Politique de Confidentialité & Protection des Données Personnelles

1. Cadre Juridique & Champ d'Application International

Given the international scope of GENEVA DIAL’s activities, this policy is drafted and applied in compliance with the principal personal data protection regulations, including:

• The General Data Protection Regulation (RGPD – EU 2016/679) and the French Informatique et Libertés law for the European Union;
• The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 for the United Kingdom;
• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), for US residents of California, and US interstate standards;
• The Personal Information Protection and Electronic Documents Act (LPRPDE / PIPEDA) for Canada;
• Local regulations applicable to cross-border e-commerce in the rest of the world.

2. Identity of the Data Controller

The controller of personal data collected on the website is the company publishing the GENEVA DIAL brand (hereinafter the “Atelier”, “we” or “our”).

• Trading name: GENEVA DIAL
• Data Protection Department (DPO / Data Privacy): dpo@genevadial.com / contact@genevadial.com
• Support client : Accessible 7j/7 via la rubrique Aide & Support du site web ou par e-mail / WhatsApp.

3. Personal Data Collected

We collect only the information strictly necessary to provide our high-quality services and fulfil your orders.

A. Data provided directly by the user

• Identity and contact details: First name, surname, delivery address, billing address, email address, telephone number (for delivery tracking and SMS notifications).
• Order data: Details of clocks and accessories purchased, purchase history, order number, language and currency preferences.
• Communications with Customer Service: Content of your messages, emails, WhatsApp conversations or contact forms, as well as customer reviews submitted.

B. Payment Data (Financial Security)

All financial transactions are managed in encrypted form by our PCI-DSS-certified payment service providers (including Stripe, PayPal, Apple Pay, Google Pay).

GENEVA DIAL never has access to your full banking details (payment card numbers, card security codes or PINs). We retain only an encrypted transaction identifier supplied by the payment gateway.

C. Browsing Data Collected Automatically

• Technical data: IP address (anonymised or geolocated at regional level), browser type and version, operating system, screen resolution, configured language.
• Interaction data: Pages visited, session duration, products viewed, conversion paths, shopping basket, traffic source and referrals.

4. Processing Purposes and Legal Bases

We process your personal data only where we have a valid legal basis under the law:

5. Data Recipients and Processors

Your personal data is strictly confidential. GENEVA DIAL does not sell, rent or transfer ANY personal data to third parties for commercial or advertising purposes.

Solely for the provision of our services, your data may be shared with carefully selected service providers acting as processors:

• Logistics Providers and Carriers: Global transport companies and postal services (e.g. DHL, FedEx, UPS, Colissimo, La Poste) to deliver your parcels to your home.
• Secure Payment Gateways: Financial organisations ensuring transaction security (Stripe, PayPal, Apple Pay, Google Pay).
• Infrastructures Techniques & Hébergement : Secure cloud hosting providers (e.g. Vercel, AWS) and data analytics platforms ensuring website availability and speed.
• Customer Communication Tools: Platforms for newsletter management, tracking SMS messages and customer support (e.g. Klaviyo, WhatsApp Business).
• Legal Authorities: Where required by law, pursuant to a judicial, administrative or tax authority request.

6. International Data Transfers (Outside the EEA)

Given our worldwide customer base and use of international IT infrastructure, your personal data may be transferred to and stored on servers outside the European Economic Area (EEA).

In this context, GENEVA DIAL ensures that such transfers are covered by appropriate legal safeguards:

• Transfers to countries benefiting from a European Commission adequacy decision;
• Signing Standard Contractual Clauses (CCT / SCCs) approved by the European Commission with our processors;
• US providers’ participation in the EU-US / UK-US Data Privacy Framework (DPF).

7. Data Retention Periods

We apply a strict policy of minimising the retention of your information:

• Order and billing data: Retained for 10 years from the end of the financial year (legal, tax and accounting obligations).
• Données de la relation client & Garantie : Retained for the duration of the 2-year Manufacturer’s Warranty, then archived for a maximum of 3 years from the last contact.
• Marketing prospect data: Retained for 3 years from your last purchase or active interaction (or until you withdraw your consent).
• Cookies and tracking identifiers: Retained for a maximum of 13 months after being placed on your device.

8. Cookies, Pixels and Tracking Technologies

When you browse the GENEVA DIAL website, text files known as “cookies” or similar technologies (pixels, local storage) may be placed on your device.

Types of cookies used:

• Strictly Necessary Cookies (Functional): Essential for website operation, retaining your shopping basket, selecting language/currency and session security. They do not require your consent.
• Analytics and Performance Cookies: Used to measure website traffic, analyse visitor behaviour and optimise usability.
• Cookies et Pixels Marketing (Réseaux Sociaux & Ads) :Used to display targeted advertising and evaluate the effectiveness of our communication campaigns on third-party platforms (e.g. Meta/Facebook/Instagram, Google, TikTok).

Managing your preferences: You can accept, reject or customise cookie placement at any time through the consent management tool (cookie banner) on our website, or by directly configuring your browser settings.

9. Information Security and Encryption

GENEVA DIAL implements leading technical, physical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, disclosure or unauthorised access:

• Full encryption of the entire website and communications using the 256-bit SSL / TLS protocol;
• Access to personal data strictly limited to authorised Atelier staff subject to a confidentiality obligation;
• Regular security audits of our information systems and cloud hosting.

10. Protection of Minors

Our website and products are intended for adults with the legal capacity to make purchases online. We do not knowingly collect personal data concerning minors under 16 (or 18, depending on the jurisdiction). If you are a parent or guardian and discover that a minor has provided us with personal information, please contact us immediately so that we can delete it.

11. Your User Rights (International)

Whatever your country of residence, you have extensive rights over your personal data:

A. General Rights (RGPD / UK GDPR / PIPEDA)

• Right of access: Obtain confirmation that your data is being processed and receive a copy.
• Right to rectification: Request the correction of inaccurate or incomplete information.
• Right to erasure (“Right to be Forgotten”): Request the deletion of your personal data, subject to statutory retention obligations.
• Right to restriction of processing: Request a temporary suspension of the processing of your data in certain specific cases.
• Right to object: Object at any time to the processing of your data for direct marketing or profiling purposes.
• Right to data portability: Receive your data in a structured, commonly used and machine-readable format to transmit it to a third party.
• Right to withdraw your consent: Withdraw your consent at any time for processing based on consent (e.g. newsletter, cookies).

B. Specific Rights for US Residents (CCPA / CPRA – California)

If you reside in California or a US state with a privacy law:

• Right to Know: Obtain a list of the categories of data collected, shared or disclosed over the last 12 months.
• Right to Opt Out of Sale / Sharing: GENEVA DIAL does not sell and has never sold personal data in the traditional sense. However, if data sharing through advertising cookies qualifies as a “sale/sharing” under the CCPA, you can opt out through our consent banner or the “Do Not Sell or Share My Personal Information” link.
• Right to non-discrimination: We will not discriminate against users who exercise their rights, whether in pricing or service.

12. Exercising Your Rights and Complaints

To exercise any of your rights or ask a question about the management of your personal data, you can contact GENEVA DIAL customer service and DPO:

• Par e-mail : dpo@genevadial.com (ou via le formulaire de la rubrique Aide & Support du site)
• By post: Data Protection Department — GENEVA DIAL, [Physical address of your registered office / company]

Proof of identity may be requested where there is reasonable doubt, to ensure the security of your data. We undertake to respond to your request within a maximum of 30 days from receipt.

If, after contacting us, you believe your rights are not being respected, you have the right to lodge a complaint with the competent supervisory authority in your country:

• In France: The CNIL (Commission Nationale de l’Informatique et des Libertés) — www.cnil.fr
• In the United Kingdom: The ICO (Information Commissioner’s Office) — www.ico.org.uk
• In Europe: The data protection authority of your Member State of residence.

13. Changes to the Privacy Policy

GENEVA DIAL reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, technologies or the international legal framework. Any changes will be published on this page with the update date indicated. We encourage you to review this policy regularly.