Date of last update : 23/02/2022
SUMMARY :
1. Definitions
2. Who is the Controller ?
3. Where do we collect your Personal Data ?
4. What categories of Personal Data do we process?
5. What Personal Data do we process and for what purposes?
6. Will you receive commercial offers?
7. Do we collect Personal Data from minors under the age of 16?
8. Who are the recipients of your Personal Data?
9. Is your Personal Data transferred outside the European Union?
10. How long do we keep your Personal Data ?
11. What security measures are applied to your Personal Data ?
12. What are your rights regarding your Personal Data ?
13. How can you exercise your rights regarding your Personal Data?
14. How to contact our Data Protection Officer?
15. Update of our Privacy Policy ?
1. Definitions :
What is a « Personal Data » ? | It is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, geolocation data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity. |
What is a « Personal Data Processing » ? | This is any operation or set of operations that may or may not be carried out by automated means on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction |
What is a « Controller » ? | It is the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of processing. |
What is a « Processor » ? | It is the natural or legal person who processes personal data on behalf of the controller. |
What is a « Consent » ? | It is any free, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or a clear positive act, that personal data concerning him/her be processed. |
2. Who is the Controller ?
OKAIDI simplified joint stock company with a capital of 6 483 008 euros, registered at the trade and company register under the n°398 110 445, whose head office is located at 162 boulevard de Fourmies 59100 ROUBAIX represented by Gauthier WATRELOT in its capacity as general manager.
Al Shamsi Holding LLC is a limited liability company incorporated under the laws of the United Arab Emirates, with commercial license number 528397 and its registered office at P.O. Box 40020, Dubai, United Arab Emirates.
Both companies are joint Controllers (“the Joint Controllers”) they determine together the purposes and means of the processing operations defined below.
3. Where do we collect your Personal Data ?
Your Personal Data may be collected through multiple channels, such as, our network of stores, our websites, our mobile applications, or by phone or social networks.
4. What categories of Personal Data do we process?
The table below identifies the main categories of Personal Data that we may process about you :
Personal data categories | Description of the categories |
Customer Account Data | This is data that are required to create a customer account and data that you may choose to provide in order to have a personalized experience on our site. This data includes, but is not limited to: email address, first name, last name, mailing address, other addresses for delivery or billing (e.g. business mailing address), number of children, password, loyalty number, name associated with the loyalty card, relationship to the child, child's first and last name, child's gender, child's date of birth. |
Purchase Data | This is data relating to purchases you make on the website or in one of our stores. This data includes : Customer Account data (see above), bank details, delivery address (if different from the account address), delivery point selected for delivery, store selected for delivery, items ordered, date of order, date of delivery, items returned, date of return request, date of receipt of returned item, refund information. |
Reservation Data | This is the data provided in order to reserve an item in a store. This data includes: name, first name, e-mail address, phone number, store selected to pick up the item. |
Fidelity Account Data | This is data associated with your loyalty account allowing you to benefit from advantages on our website and in our stores. It can for example be: name, first name, e-mail address and postal address of the holder of the loyalty account, purchases made, number of loyalty points, date of subscription to the loyalty account, and possibly the first name and date of birth of your children. |
Prospecting Data | This is the data we use to send you messages about our brands. This data includes: name, first name, e-mail address, telephone number. |
Contest Participation Data | This is the data that you provide to us to participate in the contests that we organize. This data includes: name, first name, e-mail address, answers to the contest. |
Geolocation Data | This is data about your geographical position at a specific time. |
Customer Experience Data | This is data that you provide to us as feedback on our products and services. |
Among the Personal Data collected, some are mentioned with an asterisk in order to specify the mandatory nature of the collection.
5.What Personal Data do we process and for what purposes?
Why do we collect your Personal Information? | What are the categories of data concerned by this processing? | What is the legal basis for processing your Personal Data? |
To create and manage your customer account To personalize your customer experience on our site | Customer Account Data | Consent when you create your account without placing an order and for data that is not strictly necessary for the execution of the contract Execution of the sales contract |
To manage, track and process your order on our site | Purshase Data | Execution of the sales contract |
To make a reservation for an item in a store | Reservation Data | Execution of pre-contractual measures |
Manage and track your fidelity program membership, offer you loyalty benefits | Fidelity Account Data | Consent |
Manage your subscriptions and send you brand news electronically. Allow us to set up and send you electronically advertising adapted to your needs. | Prospection Data | Consent In accordance with article L. 34-5 of the French Post and Electronic Communications Code, if the canvassing messages we send you concern products similar to those you have already purchased and if you have not objected to the sending of such messages. |
To geolocate you in order to indicate to you the store or the point relay nearest to your geographical position to withdraw the order or the article which you reserved | Geolocation Data | Consent |
To improve our products and our website based on your experience | Customer Experience Data | Legitimate interest of the data controller |
Fight against Fraud | Customer Account Data, Fidelity Account Data, Purchase Data, Reservation Data, Prospection Data, Contest Participation Data | Legitimate interest of the data controller |
6. Will you receive commercial offers?
We may use your Personal Data in the context of a commercial approach towards you, by e-mail and/or by SMS.
We respect the rules relating to the prior and express collection of the customer's consent for the sending of commercial prospecting.
When you create your account on the site, you are expressly asked to give your consent to receive promotional offers and news from us. Therefore, you will not receive any commercial prospecting if you have not consented to it.
More information on your rights in section n°12 "What are your rights on your Personal Data?”.
7. Do we collect Personal Data from minors under the age of 16?
We may collect Personal Data relating to children under 16 years of age. As such, the member agrees to be the holder of parental authority of the latter.
8. Who are the recipients of your Personal Data?
The Joint Controllers will only transmit your Personal Data to third parties for canvassing purposes if you have given your consent in this respect.
Internal recipient | - Commercial Partners : “IDKIDS’ community” brand marks : Okaidi, Obaibi, Oxybul éveil et jeux, Idkids, Jacadi, N’Joy, Rigolo Comme La Vie, Bubblemag, Idtroc |
External recipient | Authorized personnel of : Service Providers Subcontractors, within the framework of the following missions: management of the customer service, management of the online chat, processing and delivery of the order on the e-commerce site, routing of SMS and commercial emails, detection and prevention of fraud. The subcontractors act only on our behalf and on our instructions. |
9. Are your Personal Data transferred outside the European Union?
Personal Data could be transferred outside the European Union, especially in the case of social networks exploitation.
10. How long do we keep your Personal Data ?
Find below the Data retention Period of the Processings :
Data's categories | Data retention Period |
Customer Account Data Fidelity Account Data | From the activation of the Customer Account and 5 years in archive after the Customer Account is deleted |
Pushase Data Reservation Data | Banking Data : Period of the payment execution Other Purchase Data : 1 year in the active base and 4 years in archive |
Prospection Data | 3 years from the last contact we had with you |
Contest Participation Data | Period of the Contest and 1 year in active base, then 4 years in archive |
Geolocation Data | 1 month after the Data’s registration |
11. What security measures are applied to your Personal Data ?
The Joint Controllers take the necessary measures to ensure the security and the confidentiality of the Personal Data given, respecting the legal regulations in force.
12. What are your rights regarding your Personal Data ?
In accordance with the European Regulation 2016/679 of 27 April 2016 on the protection of Personal Data, you have the following rights:
Right of Access | You have the right to access your Personal Data. A copy of your Personal Data would be sent to you. |
Right to request the rectification | You have the right to request the rectification of your Personal Data, if these need an update |
Right to Object | You have the right to Object, anytime, to a process of your Personal Data, unless it is a legal obligation. |
Right to erasure | You have the right to erase your personal data. |
Right to Consult | You have the right to consult your personal Data in a structured format, frequently used and readable by machine.You can require the transmission of your Personal Data directly to the Controller when it is technically possible. |
Right to limitation | You can obtain the limitation of a process, Vous avez le droit d’obtenir la limitation du traitement, including when your Personal Data are not correct. |
Right to make advance directives | You can communicate your directives concerning your Personal Data after your death. You just have to address your wishes. |
13. How can you exercise your rights regarding your Personal Data?
You can exercise your rights :
- By mail, writing to : OKAIDI UAE Al Shamsi Holding P.O. Box 40020, Dubai, United Arab Emirates or/and OKAIDI FRANCE 162 boulevard de Foumies 59100 ROUBAIX FRANCE
- Online : support@okaidi.ae or/and customerservice@okaidi.com or CONTACT FORM
Please note, in the exercise of rights by applicants, our Customer service could check your identity by asking a valid identity card copy, if and only if there was reasonable doubt as to the identity of the applicant.
To facilitate the process of your request, it is easier to communicate your name, surname, email address and, if you have one, your fidelity account number.
The Joint Controllers commits to answer your request within a month from the date of the exercise of your right.
Moreover, to facilitate the access to your rights :
- Every newsletter sent by the company OKAIDI, propose you an unsubscribe link, that let you in a click, to unsubscribe easily to the newsletters and actualities of the trademark or/and its Partners ones ;
- Every SMS sent by the company OKAIDI propose you a « STOP SMS » ;
- You can manage your preferences about the commercial prospection by logging your Customer Account, in « My newsletters et alerts » section.
Finally, we remind you that you have the possibility of seizing at any time the Commission Nationale Informatiques & Libertés (CNIL): https://www.cnil.fr/fr/agir
14. How to contact our Data Protection Officer ?
The company OKAIDI has names a DPO, that you can contact anytime by :
- Mail at the address : OKAIDI 162 boulevard de Fourmies 59100 ROUBAIX,
- or by using the contact form by choosing the section (Personal Data Protection)
15. Update of our Personal Data policy
The Joint Controllers could have to amend her Personal Data Policy. This modification is specified on the top of the section by writing the last date of update.