The principles of personal data protection

Your requests to modify your personal data
  • As a user of THE NINES company's services, you can modify your personal data from your customer account.
  • If you wish to delete your customer account, you can also perform this action (please note that this action is irreversible — you will lose access to your order history, your loyalty points, your promo codes… However, it will be possible to create a new customer account) from your customer account.
  • It is possible to export your personal data from your customer account.
  • For any other request to access, obtain, rectify or erase your personal data, we invite you to contact our data protection service.

Introduction

This page describes the principles with which THE NINES collects different types of data about its customers. The elements described on this page are explained in detail in THE NINES data protection principles.

This page also details the commitments regarding THE NINES security and data protection policy in order to respect your privacy as much as possible.

Definitions

In order to avoid imprecise interpretation, here are some explanations of terms used:

  • Personal data: any information relating to an identified or identifiable natural person is considered to be "an identifiable natural person" — a natural person who can be identified, directly or indirectly.
  • Processing: any operation or set of operations performed with or without the use of automated processes and applied to data or sets of personal data (collection, recording, transmission, storage, retention, extraction, consultation, use, interconnection, segmentation, etc.).

Data controller

All processing of personal information communicated to THE NINES is carried out under the responsibility of the company THE NINES INTERNET, 31 rue d'Armagnac, 33800 Bordeaux, SIRET: 901 665 455.

How do we collect data about you?

The collection of your personal data (such as name and contact details) is most often based on your customer relationship or another relevant relationship with us. For example, we collect data when you perform actions on our services, by registering as a user of our site, by using THE NINES services or by providing us with other information.

When you use THE NINES network and communication services, for example by making a call or creating your customer account or by sending an email, identification data is stored in our systems for service use.

When you visit THE NINES websites or load pages from them, you leave us various types of anonymous browsing data, such as your IP address and your browsing history. The operation of our services is based on the use of cookies.

We may collect data based on your consent. We record customer service calls in order to be able to verify the actual discussion, if necessary. We also collect data from our potential customers when they participate in contests, prize draws or customer events.

What data do we collect?

This data includes your first name, last name, address, phone number, email address, date of birth, direct marketing information and consent, company contact person information, company name, information provided by yourself, customer classification information, order, delivery, agreement and billing. We store what can be connected to you.

The data created and collected during communication includes information about the communicating parties, the time of connection, routing information, the data transfer protocol, the connection format and location information.

When browsing the Internet, "measurement data" is collected using cookies. This data cannot be associated with a person.

The customer information we collect helps us to personalize and continuously improve your shopping experience on THE NINES services. We use this information to process orders, deliver products and services, process payments and communicate with you regarding your orders, products, services and promotional offers, maintain and update our files and therefore your accounts with us, make content available to you such as wish lists and customer reviews and recommend products and services that may interest you. We also use this information to improve our stores and websites, prevent or detect fraud or abuse on our website and enable third parties to provide technical, logistical or other functions on our behalf.

List of types of information we collect:

  • Information you provide to us

We collect and record all information you provide to us through our website or by other means. You may choose not to share certain information with us; however, this decision may limit your use of our services. We use the information you provide to us, in particular to respond to your requests, personalize your future purchases, improve our services, and communicate with you.

  • Automatically collected information

Every time you contact us, we receive and record certain types of information. Like many other websites, we use "cookies" in particular and obtain certain types of information when your browser accesses THE NINES site or advertisements and other content displayed on other websites by or on behalf of THE NINES.

  • Email information

To optimize the usefulness and relevance of our emails, if your computer allows it, we frequently receive a confirmation of emails sent by THE NINES that you have opened. If you do not wish to receive emails from us, simply notify us in your account.

How do we manage your information?

Please note that THE NINES staff and its subsidiaries and their subcontractors act under a secrecy obligation when processing data concerning you.

We maintain the confidentiality of data concerning you and ensure that it is only used for predefined purposes.

Your data is processed for the purpose of producing and delivering the agreed communication and other services, developing services, billing, providing you with the best and most complete services possible, and informing you about our services.

We also use your data for customer communication, such as sending information about our services and for direct marketing purposes.

We also use data for customer profiling using billing, usage amounts, length of the customer relationship and external classifications. We use both summarized usage data and person-specific data to create target groups for marketing.

We process data from our potential customers for direct marketing purposes.

We strive to ensure that customer data is up to date and accurate. We delete outdated and unnecessary data when possible.

We protect all data concerning you through task-based personal access rights and prevent third-party access to the data.

Where do we send your data?

We only submit your data to the extent permitted by applicable legislation and as indicated in the file description to authorities and other telecommunications companies. When we use subcontractors, we sign a security agreement with them that also covers the use of your data. We are also responsible for this type of handling on your behalf.

THE NINES data protection principles

The purpose of this data protection policy is to describe the principles and practices we observe at THE NINES to ensure privacy, communication confidentiality and the legal protection of our customers.

THE NINES regularly updates this policy as operations or services change or evolve. For this reason, we encourage you to regularly consult the latest statement.

Core values important to THE NINES include the confidentiality of customer data and communications, as well as the protection of customer privacy in all business operations. When handling the personal data of our customers, we follow French legislation, orders and instructions from authorities, and best practices in data processing.

THE NINES implements a high level of data protection. Personal and identification data as well as location-related data are collected only for specific predefined and lawful purposes and are not processed in a manner incompatible with those objectives.

We protect the security of your personal information during transmission by using SSL (Secure Sockets Layer) software, which encrypts the information you enter before it is sent to us.

We maintain physical, electronic and backup security measures in connection with the collection, storage and communication of customers' personal information. Our security procedures may lead us to ask you for proof of identity before we can communicate your personal information to you.

We constantly train our staff on data processing principles and monitor data usage through appropriate means.

General principles of customer data management

The processing of personal data must always be justified for THE NINES' operations. THE NINES has defined the purpose of collecting, handling, and submitting personal data in the following section.

THE NINES processes only the customer data necessary for its operations, as defined in the stated purpose of use in the file description for the customer register. We strive not to process inaccurate, incomplete or outdated data.

Customer data processing is generally based on a relevant relationship, information received during the use or registration of a service, or your consent. We may also process your data for other reasons, for example at your request or when required by law. Your information may be processed within THE NINES. We encourage our customers to regularly update their contact details.

We record your conversations with our customer service team to verify a commercial transaction, to respond to your requests, and to monitor and improve service quality.

Please note that as a THE NINES customer, you have the right to check what data about you has been stored in our information systems, or that there is no data about you in our file. You may also refuse the use of your data in accordance with relevant legislation. The inspection may be carried out once a year free of charge. The request for data inspection must be made with a signed document between THE NINES and you.

Collection, storage, retrieval and processing of personal data

Register of data collected directly through THE NINES services:

Contact form
  • Data collected: Email and message
  • Purpose: Customer relationship management
  • Data storage: Database recording
  • Shelf life: 1 year
  • Data access: THE NINES customer relations department
  • Is data stored or processed outside the EU: No

Customer account creation
  • Data collected: First name, last name, address, phone number, email address, date of birth, direct marketing information and consent, company contact person information, company name, information provided by yourself, customer classification information, order, delivery, agreement and billing. We store what can be connected to you.
  • Purpose: Order / Order tracking / Address / Returns / Credit / Loyalty management
  • Data storage: Database recording
  • Retention period: Customer lifetime
  • Data access: Logistics (partially, only data related to the processing and shipping of your order) / Marketing department / Customer service
  • Is data stored or processed outside the EU: No

Newsletter opt-in form
  • Data collected: Email and message
  • Purpose: Marketing emails
  • Data storage: Opt-in in database
  • Retention period: Duration of the customer's opt-in, unless the customer has refused
  • Data access: The marketing department
  • Is data stored or processed outside the EU: No

In accordance with the "Data Protection Act", you may exercise your right of access to data concerning you and have it rectified via the contact button available at the top of this page.

Register of data transmitted to subcontractors via THE NINES services:

Shopimind

MailJet

Facebook
  • Provider information: https://www.facebook.com/
  • Provider location: United States
  • Purpose: Login to your customer account on the site via your Facebook account
  • Is data stored or processed outside the EU: Yes
  • Provider GDPR policy: https://www.facebook.com/

Google Analytics

Google Adwords

Crosslog

DHL

Mondial Relay

Data sending and sharing

THE NINES may only submit your data to third parties in accordance with applicable legislation. We submit information upon request to authorities, such as the police and security authorities, as well as other authorities for the reasons specified by legislation.

Information about our customers represents an important part of our business and it is not our business to trade it. We share this information only in the cases previously stated and for the purposes described in this privacy policy.

Furthermore, we may submit your data to subcontractors, in which case we will ensure that data confidentiality is maintained, and we will also be responsible for data management in that case. If we process your data outside the EU region, we will protect your data by ensuring that the subcontractor guarantees appropriate data processing.

Processing of identification and location data related to electronic communication

THE NINES treats all data and messages created during communication as confidential. Our staff is bound by a secrecy obligation and a prohibition on using messages or other confidential information. When communication takes place over a network, it always leaves a trace. These network traces are called identification data if they can be connected to a person. Network traces are created, for example, during phone calls, sending electronic and SMS messages and browsing the Internet, and may contain information about the communicating parties, the connection route or routing, the data transfer protocol used, the event and the terminals used or their location.

THE NINES manages communication identification and location information in accordance with applicable law for purposes such as the implementation and use of services, billing and technical development, consent, and marketing. The data may also be used for billing of other service providers to the extent necessary.

THE NINES may also manage identification data in cases of misuse, data security breaches, and fault repair.

In all of the above situations, we only process identification and location data to the extent necessary to accomplish a specific task.

Use of location data

A real-time location method whereby one person can track the whereabouts of another requires the consent of the person being located. The customer may not be located at all if they refuse geolocation services.

If we submit location information to location service providers, we ensure by appropriate means that the person to be located has given their consent.

Persons authorized to manage identification and location data

Only specific individuals at THE NINES whose work requires access to identification and location data may process such data.

In practice, authorization is granted only to persons performing tasks related to billing, maintenance or development of communication networks or services, prevention and investigation of abuse, customer service and marketing. Persons authorized to handle data may only manage it to the extent required to perform their individual tasks.

Duration of processing of identification and location data and data storage

We process identification and location data for as long as necessary for billing, technical development, fault repair, marketing, misuse investigation or data security purposes. However, handling only takes place to the extent required by the actions and without unduly compromising the confidentiality of a message and the protection of privacy.

We store the data required for billing for at least one year from the invoice due date and for a period not exceeding three years from the invoice due date, unless it is necessary to retain the data for a longer period related to invoice collection. Otherwise, data is stored to the extent permitted and required by relevant legislation.

Websites, visit tracking

We also collect data about website visits. This data includes the IP address and the corresponding DNS name, the organization that registered the IP address, the name and address of the visited page, the page loading time and the browser type.

Please note that the IP address is a required identification for the operation of the Internet, used to direct messages transmitted over the Internet to the appropriate locations. As a general rule, the IP address is not connected to the person using the computer, but it may be connected to the organization that registered the IP address. The IP address connection can be established at the request of the authorities.

Cookies

As a THE NINES customer, you can browse our websites anonymously. However, like most websites, we use cookie technology. When you view our website, the cookie sets a random number for the browser that does not indicate your identity. Cookies help THE NINES determine which sections of its websites are most popular, where visitors go and how long they stay. The data is used to implement and develop services and to target advertisements on websites.

You can prevent cookies from being stored by changing your browser settings. In some cases, prevention may slow down or make it impossible to browse pages or the website.

Data security

We ensure the data security of our services by using methods proportionate to the seriousness and sophistication of the threats as well as to the cost.

THE NINES takes care to implement measures aimed at preventing data security breaches or eliminating disruptions affecting data security. Furthermore, we use every means available to ensure that the confidentiality of messages or the protection of privacy is not unduly compromised in the course of carrying out the above actions.

We provide information on actions related to the data security of our services and other data security matters through appropriate channels, such as our website or customer newsletters.

In order to prevent data security breaches and eliminate disruptions affecting data security, we may, among other things, prevent the receipt of electronic messages, remove viruses and other malware from messages and take other comparable technical measures (measures necessary within the permitted and required limits specified in relevant legislation). We use physical, administrative and technical protection measures to keep secret the messages and identification data transmitted over the communication network. These actions reduce the risk of data concerning you being disclosed to third parties and prevent any misuse or other unauthorized access. Some of our services also use standardized encryption methods.

Please note that as a user of THE NINES services, you must also use the most appropriate methods to ensure your own data security. We encourage you to store and use our services and your devices with care and to control their use, for example by using secure codes and unique passwords, and to use sufficient antivirus and firewall services and keep them as well as the operating system up to date.

Customer communication and direct marketing

THE NINES sends customer messages regarding its products and services to its customers via the consent available in the customer account.

THE NINES also sends direct marketing messages in electronic format. You have the right to prohibit THE NINES from sending direct marketing messages. You can prohibit marketing by following the instructions included in the direct marketing message or via your customer account available on our website.