This personal data protection and cookie management policy (hereinafter "the Policy") sets out the practices of LOOK Cycle International, a simplified joint-stock company with share capital of EUR 2,515,440, whose registered office is located at 27 rue du Docteur Léveillé – 58000 NEVERS, France, registered with the NEVERS Trade and Companies Register under number 419 513 262 (hereinafter "the Company" or "we"), regarding the protection of privacy, the collection of personal data and cookies.
This Policy applies to data collected on the website www.lookcycle.com (hereinafter "the Site").
To make it easier to access, we make it available on our home page as well as anywhere personal information is requested from you.
The purpose of this Policy is to inform you of:
- the means we implement to collect your personal data, with the strictest respect for your rights;
- the data that may be collected on our Site;
- the use that may be made of the data collected, the legal bases for its processing and the rights you have over this data.
In collecting and managing your personal data, we comply with French Act No. 78-17 of 6 January 1978 on data processing, data files and individual liberties, as amended and in its version in force, as well as with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter "GDPR"), and with the laws and regulations arising from it.
I. Protection of personal data
1) Definition and nature of personal data
When you use our Site, and through it, we may be required to collect personal data, which is provided to us in particular in the following contexts:
- information form;
- newsletter subscription;
- warranty registration;
- recruitment area;
- creation of a customer account;
- placing orders;
- enrolment in a loyalty programme.
"Personal data" means any information that makes it possible to identify you directly or indirectly (by combining information), such as: surname, first name, username, date of birth, photograph, postal and email addresses, telephone numbers, data relating to your transactions on the Site, details of your purchases and subscriptions, and payment data.
2) Purposes and legal bases of processing
We only collect your data for specified, explicit and legitimate purposes. Each processing operation is based on an identified legal basis, in accordance with Article 6 of the GDPR:
| Purpose of processing | Legal basis |
|---|---|
| Create and manage customer accounts, receive, manage and process orders, issue invoices, manage and process deliveries | Performance of the contract (Art. 6.1.b GDPR) |
| Ensure customer relationship follow-up, and the handling of complaints and requests | Performance of the contract / Legitimate interest (Art. 6.1.b and 6.1.f GDPR) |
| Manage after-sales service and product warranty | Performance of the contract / Legal obligation (Art. 6.1.b and 6.1.c GDPR) |
| Handle your requests to exercise your rights (access, rectification, objection, etc.) | Legal obligation (Art. 6.1.c GDPR) |
| Retain legal documents (accounting, tax, social security obligations) | Legal obligation (Art. 6.1.c GDPR) |
| Send newsletters, information letters and promotional offers | Consent (Art. 6.1.a GDPR) |
| Manage subscriptions / unsubscriptions and satisfaction surveys | Consent / Legitimate interest (Art. 6.1.a and 6.1.f GDPR) |
| Produce reports, commercial statistics, market studies, product improvement | Legitimate interest (Art. 6.1.f GDPR) |
| Place non-essential cookies and trackers (audience measurement, marketing) | Consent (Art. 6.1.a GDPR) |
We undertake to limit collection to only the data strictly necessary for the intended purpose of processing (data minimisation principle).
3) Retention periods
Your data is retained for a period not exceeding that necessary for the purposes for which it was collected, within the following limits:
| Data category | Retention period |
|---|---|
| Customer data (account, orders) | For the entire duration of the contractual relationship, then archived until the applicable limitation periods expire |
| Accounting and invoicing data | 10 years from the close of the financial year (legal obligation) |
| Prospecting data (customers and partners) | 3 years from the end of the commercial relationship |
| Prospecting data (prospects) | 3 years from collection or from the last contact that received no response |
| Application management data (recruitment) | 2 years from the last contact, unless the candidate objects |
| Cookies and trackers | 13 months maximum; data collected via cookies is retained for 25 months maximum |
| Consents (proof) | Duration of the consent's validity, plus the statutory limitation period |
Once these periods have elapsed, and as soon as the data is no longer necessary for the purpose for which it was collected, we may contact you again to find out whether you wish to continue receiving commercial solicitations. Failing that, the data will be anonymised or deleted.
4) Recipients of the data
The personal data concerning you is intended for the Company's authorised internal departments, namely:
- After-Sales Service;
- Accounting & Finance Department;
- Sales Administration & Commercial Department;
- Communication Department;
- IT Department.
To carry out the purposes described above, we use service providers (processors within the meaning of the GDPR) acting on our instructions and providing appropriate safeguards. The main categories of recipients are:
| Provider / category | Purpose |
|---|---|
| Stripe | Secure processing of online payments |
| Mailchimp | Sending newsletters and email campaigns |
| Sugar CRM | Customer relationship management (CRM) |
| Axeptio | Collection and management of cookie consent |
| Google (GA4) | Site audience measurement |
| Microsoft Clarity | Analysis of browsing behaviour (heatmaps, sessions) |
| Meta (Facebook Pixel) | Advertising measurement and targeting |
| Site host | Technical hosting of the Site and data |
5) Data security and confidentiality
The security and confidentiality of your personal data is a priority. We take all appropriate technical and organisational measures, in light of the nature of the data and the risks presented by its processing, in order to preserve its security and to prevent it from being distorted, damaged, destroyed or accessed by unauthorised third parties.
To this end, we have in particular implemented: access protection and time-limited access, strengthened access-rights management, a reinforced password policy, intrusion-prevention tools, the securing of data flows, as well as organisational measures such as data mapping, review of processing contracts and awareness-raising among business and IT teams.
Security also relies on everyone's good practices. We invite you not to share your login details and passwords with third parties, to log out of your account systematically, to close your browser window at the end of your session (especially on a shared device) and not to save your login details in your browser.
6) Your rights over your data
In accordance with the French "Data Protection Act" and the GDPR, you have the following rights over the data concerning you:
- Right of access: to obtain confirmation that data concerning you is being processed and to obtain a copy of it;
- Right to rectification: to have inaccurate or incomplete data corrected;
- Right to erasure ("right to be forgotten"): to obtain the deletion of your data in the cases provided for by the GDPR;
- Right to restriction of processing: to obtain a temporary freeze on the use of your data;
- Right to object: to object at any time to the processing of your data, in particular for commercial prospecting purposes;
- Right to portability: to receive the data you have provided to us in a structured, machine-readable format, and to transmit it to another data controller;
- Right to withdraw your consent at any time, where processing is based on it, without affecting the lawfulness of processing carried out before its withdrawal;
- Right to set directives regarding the fate of your data after your death.
You may exercise these rights by sending us an email at privacy@lookcycle.fr or a letter to the address of the registered office. Your request must be signed and accompanied, in the event of reasonable doubt as to your identity, by proof of identity. We undertake to respond within one month of receipt, which may be extended by two months in the event of complexity.
If, after contacting us, you consider that your rights are not being respected, you have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL): 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France, or via www.cnil.fr. You may also contact the supervisory authority of your country of residence.
Finally, we inform you that we carry out no fully automated decision-making or profiling producing legal effects concerning you.
II. Cookie management policy
The term "cookies" covers all trackers placed and/or read when consulting a website, reading an email, or using software or a mobile application. These are files that store technical data relating to browsing or personalise the pages displayed.
When you browse our Site, information relating to your browsing may be stored in "cookie" files installed on your device (computer, tablet, smartphone).
1) Obtaining your consent
On your first visit to the Site, a consent management banner provided by our service provider Axeptio informs you of the presence of cookies and allows you to accept, refuse or configure them precisely by category. No cookie that is not strictly necessary for the operation of the Site is placed before your consent is obtained.
Refusing cookies is as simple as accepting them. As long as you have not made a choice, or if you refuse, only strictly necessary cookies are used. Your choice is stored and you can change it at any time (see the "Managing your preferences" paragraph below).
2) Types of cookies used
a) Strictly necessary cookies (exempt from consent)
These cookies are essential for the operation of the Site and the provision of the services you request (session management, shopping cart, connection security, storing your cookie choice). Their placement does not require your consent.
b) Audience measurement cookies
We use Google Analytics 4 (GA4) to measure the Site's audience: pages viewed, time spent, browsing paths, in order to assess the effectiveness of our content and improve our services. These cookies are only placed after your consent is obtained.
c) Behavioural analysis cookies
We use Microsoft Clarity to analyse how visitors interact with the Site (heatmaps, anonymised session recording), with the aim of improving its usability. These cookies are only triggered after your consent is obtained.
d) Marketing and social media cookies
We use the Facebook Pixel (Meta) to measure the performance of our advertising campaigns and to deliver relevant content. These cookies are only triggered after your consent is obtained.
3) Cookie lifespan
In accordance with the applicable regulations and the recommendations of the CNIL, the cookies placed have a maximum lifespan of 13 months. The information collected through them is retained for a period not exceeding 25 months. Upon expiry of these periods, your consent is requested again.
4) Managing your preferences
You can change your cookie choices at any time by reopening the Axeptio consent management module, permanently accessible via the dedicated widget on the Site (icon / "Manage my cookies" link).
You can also configure your browser to accept, refuse or be notified of the placement of cookies. As each browser has its own configuration, the procedure is described in its help menu. Please note that refusing certain cookies may limit access to some features of the Site.
III. Updates to the Policy
We reserve the right to modify this Policy at any time, in whole or in part, in order to take account of changes in our internal practices and procedures, as well as changes in French and European legislative and regulatory provisions. We invite you to consult it regularly. In the event of a substantial change, we will inform you by appropriate means.