GDPR Compliance

Your data protection rights under European law

Our commitment to GDPR

Céramique Paris is committed to protecting your personal data in accordance with the General Data Protection Regulation. This page outlines how we ensure compliance and respect your rights under this framework.

Legal basis for processing

We process personal data under the following legal bases:

Your rights under GDPR

As a data subject within the European Union, you have the following rights:

Right to access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to rectification

You may request correction of inaccurate personal data or completion of incomplete data.

Right to erasure

Under certain conditions, you may request deletion of your personal data. This right applies when data is no longer necessary for its original purpose, you withdraw consent, or you object to processing.

Right to restriction of processing

You may request that we limit how we use your data in specific circumstances, such as when you contest the accuracy of the data or object to processing.

Right to data portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to object

You may object to processing of your personal data based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

How to exercise your rights

To exercise any of these rights, send a request to: contact at vivid-bloom.skin

Include your full name and email address used for previous communications. We will respond within one month of receiving your request. In complex cases, this period may be extended by two additional months with notification.

Data protection officer

For questions about data protection practices or to escalate concerns, contact our data protection officer at the address above.

Cross-border data transfers

Personal data collected through our website is stored within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place as required by GDPR.

Supervisory authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In France, this is the Commission Nationale de l'Informatique et des Libertés:

CNIL
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

Automated decision-making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data breach notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and inform the relevant supervisory authority within 72 hours of becoming aware of the breach.