General Data Protection Regulation

Any data subject has the right to ask whether STRADIVARIUS Editions processes personal data concerning them.

Where such data is processed, the data subject may obtain, in particular:

• access to their personal data;
• information about the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the data has been or will be disclosed;
• where possible, the envisaged period for which the personal data will be stored or, where this is not possible, the criteria used to determine that period;
• information concerning the right to request rectification or erasure of personal data, or restriction of processing;
• information concerning the right to object to processing;
• the right to lodge a complaint with a supervisory authority;
• where the personal data has not been collected directly from the data subject, any available information regarding its source;
• information concerning the existence of automated decision-making, including profiling, and the information required by the GDPR in this respect;
• where personal data is transferred to a third country or an international organisation, information concerning the appropriate safeguards implemented in accordance with the GDPR.

A copy of the personal data being processed may be requested under the conditions provided for by the GDPR.

Any data subject has the right to obtain, without undue delay, the rectification of inaccurate personal data concerning them.

They also have the right to have incomplete personal data completed, including by providing a supplementary statement.

Any data subject may request the erasure of their personal data where one of the grounds provided for by the GDPR applies, including where:

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• the data subject withdraws their consent and there is no other legal basis for the processing;
• the data subject objects to the processing and there are no overriding legitimate grounds;
• the personal data has been unlawfully processed;
• the personal data must be erased to comply with a legal obligation.

This right may nevertheless be limited where the retention of the data is necessary, in particular, to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

Any data subject may request restriction of the processing of their personal data in the circumstances provided for by the GDPR, including where:

• the accuracy of the personal data is contested, for the period necessary to verify its accuracy;
• the processing is unlawful and the data subject opposes the erasure of the data;
• STRADIVARIUS Editions no longer needs the personal data, but the data subject requires it for the establishment, exercise or defence of legal claims;
• the data subject has objected to the processing and verification is required as to whether the legitimate grounds pursued by STRADIVARIUS Editions override the data subject's rights.

Where processing has been restricted, personal data may only be processed, subject to the exceptions provided for by the GDPR, with the data subject's consent or in the cases authorised by the GDPR.

Where the conditions laid down by the GDPR are met, any data subject has the right to receive the personal data concerning them which they have provided to STRADIVARIUS Editions in a structured, commonly used and machine-readable format.

They also have the right to request that such data be transmitted directly to another data controller where technically feasible.

This right applies where processing is based on consent or on a contract and is carried out by automated means.

Any data subject has the right to object, on grounds relating to their particular situation, to the processing of their personal data where such processing is based on the legitimate interests pursued by STRADIVARIUS Editions.

STRADIVARIUS Editions will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or unless the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such purposes, including profiling insofar as it is related to such direct marketing.

Where a data subject objects to direct marketing, their personal data will no longer be processed for such purposes.

STRADIVARIUS Editions uses cookies and similar technologies that are necessary for the operation of the website and for the personalisation of the service.

They may in particular be used to:

• remember the selected display language (French or English);
• remember certain preferences necessary for displaying the website, including the currency used;
• maintain customer authentication when a user is logged into their account;
• retain certain account-related information necessary for the operation and personalisation of the service, such as the customer's first name or instrument.

The shopping cart is primarily managed using session data, and the information necessary for its operation is progressively recorded in our database during browsing and the ordering process.

Where such cookies and trackers are strictly necessary for the operation of the service or for intrinsic and expected personalisation of the service, they are exempt from prior consent under Article 82 of the French Data Protection Act. The CNIL specifically identifies, among others, trackers used for authentication, shopping carts and interface personalisation, including language selection, as potentially benefiting from this exemption.

These cookies are retained for a maximum period of 30 days.

Users may configure their browser to restrict or refuse certain cookies. Disabling cookies that are necessary for the operation of the website may, however, affect certain website functionalities.

No cookie or tracker is used for behavioural advertising or for tracking users across third-party websites.

STRADIVARIUS Editions undertakes to:

1. preserve the confidentiality of personal data entrusted to us;
2. implement appropriate security measures to protect personal data;
3. maintain up-to-date documentation concerning our personal data processing activities;
4. collect only the data necessary for the purposes pursued;
5. integrate data protection into the design of new features, software and services;
6. take the necessary measures in the event of a personal data breach and make the notifications required by the GDPR where applicable;
7. enable data subjects to effectively exercise their rights in accordance with the GDPR.

To exercise any of these rights, please contact STRADIVARIUS Editions using the dedicated form or the contact details provided for this purpose.

This policy may be updated from time to time to reflect changes to the website, its services or applicable legislation.