PRIVACY POLICY
PRIVACY POLICY
Last Updated : 03/11/2026
ARTICLE 1. THE COMPANY
The company identified below is responsible for the collection and use of your personal information as described in this Privacy Policy.
Company: ON LINE SAS
Legal form: Société par Actions Simplifiée incorporated under French law
Share capital: €1,000
Registered office: 130 Rue Réaumur, 75002 Paris, France
Registered with the Paris Trade and Companies Register under number: 820 435 238
VAT number: FR 81820435238
Hereinafter referred to as the “Company” or “We”.
The Company designs, manages and operates the Website.
For any questions relating to this Privacy Policy, the use of your personal information on the Website or GERARD DAREL online applications, or for the exercise of your rights, you may contact the Company by email at the following address: eshop@gerarddarel.com.
The Company has appointed a Data Protection Officer (“DPO”), who may be contacted at the same email address, specifying “DPO” in the subject line.
ARTICLE 2. GENERAL PROVISIONS
The purpose of this Privacy Policy is to inform users of the website www.gerarddarel.com (hereinafter the “Website”) about the manner in which the Company collects and processes their personal information.
In particular, it describes:
- the personal information collected or otherwise processed,
- the manner in which personal information is collected, used, shared and protected when using the Website, purchasing GERARD DAREL products, contacting our services and subscribing to GERARD DAREL newsletters,
- the choices and rights available to users, as well as the procedures for exercising such rights.
The Company reserves the right to update and amend this Privacy Policy at any time. In the event of any change, the “Last updated” date indicated above shall be modified accordingly to reflect the date on which such changes became effective.
In the event of a material modification to this Privacy Policy, the Company shall inform you by email.
You are informed that for any contract relating to the purchase and sale of Products where delivery takes place outside France, the merchant of record on the Website is GLOBAL-E France SAS, a simplified joint-stock company (société par actions simplifiée) with a share capital of €10,000, having its registered office at 320 rue Saint-Honoré, 75001 Paris, France, registered with the Paris Trade and Companies Register under number 818 358 459 and under intra-community VAT number FR54818358459 (hereinafter “Global-e”).
Global-e is the Company’s international e-commerce partner responsible for facilitating international sales (outside France, with the list of relevant countries available on the Website).
In this context, certain personal information may be collected and processed by Global-e. Any processing carried out by Global-e is governed by its own privacy policy, available at the following address: https://www.global-e.com/consumer-privacy-policy
ARTICLE 3. YOUR PERSONAL INFORMATION
a. Information Collected
The personal information we collect depends on the interactions you have with us through the Website and the purposes of such interactions.
The Company collects your personal information:
- when you create a customer account;
- when you subscribe to our newsletter;
- when you subscribe to product availability alerts;
- when you access and view our electronic communications;
- when you use our Website (in particular through the cookies you accept);
- when you make a purchase on the Website;
- when you contact the Company by email, telephone or through any other contact method available on the Website,
- when you submit a product review, feedback or a response to a survey.
We limit the personal information we collect to what is relevant and reasonably necessary for the purposes described in this Privacy Policy.
Depending on your interactions with us, we may collect the following categories of personal information, either directly from you or automatically when you use the Website or interact with our electronic communications:
- Identification and contact details, such as your first name, surname, language and country from which you interact with us, as well as your contact information, including your email address, postal address, delivery address and telephone number.
- Financial and payment information, together with information relating to your purchases, orders and returns. Payments are handled through our payment partners, and we do not retain your full bank card details.
- Connection, geolocation and browsing data (for example, where you use the “find a store” service), collected notably through cookies or similar technologies. Such data includes your IP address, browser type and version, location and time zone, browser extensions, operating system and platform, as well as other technical information relating to the device you use to access our Website. This may also include information regarding your visit, such as URLs and clickstream data to, through and from our Website (including date and time), the products you viewed or searched for, page response times, download errors, the duration of visits to certain pages, page interaction data (such as scrolling, clicks and cursor movements), and methods used to browse away from the page.
Certain cookies are strictly necessary for the proper functioning of the Website, while others are used for analytical purposes in order to provide you with more personalised services and an enhanced browsing experience.
We invite you to consult our Cookies Policy for further information in this regard.
- Your profile information – where you create a customer account and log in when visiting our Website, certain data will be stored, such as your customer ID, password, recent purchases and preferences.
- Your personal preferences, including your marketing preferences and cookie preferences.
- Additional personal information, including, in particular, your date of birth and gender. We are the sole recipient and holder of such additional information, which we use for analytical purposes in order to improve our services.
Where we ask you to provide personal data in order to access a feature or service, certain fields are mandatory because the relevant data is necessary to enable access to such functionality (for example, your postal address is required in order to deliver your order).
It is important that the personal data you share with us is accurate and kept up to date. We therefore invite you to update your data should any changes occur.
b. Purposes and Legal Bases for the Collection of Your Personal Information
The Company collects and uses your personal information for the purposes described above, relying on the following grounds:
- consent: where we have obtained your prior consent, including for marketing communications, cookies and tracking technologies where required. You may withdraw your consent at any time;
- performance of a contract: w here necessary to perform a contract with you or take steps at your request before entering into a contract, including creating and managing your customer account and providing services you have requested;
- legitimate interest: where necessary to respond to your enquiries, improve our Website and services, prevent fraud or establish, exercise or defend legal claims, provided that those interests do not override your interests, fundamental rights or freedoms. We do not rely on this ground where your consent is required;
- compliance with applicable laws and regulations: where necessary to meet our accounting and record-keeping obligations or respond to binding requests from competent authorities.
ARTICLE 4. DISCLOSURE OF YOUR PERSONAL INFORMATION
The disclosure of your personal information is limited to:
- authorised members of our staff who need to access and use such data in the course of their duties, it being specified that our staff members are bound by confidentiality obligations. These individuals may include personnel in charge of customer relations, e-commerce, communication/marketing, legal, finance or IT services.
- service providers: in the course of your use of the Website, we may share your personal information with third parties with whom we work to provide services to you. Such third parties may include financial institutions, fraud detection and prevention entities, logistics/transport/delivery providers, and marketing and advertising service providers. Disclosure to such third parties may occur for the purposes of processing and delivering your orders, handling payments, verifying your identity, or using analytics software enabling us to process your data in order to optimise your purchasing experience on the Website.
Where you are redirected to a third-party service, such as a payment provider, please refer to the privacy policy made available by that provider for information about how it handles your personal information.
The processing of your personal data by such third parties is carried out solely on the basis of our prior instructions and not for their own purposes.
These third parties have undertaken to preserve the confidentiality of your personal information, not to use it for any purpose other than those specified, and to implement all necessary security measures to protect your personal information.
It is also specified that, in the context of international sales, certain personal data may be transferred to Global-e under the conditions described above.
- competent authorities and courts, where required by applicable law or regulation.
ARTICLE 5. SECURITY OF YOUR PERSONAL INFORMATION
The Company implements appropriate security measures designed to prevent the loss, misuse, unauthorised access to, alteration or disclosure of your personal information. All data you provide to us is stored on secure servers. We have also implemented procedures to deal with any personal information breach.
Where you create a customer account, you will choose a password. You are responsible for maintaining the confidentiality of this password. We therefore recommend that you choose a strong password and do not share it with anyone.
We recommend that you connect only through secure networks, preferably private networks. You should remain aware of the risks associated with the use of public Wi-Fi networks.
If you receive an email purporting to originate from the Company requesting that you provide personal information, please do not respond to it and instead forward the email to us so that we may take the necessary measures.
Our service providers operating within the European Economic Area (EEA) are subject to a common data protection framework. Where certain service providers process your personal information outside the EEA, appropriate safeguards have been implemented to protect it, including standard contractual clauses where required.
ARTICLE 6. RETENTION OF YOUR PERSONAL INFORMATION
We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including to provide our services, manage our relationship with you, resolve disputes and establish, exercise or defend legal claims.
Retention periods are determined by reference to the purposes for which the information is used, the nature of the information, and applicable statutory retention requirements and limitation periods.
When your personal information is no longer required for these purposes or to meet legal requirements, it is securely deleted or anonymised.
ARTICLE 7. YOUR RIGHTS
Where we request your consent to use your personal information, we explain how your information will be used and provide a clear means of indicating your choice, including when subscribing to our newsletter or accepting cookies and similar technologies.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
Our Website is intended for a general adult audience and is not directed at children. Where parental or guardian consent is required for the collection and use of a child’s personal information, we will not knowingly collect or use that information without such consent.
If you believe that a child has provided us with personal information without the required consent, please contact us using the details provided in Article 8. We will review the matter and take appropriate steps, including deleting the information where necessary.
To unsubscribe from our direct marketing communications, you may at any time click on the link appearing at the bottom of each email stating: “To unsubscribe, please visit this page.” A page will then open, and you simply need to click on the “Confirm unsubscription” button. If you have a customer account on the Website, you may also unsubscribe or modify your preferences by logging into your profile.
You may manage your cookie preferences at any time through the settings available on the Website. We invite you to consult our Cookies Policy for further information.
Depending on your place of residence and the circumstances in which your personal information is processed, you may have the following rights, subject to the relevant conditions and exceptions:
- Right of access and information: the right to obtain confirmation of whether we process your personal information, access that information and receive information about its collection, use and disclosure, including the categories of information collected, its sources, the purposes of processing and, where applicable, an account of the organisations to which your personal information has been disclosed;
- Right to rectification: the right to request the correction and/or completion of your personal information. If you have a customer account, you may also amend your personal details directly from your customer area;
- Right to erasure: the right to request the deletion of your personal information;
- Right to restriction of processing: the right to request that we restrict the processing of your personal information in certain circumstances;
- Right to portability: the right to receive certain personal information in a structured, commonly used and machine-readable format and, where applicable, to request its transfer to another organisation;
- Right to object to processing: the right to object to the use of your personal information for direct marketing and, in certain other circumstances, to processing based on our legitimate interests;
- Right to opt out of certain uses and disclosures: where applicable, the right to opt out of the sale of your personal information, its sharing for cross-context behavioural advertising, or its use for targeted advertising. You may also have the right to limit certain uses and disclosures of sensitive personal information;
- Information about our privacy practices: the right to obtain information about our policies and practices concerning the management of personal information, including the contact details of the person responsible for privacy matters and how to request access to your personal information.
We will not unlawfully discriminate against you for exercising your privacy rights.
To exercise your rights or raise a concern about how we handle your personal information, you may contact us at any time using the contact details provided in Article 8. Where permitted, you may authorise another person to submit a request on your behalf.
Where necessary and permitted, we may request additional information to verify your identity or the authority of a person acting on your behalf. We will only request information reasonably necessary for that purpose. Identity verification is not required for requests to opt out of the sale or sharing of personal information, although we may need information to identify the information to which your request relates.
We will respond within the applicable legal time limits. If we cannot grant your request in full, we will explain the reasons, subject to any legal restrictions. Where you have a right to appeal our decision, you may do so by contacting us using the details provided in Article 8.
You may also lodge a complaint with the competent privacy or data protection authority. For UK residents, this includes the Information Commissioner’s Office (ICO); for Canadian residents, the Office of the Privacy Commissioner of Canada or the relevant provincial authority including the Commission d’accès à l’information du Québec ; and for US residents, the relevant state Attorney General or privacy regulator, including the California Privacy Protection Agency.
ARTICLE 8. CONTACT US
For any questions relating to this Privacy Policy, any complaint, or the exercise of your rights, you may contact us:
- by email: eshop@gerarddarel.com
- by post at the following address:
ON LINE SAS
GERARD DAREL – Personal Data Protection Department
130 rue Réaumur
75002 Paris
France
