accordance with their confidentiality policy or in accordance with any contractual or legal obligation that is binding upon them.

Y/PROJECT has implemented appropriate technical and organisational measures to guarantee the confidentiality and the security of your personal data against any loss, destruction, alteration, unauthorised access or disclosure.

This Confidentiality Policy is in keeping with the prevailing practices at Y/PROJECT. It may be modified and updated to reflect the changes in Y/PROJECT’s practices, to provide more information or to ensure compliance with the applicable regulations.

In case of a modification or update, the revised Confidentiality Policy shall be put online on the Website, with a statement indicating the date of the latest update. You will also be informed by a message on the Website urging you to read the updated Confidentiality Policy. 

You have the right to access your personal data and to request the rectification or the destruction of any data that would turn out to be inaccurate. If you have a client account with Y/PROJECT, you may directly access the data contained in your online account and rectify/eliminate it where applicable, as well as access the chronology/log of your transactions and your choices in terms of sales prospection.

Where applicable, you must ensure that you disclose to Y/PROJECT any updates or changes to your personal data, including your postal and/or e-mail address, in order to enable us to dispatch your orders to the right address and to contact you about your orders if necessary.

Erasure: You may also request the erasure of your personal data provided that it is no longer necessary for Y/PROJECT to keep it.

Opposition: You can also oppose the processing of your personal data or request the imposition of limitations on such processing, unless the processing is necessary for the management of the Services that you request.

Withdrawal of consent: Where the processing of your data is based on your consent, you may withdraw this consent at any point in time. 

Portability: You may moreover exercise your right to portability, i.e. obtain, in a structured, machine-readable form, the personal data that you provided to us directly on the basis of your consent or of a contract drawn up and signed with you and that that is undergoing automated processing.

Directives: You may also let us know your instructions regarding the preservation, erasure and disclosure of your personal data after your death, and modify these directives at any point in time.

These rights may be exercised directly with Y/PROJECT, by contacting us in accordance with the terms of the section 4 below. You may be asked for proof of your identity.

You may withdraw your consent at any time and request to no longer receive correspondence from us regarding our offers, news and events, by using the hypertext link that is included for this purpose in each e-mail that we send you. You may also contact us by e-mail sent to the following address: [customerservice@yproject.fr].

You may also oppose to Y/PROJECT’s use of your personal data for purposes of marketing or drawing up your client profile; in that case, however, you will no longer benefit from customised offers or services.

Should you have any questions about this Confidentiality Policy and Y/PROJECT’s data protection practices, please do not hesitate to contact our Customer Service unit via the “Contact us” section on the Website or directly, by sending an e-mail to our Customer Service unit at the address [customerservice@yproject.fr], , or by sending us a letter addressed to Y/PROJECT, 40, rue de Paradis, 75010 Paris, France.

Should you be unhappy about the way in which Y/PROJECT gathers and processes your personal data, you may file a complaint with France’s CNIL [data protection watchdog] by visiting https://www.cnil.fr/fr/plaintes/ or by writing to the following address: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France (www.cnil.fr), or if you are a resident of another European Union country, you may file a complaint with the data protection regulating body with jurisdiction over the place where your main residence is located, or the place where you have been dealing with Y/PROJECT.