Privacy & Cookies Policy
ARTICLE 1: PREAMBLE
This privacy policy applies to the site: Nafa Atelier .
The purpose of this privacy policy is to inform users of the site:
- The way in which their personal data is collected and processed. Personal data includes all data that can identify a user. This includes first and last name, age, postal address, email address, location of the user or even their IP address;
- What are the rights of users regarding this data;
- Who is responsible for the processing of personal data collected and processed;
- To whom this data is transmitted;
- Possibly, the site's policy regarding “cookies” files.
This privacy policy supplements the legal notices and the General Conditions of Use that users can consult at the following address:
ARTICLE 2: GENERAL PRINCIPLES REGARDING DATA COLLECTION AND PROCESSING
In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of data from users of the site respects the following principles:
- Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that their data is being collected, and for what reasons;
- Limited purposes: the collection and processing of data are carried out to meet one or more objectives determined in these general conditions of use;
- Minimization of data collection and processing: only data necessary for the proper execution of the objectives pursued by the site are collected;
- Retention of data reduced over time: the data is kept for a limited period, of which the user is informed. When this information cannot be communicated, the user is informed of the criteria used to determine the retention period;
- Integrity and confidentiality of data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below:
- The user has expressly consented to the processing;
- The processing is necessary for the proper performance of a contract;
- The processing meets a legal obligation;
- The processing is necessary to protect the vital interests of the data subject or another natural person;
- The processing may be explained by a necessity linked to the performance of a mission of public interest or which falls within the exercise of official authority
- The processing and collection of personal data is necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING BROWSING THE SITE
A. DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION
The personal data collected on the Nafa Atelier website are as follows:
At NAFA Atelier Boutique, we place great importance on protecting your personal data while providing you with the best possible shopping experience. When you browse our site, we collect and process certain personal data to improve our services and personalize your experience. Here is what data we collect:
IP Address: We log your IP address to ensure the security of our site and prevent fraudulent activity.
Cookies: We use cookies to collect information such as your browsing preferences, the products you view, and the time you spend on our site. This data helps us improve our site and offer you products that may be of interest to you.
Browsing Data: We collect data about your browsing behavior, such as clicks, mouse movements and actions on the site, to improve your experience and optimize our site.
Location Data: If you enable geolocation on your device, we may use approximate location data to provide you with relevant information, such as local stores or delivery options.
Browser information: We record information about your browser (type, version, language) to display our site optimally.
Referrers: We track the sources that directed you to our site, such as links from other websites or search engines
Device Data: We collect information about the type of device you are using, your operating system and screen resolution to provide you with a tailored experience.
Language preferences: We save your preferred language to display our site in the language that suits you best
Ad Interactions: If we display advertisements on our site, we may track your interactions (clicks, impressions) to improve our marketing
All this data is treated confidentially and securely, in accordance with the highest cybersecurity standards. Your trust is important to us, which is why we have developed a comprehensive privacy policy that explains in detail how we use and protect your data. We encourage you to review it to learn more about our approach to data protection.
This data is collected when the user performs one of the following operations on the site:
The NAFA Experience: Your Trust, Our Commitment.
At NAFA Atelier, we are committed to providing you with an exceptional shopping experience while scrupulously respecting your privacy. When you browse our website and perform specific actions, we collect personal data to personalize your experience and ensure the security of your transactions. Here's how it works:
Registration/User Account:
When you create an account on our site to simplify your future purchases, we collect essential information such as your name, email address and shipping address. This allows us to process your orders more quickly and keep you informed of our special offers.
Orders and Purchases:
When you make a purchase from our online store, we collect data necessary for the transaction, including your delivery address, your secure payment information (such as your credit card details), and details of the products you have selected.
Navigation and Interactions on the Site:
As you browse our site, we collect information about the pages you visit, the products you view, and how you interact with our site. This data helps us improve product presentation and personalize your shopping experience.
Subscribe to the Newsletter:
If you choose to subscribe to our newsletter, we will save your email address to provide you with exclusive information about our new products, promotions and news.
Reviews and Comments :
When you share your opinion or feedback on our products, we collect this information to better understand your preferences and help other customers with their purchasing decisions.
Customer Service:
When you contact our customer service for assistance or questions, we collect your contact information and details of your request to better serve you.
Parcel Tracking:
If you use our package tracking feature, we collect information about your order to provide you with real-time updates on the status of your delivery.
At NAFA Atelier Boutique, the security of your personal data is a top priority.
All data collected is treated confidentially and securely, in accordance with the highest security standards. To learn more about our commitment to data protection, we invite you to consult our full privacy policy.
Furthermore, when a payment is made on the site, proof of the transaction including the order form and the invoice will be kept in the site publisher's computer systems.
The data controller will keep all collected data in its website's computer systems under reasonable security conditions for a period of: 2 years.
The collection and processing of data serves the following purposes:
Why We Collect and Process Your Personal Data
At NAFA Atelier, we are transparent about the reasons why we collect
and process your personal data. Our commitment is to provide you with an exceptional and secure shopping experience while respecting your privacy. Here are the main purposes that explain why we collect and process your personal data:
Order Processing:
We store your contact, shipping and payment information to efficiently process and deliver your jewelry orders.
Improving Customer Experience :
Data about your browsing and interactions with our site helps us understand your preferences, personalize your shopping experience, and present you with products that match your interests.
Personalized Communication:
By using your email address, we can send you information about our latest products, special offers, and news that match your tastes and needs.
Responsive Customer Service:
Recording your contact information and request details allows us to quickly respond to your questions, concerns, or support needs.
Security and Fraud Prevention :
We collect data to ensure the security of your online transactions and to prevent fraudulent activity.
Analysis and Continuous Improvement:
Aggregated and anonymous user behavior data helps us analyze market trends, improve our website, and make informed decisions to meet your needs.
Order and Delivery Tracking:
Your order information allows us to provide you with real-time updates on the status of your delivery, for a seamless tracking experience.
Compliance with Legal Obligations:
We collect and retain certain data in accordance with applicable legal, tax and accounting requirements.
At NAFA Atelier Boutique, we are committed to using your personal data only for the purposes stated above. We do not share your data with third parties for commercial purposes without your explicit consent. The confidentiality and security of your data are of the utmost importance to us, and we make every effort to protect it in accordance with the highest cybersecurity standards. To learn more about our approach to data protection, we invite you to consult our complete privacy policy.
The data processing carried out is based on the following legal bases:
Execution of the Contract:
When you place an order on our website, the processing of your personal data is necessary for the execution of the purchase contract. This includes collecting your payment, delivery, and contact information to deliver your jewelry and securely process your transaction.
Consent :
When you choose to subscribe to our newsletter, we collect your email address with your explicit consent. You have the right to withdraw this consent at any time by unsubscribing.
Legitimate interests:
We process certain data for our legitimate interests, such as improving customer experience, preventing fraud, ensuring the security of online transactions, and analyzing market trends. We strive to balance these interests with respect for your privacy.
Legal Obligations:
Some data is collected and retained to comply with our legal, tax and accounting obligations as a business.
Execution of a Public Interest Task:
As part of the security of online transactions, we may process data to perform a task in the public interest, including fraud prevention.
Vital Protection:
In exceptional situations where there may be a threat to a person's life, health or safety, we may process personal data to protect vital interests.
B. TRANSMISSION OF DATA TO THIRD PARTIES
The personal data collected by the site is not transmitted to any third party, and is only processed by the publisher of the site.
C. DATA HOSTING
The Nafa Atelier website is hosted by: OVH, whose head office is located at the following address:
2 rue Kellermann BP – 80157 59053 ROUBAIX CEDEX 1
The host can be contacted at the following telephone number:
The data collected and processed by the site are exclusively hosted and processed in France.
ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER
A. THE DATA CONTROLLER
The controller of personal data is: Nathalia Farias Silva. She can be contacted as follows:
The data controller can be contacted by telephone at 07 79 03 71 03, from 8 a.m. to 6 p.m., Monday to Friday.
The data controller is responsible for determining the purposes and means used for processing personal data.
B. OBLIGATIONS OF THE DATA CONTROLLER
The data controller undertakes to protect the personal data collected, not to transmit it to third parties without the user having been informed and to respect the purposes for which this data was collected.
The site has an SSL certificate to ensure that information and data transfer through the site are secure.
An SSL (“Secure Socket Layer” Certificate) is intended to secure data exchanged between the user and the site.
In addition, the data controller undertakes to notify the user in the event of rectification or deletion of data, unless this entails disproportionate formalities, costs and procedures for the user.
In the event that the integrity, confidentiality or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means.
C. THE DATA PROTECTION OFFICER
Furthermore, the user is informed that a Data Protection Officer has been appointed: Nathalia Farias Silva.
The role of the Data Protection Officer is to ensure the proper implementation of national and supranational provisions relating to the collection and processing of personal data. They are sometimes referred to as the DPO (for Data Protection Officer).
The Data Protection Officer can be contacted as follows:
By email: contact@nafa-atelier.fr
ARTICLE 5: USER RIGHTS
In accordance with the regulations concerning the processing of personal data, the user has the rights listed below:
In order for the data controller to comply with his/her request, the user is required to provide: his/her first and last name as well as his/her email address, and if relevant, his/her account number or personal or subscriber space.
The data controller is required to respond to the user within a maximum of 30 (thirty) days
A. PRESENTATION OF USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING
a. Right of access, rectification and right to erasure
The user may view, update, modify or request the deletion of data concerning him/her, by following the procedure set out below.
At NAFA Atelier, we are committed to giving you full control over your personal data.
You have the right to access, update, modify, or delete your data at any time. Here's how you can do this:
Access to Your Personal Data:
To access your personal data that we have stored, please contact us by email at the data protection department email address] clearly stating your request for access to your personal data. We will respond within a reasonable time.
Update and Modification:
If you wish to update or change your personal information, such as your email address, delivery details, or other information, you can do so by logging into your user account on our website. Once logged in, you will have the opportunity to update your personal information.
Deletion of Your Data:
If you would like us to delete all your personal data from our system, please email us at [Data Protection Department email address] stating your data deletion request. We will take steps to comply with your request within a reasonable timeframe, in accordance with our legal obligations.
Withdrawal of Consent:
If you have given your consent to the processing of certain data, such as subscribing to our newsletter, you have the right to withdraw this consent at any time by unsubscribing.
An unsubscribe link is usually included in our promotional emails. You can also contact us to withdraw your consent.
Additional Assistance:
If you have any questions, concerns, or require further assistance regarding your personal data, please do not hesitate to contact our customer service at contact@nafa-atelier.fr or by phone at 07 79 03 71 03. Our team will be happy to assist you.
At NAFA Atelier, we take the protection of your personal data seriously and handle all requests related to your data with the utmost care. For more information about your data protection rights and how we process your data, we invite you to consult our full privacy policy.
If he has one, the user has the right to request the deletion of his personal space by following the following procedure:
How to Request the Deletion of Your Personal Space NAFA Atelier, we respect your right to delete your personal space if you wish.
Here is the procedure you must follow to make this request.
Log in to your account:
First, log in to your personal account on our website using your username or email address and password.
Access Account Settings:
Once logged in, navigate to the “Account Settings” or “My Account” section. This section can usually be found in your account navigation menu or in the top right corner of the page.
Request the Deletion of Your Personal Space:
In the “Account Settings” section, look for the option that allows you to request deletion of your personal space. This option may be labeled “Delete My Account” or something similar.
Follow the Steps:
Follow the steps to request deletion of your account. This may include confirming your request and entering your password for security reasons.
Confirm Your Request:
Typically, you will be asked to confirm your request by clicking a button or checking a box to indicate that you understand the implications of deleting your account.
Receive a Confirmation:
After submitting your deletion request, you will receive a confirmation of your request via email to the address associated with your account. This step is important to ensure that the request is authentic.
Processing Your Request:
Our team will review your account deletion request and take the necessary steps to process it within a reasonable timeframe, in accordance with our legal obligations.
Confirmation of Deletion:
Once your account has been deleted, you will receive an email confirmation.
After this, you will no longer be able to access your account and all your personal data will be deleted from our system.
If you have any questions or encounter any issues while deleting your account, please feel free to contact our customer service at contact@nafa-atelier.fr. We are here to help you every step of the way.
b. Right to data portability
The user has the right to request the portability of his personal data, held by the site, to another site, by complying with the following procedure
The user must make a request for portability of his personal data to the data controller, by sending an e-mail to the address provided above.
c. Right to restriction and opposition to data processing
The user has the right to request the limitation or to oppose the processing of his data by the site without the site being able to refuse, except to demonstrate the existence of legitimate and compelling reasons, which may prevail over the interests and the rights and freedoms of the user.
In order to request the limitation of the processing of his/her data or to object to the processing of his/her data, the user must follow the following procedure:
The user must make a request to limit the processing of his personal data by e-mail to the data controller.
d. Right not to be subject to a decision based exclusively on an automated process.
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on an automated process if the decision produces legal effects concerning him, or significantly affects him in a similar way.
e. Right to determine the fate of data after death
The user is reminded that he can organize what should happen to his collected and processed data if he dies, in accordance with law n°2016-1321 of October 7, 2016.
f. Right to refer the matter to the competent supervisory authority
In the event that the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if he or she believes that one of the rights listed above has been infringed, he or she is entitled to refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.
B. PERSONAL DATA OF MINORS
In accordance with the provisions of Article 8 of European Regulation 2016/679 and the Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data.
If the user is a minor under 15 years of age, the consent of a legal representative will be required so that personal data can be collected and processed.
The publisher of the site reserves the right to verify by any means that the user is over 15 years old, or that he has obtained the agreement of a legal representative before browsing the site.
ARTICLE 6: USE OF “COOKIES” FILES
The site may use “cookie” techniques.
A “cookie” is a small file (less than 4 KB), stored by the site on the user’s hard drive, containing information relating to the user’s browsing habits.
These files allow it to process statistics and traffic information, facilitate navigation and improve the service for the user's comfort.
For the use of “cookies” files involving the saving and analysis of personal data, the user’s consent is necessarily requested.
This user consent is considered valid for a maximum period of 6 (six) months. At the end of this period, the site will again request the user's permission to save "cookie" files on their hard drive.
a. User opposition to the use of “cookies” files by the site
Cookies that are not essential to the operation of the site are only placed on the user's terminal after obtaining their consent. The user can withdraw their consent at any time, as follows:
Please click on the “withdraw consent” button
Please go to the cookie settings page.
More generally, the user is informed that he or she can oppose the recording of these “cookie” files by configuring his or her browser software.
For information, the user can find at the following addresses the steps to follow in order to configure their browser software to oppose the recording of “cookie” files
- Chrome: https://support.google.com/accounts/answer/61416?hl=fr
- Firefox: https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences
- Safari: http://www.apple.com/legal/privacy/fr-ww/
Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies - Opera: http://www.opera.com/help/tutorials/security/cookies/
If the user decides to disable cookies, they can continue browsing the site. However, any malfunction of the site caused by this action cannot be considered to be the fault of the site publisher.
b. Description of the “cookie” files used by the site
The publisher of the site draws the user's attention to the fact that the following cookies are used during navigation:
Required cookies.
ARTICLE 7: CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY
This privacy policy can be consulted at any time at the following address:
The publisher of the site reserves the right to modify it in order to guarantee its compliance with current law.
Therefore, the user is invited to regularly consult this confidentiality policy in order to stay informed of the latest changes that will be made to it.
The user is informed that the latest update to this privacy policy took place on: 06/17/2025.