Privacy Policy

www.qumaashshop.com

ARTICLE 1: PREAMBLE
The purpose of this privacy policy is to inform users of the site:

• On how their personal data is collected. Personal data is defined as: any information that allows a user to be identified.

This may include: their first and last names, their age, their postal or email address, their location or even their IP address (non-exhaustive list);
• On the rights they have regarding this data;
• On the person responsible for the processing of personal data collected and processed;
• Regarding the recipients of this personal data;
• Regarding the site's cookie policy.

This policy supplements the legal notices and the General Terms and Conditions of Use, which can be consulted by users at the following address:
Privacy Policy.

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of European Regulation 2016/679, personal data
are :
• Processed lawfully, fairly and transparently with regard to the person concerned;
• Collected for specific purposes (see Article 3.1 herein), explicit and
legitimate, and not to be further processed in a manner inconsistent with these
purposes;
• Adequate, relevant and limited to what is necessary for the purposes
which they are treated;
• Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
• Processed in a way that ensures appropriate security of the data collected, including the
protection against unauthorized or unlawful processing and against loss, destruction or
damage of accidental origin, using technical or organizational measures
appropriate.

The processing is lawful only if, and to the extent that, at least one of the following conditions is
filled:
• The person concerned has consented to the processing of their personal data for
one or more specific purposes;
• The processing is necessary for the performance of a contract to which the data subject is
party or to the execution of pre-contractual measures taken at its request;
• The processing is necessary for compliance with a legal obligation to which the controller is subject;
• The processing is necessary to protect the vital interests of the data subject or of another natural person;
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of
the exercise of public authority vested in the data controller;
• The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or freedoms and rights
fundamental rights of the data subject which require data protection
personal nature, particularly when the person concerned is a child.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING NAVIGATION ON THE SITE

Article 3.1: Data collected
The personal data collected as part of our business is as follows:
Email, IP address.

The collection and processing of this data serves the following purpose(s):
Website optimization.

Example: contract management, customer area management, service quality monitoring, newsletter sending, etc.

Article 3.2: Data Collection Method
When you use our site, the following data is automatically collected:
IP address

Other personal data is collected when you perform the following actions on the platform:
E-mail.
They are stored by the data controller under reasonable security conditions.
for a period of: 365 days.
The company may retain certain personal data beyond the periods announced above in order to fulfill its legal or regulatory obligations.

Article 3.3: Data Hosting
The website www.qumaashshop.com is hosted by:
QUMAASH SA
Registered office address
Contact: contact@qumaashshop.com


ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1: The data controller
Personal data is collected by QUMAASH SA (ATS), EIRL whose registration number is 842 804 254 00014.
The data controller can be contacted as follows:
By email: contact@qumaashshop.com

Article 4.2: The Data Protection Officer
The company's or data protection officer is:
[Provide the identity, address, telephone number and/or email address of the DPO]
If, after contacting us, you believe that your "Data Protection" rights are not being respected, you can send information to the CNIL.

ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Any user whose personal data is being processed may exercise the following rights, pursuant to European Regulation 2016/679 and the French Data Protection Act (Loi Informatique et Libertés).
78-17 of January 6, 1978):
• Right of access, rectification and erasure of data (set out respectively in
articles 15, 16 and 17 of the GDPR);
• Right to data portability (Article 20 of the GDPR);
• Right to restriction of processing (Article 18 of the GDPR) and to object to the processing of data (Article
21 of the GDPR);
• Right not to be subject to a decision based solely on an automated process;
• Right to determine the fate of data after death;
• Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR).
To exercise your rights, please send your letter by
email to contact@qumaashshop.com.

In order for the data controller to comply with their request, the user may be required to provide certain information such as: their first and last names, email address, and account, personal space or subscriber number.

Visit cnil.fr for more information about your rights.

ARTICLE 6: CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY

The publisher of the website www.qumaashshop.com reserves the right to modify this Policy at any time in order to ensure that users of the site comply with applicable law.
Any modifications will not affect purchases previously made on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user when validating the purchase.
The user is invited to read this Policy each time they use our services, without the need for formal notification.
This policy, published in September 2025.