Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") is issued by Les Chiffonniers d'Eureka Fripe, a company registered in the Rouen Trade and Companies Register under number 321 525 156, with its registered office at 159 route de Paris, 76920 Amfreville-la-Mi-Voie, France.

The Company owns and operates the website www.eureka-fripe.com (hereinafter referred to as the “Site”).

The Company attaches great importance to protecting the privacy and personal data of its users (hereinafter referred to as “Users”).

This Privacy Policy aims to inform Users about how their personal data are collected, processed, and protected when browsing the Site or using the services offered.

By accessing the Site and using its Services, Users acknowledge that they have read and understood this Privacy Policy.

Article 1 – Definitions

For the purposes of this Privacy Policy:

• “Personal Data” refers to any information relating to an identified or identifiable natural person, as defined by Regulation (EU) 2016/679 of 27 April 2016 (GDPR).
• “Processing” means any operation or set of operations performed on Personal Data, such as collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, or destruction.
• “Data Controller” refers to the entity which determines the purposes and means of the processing of Personal Data.
• “Subprocessor” refers to any person or organisation that processes Personal Data on behalf of the Data Controller.

Article 2 – Data Controller

Les Chiffonniers d'Eureka Fripe acts as the Data Controller for all processing of Personal Data carried out via the Site.

As Data Controller, the Company undertakes to comply with the provisions of the French “Data Protection Act” (Loi Informatique et Libertés) of 6 January 1978, as amended, and with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR).

Article 3 – Collection of Personal Data

The Company may collect Personal Data directly from Users when:

• They browse the Site;
• They complete a contact form;
• They subscribe to a newsletter;
• They submit a business request or quotation request;
• They interact with the Company via email or social networks;
• They participate in a professional visit or event organised by the Company.

The Personal Data collected may include (depending on the context): surname, first name, company name, professional email address, telephone number, postal address, business activity, and any information voluntarily provided in the context of a commercial or informational exchange.

For processing operations requiring consent, Personal Data will only be collected if the User gives explicit consent when requested.

Article 4 – Legal Basis for Processing

Processing of Personal Data carried out by the Company is based on one of the following legal bases:

• Consent from the User for specific processing operations (e.g., newsletter subscription);
• Performance of a contract or pre-contractual measures taken at the User’s request;
• Compliance with a legal obligation incumbent on the Company;
• The Company’s legitimate interest in managing and improving its services, subject to respecting Users’ fundamental rights.

Article 5 – Purpose of Processing

The Personal Data collected are processed for the following purposes:

• Managing contact requests and business inquiries;
• Managing professional visits and Handpick appointments;
• Sending newsletters and commercial communications;
• Improving and personalising the browsing experience on the Site;
• Internal management of the Site and Services, including monitoring User activity, ensuring security, detecting and preventing fraud;
• Statistical analysis and performance measurement;
• Compliance with legal and regulatory obligations.

Article 6 – Data Recipients

Access to Personal Data is strictly limited to employees and authorised agents of the Company who are responsible for processing requests and ensuring the proper operation of the Site.

The Company may also share certain Personal Data with third-party service providers (such as IT maintenance, hosting, emailing, or CRM tools) acting as subprocessors, under contracts guaranteeing confidentiality and security of data processing.

The Company undertakes to use its best efforts to ensure that its subcontractors:

• Process Personal Data solely for the purposes specified by the Company;
• Provide sufficient guarantees regarding technical and organisational security measures;
• Comply with applicable data protection regulations.

Article 7 – Transfers of Data Outside the European Economic Area

Users are informed that their Personal Data may be transferred outside the European Economic Area (EEA), in particular when the Company uses certain technical service providers located abroad.

In such cases, the Company ensures that adequate safeguards are implemented, including the use of standard contractual clauses approved by the European Commission, or that transfers take place to countries deemed to provide an adequate level of protection.

Article 8 – User Rights

In accordance with the GDPR, Users have the following rights regarding their Personal Data:

• Right of access;
• Right of rectification;
• Right to erasure (“right to be forgotten”);
• Right to restriction of processing;
• Right to object to processing;
• Right to data portability;
• Right to define directives concerning the storage, deletion, and communication of their data after death.

Users may exercise these rights directly by contacting the Company by email at contact@eureka-fripe.com.

The Company shall respond within one (1) month from receipt of the request. This period may be extended by two additional months in the case of complex or multiple requests, in which case the Company will inform the User accordingly.

Article 9 – Data Retention Period

The Company retains Users’ Personal Data only for as long as necessary to fulfil the purposes for which they were collected and in accordance with applicable legal requirements.

To determine the appropriate retention period, the Company considers the nature and sensitivity of the data, the potential risk of harm resulting from unauthorised use or disclosure, and the applicable legal obligations.

Article 10 – Post-Mortem Directives

In accordance with Article 85 of the French Data Protection Act, Users may define directives concerning the storage, deletion, and communication of their Personal Data after their death.

These directives may be general or specific. Users may issue such advance directives by contacting the Company at the following address: contact@eureka-fripe.com.

Article 11 – User Obligations

Users acknowledge that the Personal Data they provide are valid, up to date, and adequate. They undertake not to provide false information or information relating to third parties without authorisation.

Article 12 – Security of Personal Data

The Company implements appropriate technical and organisational measures to ensure the security, confidentiality, and integrity of Personal Data collected on the Site.

Unfortunately, the transmission of information over the Internet is not entirely secure. While the Company makes every effort to protect Users’ Personal Data, it cannot guarantee absolute security during data transmission.

Article 13 – Third-Party Links

The Site may contain links to other websites operated by third parties. The Company has no control over these websites and cannot be held responsible for their content or privacy practices.

If a User follows a link to a third-party website, such website will have its own privacy policy, and the Company accepts no responsibility in this respect.

Article 14 – Cookies

The Company uses cookies and similar technologies on its Site. For more information about the types of cookies used, their purpose, and how to manage consent, Users are invited to consult the Cookie Policy available on the Site.

Article 15 – Amendments to the Privacy Policy

This Privacy Policy may be amended at any time. Any changes will be published online and are deemed accepted without reservation when Users access the Site after their publication.

Article 16 – Contact

For any questions or requests regarding this Privacy Policy, Users may contact the Company at the following address: contact@eureka-fripe.com.

Article 17 – Governing Law and Jurisdiction

This Privacy Policy is governed by French law. In the event of any dispute relating to its interpretation or execution, and failing an amicable settlement, the courts of Rouen (France) shall have exclusive jurisdiction.