Privacy policy

Our customers’ rights regarding our use of their personal data, including how customers can exercise these rights and how they can contact us

In compliance with the French Data Protection Act of 6 January1978 amended and with European Regulation No. 2016/679 of 27 April 2016 (GDPR), you have the following rights for all data concerning you:

· The right to update your data,
· The right to delete your data,
· The right to access your data,
· The right to object to the processing of your data, to profiling,
· The right to request data portability,
. The right to restrict the processing of your personal data,
· The right to withdraw your permission for your contact details being used to send offers and promotions via email,
. The right to withdraw your consent for cookies being stored and read on your terminal,
· The right to define what will happen to your personal data after your death, and specifically to decide whether or not to send your data to a third party of your choosing

You can exercise your rights using the contact form available here:

https://galenic.com/pages/contact

Galénic may first ask for proof of identity.

You can also contact the Galénic Data Protection Officer at the following email address: dpo@galenic.com

In the absence of a satisfactory response, you can also make an enquiry on the CNIL (French National Commission for Data Protection) website: www.cnil.fr or make a complaint to this supervisory authority at the following address: CNIL - 3 Place de Fontenoy, 75007 Paris.

The people and service providers who have access to your data

1. In-house recipients. Access to your personal data is strictly limited to Galénic employees, authorised by virtue of their duties and subject to abiding by the applicable regulations in terms of personal data protection, namely (i) customer services (ii) the invoicing department and (iii) technical support, in the event that it is necessary to access your personal data during upgrades or corrective maintenance. Your data may be sent to Galénic’s management, for processing pre-litigation and litigation cases and for the purposes of pharmacovigilance obligations. Specifically, it may be sent to the Chairman of Galénic Cosmetics Laboratory SAS and Yatsen Global PTE LTD, a company for which the registered office is located in Singapore. The standard contractual clauses of the European Commission dated 4 June 2021 are there to govern personal data protection in such a way that complies with GDPR rules with respect to this communication. For the purposes of pharmacovigilance obligations, the data will be pseudonymised.
   
   b) Galénic service providers. The data collected will be sent to our service providers who are contractually responsible for ensuring that the Website and its functions are working correctly, including in terms of processing your orders and requests, namely:
   The service provider for customer services,
   ● The service provider for customer management,
   ● The service provider for satisfaction surveys,
   ● The service provider for managing and running the social networks,
   ● The service provider for hosting,
   ● The service provider for cloud services,
   ● The service provider for email services,
   ● The technical service providers,
   ● Our payment service provider, in compliance with the PCI DSS standard,
   ● The service provider for analysing user behaviour,
   ● The social networks on which Galénic has created a dedicated page or account,
   ● The logistical carriers,
   ● The accountants, auditors and legal counsels,
   ● The Ministry of Health, for reporting cosmetovigilance incidents,
   ● The buyers of any assets and/or business assets if Galénic’s assets or business assets are sold

The precautions we take to ensure information security

Galénic implements all the technical and organisational means to ensure the security and privacy of your personal data, so as to prevent any attack on its integrity, to prevent its disclosure, or jeopardise its availability.

The transfer of data abroad

Your personal data is processed by Galénic in France, but also in countries where personal data protection is deemed sufficient by the European Union, such as Canada.

Galénic sends some of your personal data to service providers outside of the European Union (United States, Singapore, China). In which case, Galénic goes by the standard Contractual Clauses decreed by the European Commission, or by the binding corporate rules validated by a supervisory authority, such as the CNIL (French National Commission for Data Protection). Galénic applies the relevant guarantees, and where necessary, additional security measures.

The use of cookies

Cookies are files that may be stored on your terminal (computer, mobile) then read by Galénic or third parties, when visiting the Website thanks to your browser software. The list of cookies and their purpose is shown in the cookie consent tool, as well as on every page of the Website. This consent management tool allows you to withdraw your consent for cookies being stored and read.

Galénic uses the cookies required for the operation of the Website and for product orders: this includes technical cookies for authentication purposes, session identification cookies and shopping basket cookies. If you delete them, your Website experience may be disrupted.

You can deactivate/delete the non-obligatory cookies that have been stored by using the settings for each browser opened on your terminals (computer, smartphone, tablet, etc.)

Your consent is required for the storage and reading of cookies that are not fundamental to the operation of the service: this includes statistical cookies, advertising cookies and functional cookies. You can set the consent tool so that the storage of such cookies is rejected.

List of cookies

- Functional cookies required for the operation of Galénic’s Website issued by our service provider Shopify: https://www.shopify.fr/legal/cookies