Privacy Policy

Last updated: 11/24/2024

At Detay, protecting your personal data is a top priority. This privacy policy explains how we collect, use, share, and protect your information when you use our services.

1. Data Controller

Data Controller Identity: Tuncer Kocek
VAT number: BE0726.967.983
Email: contact@detay.be

2. Data Processing

The processing of your personal data is carried out in compliance with the General Data Protection Regulation (GDPR), according to the following principles:

– Limited Data Retention
Your personal data is kept only for the time strictly necessary to fulfill the purposes for which it was collected, or to meet legal obligations such as invoicing or shipping orders.

– Transparency
The purpose of each data processing activity is clearly explained to you before any data is collected or used. You are informed in advance and transparently about how your information will be used.

– Integrity and Confidentiality
We implement all necessary technical and organizational measures to ensure the security, confidentiality, and integrity of your data. These measures aim to prevent unauthorized access, misuse, or accidental loss.

– Data Minimization
We only collect the information strictly necessary for the defined purposes, limiting data collection to what is relevant and appropriate for each processing activity.

These principles are at the heart of our commitment to protecting your personal data and respecting your privacy rights.

3. How We Collect Your Data

We collect your personal data through various channels, including:

  • When you visit our website: Information may be collected automatically, such as browsing data through cookies or similar technologies.
  • Through forms on our site: The information you voluntarily provide, such as your name, email address, or preferences, is collected via these forms.
  • Through paid advertisements: For example, when you provide your email address or other personal information in response to an ad on platforms like Facebook or others.
  • When you register as a customer: By creating an account on our website, you provide us with information necessary to manage your profile.
  • When you add a product to your cart: Data may be collected whether you are logged in or entering information to save your cart.
  • When placing an order on our site: Your data is collected to process and track your purchase, including your billing and shipping details.
  • When you contact us directly: Communications via email or any other channel used to get in touch with us may also contain personal data.

This data collection is carried out in accordance with applicable regulations and only to the extent necessary to fulfill your needs or improve our services.

4. Data Collected and Their Purposes

We collect various types of personal or technical data depending on your interactions with our website, as detailed below:

  • Language and Regional Preferences: When you visit our site, we may automatically detect your language or regional preferences, if available, in order to redirect you to the appropriate site. However, this data is not stored.
  • Connection Logs: Our log files may temporarily record technical information such as your IP address provided by your internet service provider, the date and time of your visit, the page visited on our site, the referring site, and details about your browser and operating system. This data is collected for technical and security purposes and is only stored temporarily, in accordance with Article 6(1)(f) of the GDPR.
  • Site Registration: When creating a customer account, we ask you to provide essential information such as your first and last name, delivery address, and email address to facilitate account and order management.
  • Adding Products to Cart: When you add a product to your cart, we may ask you for an email address. This data may be used to follow up on abandoned carts, to subscribe you to our newsletter (if you have consented), or to offer you related and/or complementary product recommendations.
  • Contact Forms: When you contact us via forms on our site, we may collect information such as your name, email address, phone number, subject of your request, and a description of the issue. This data is necessary to respond to your inquiries, resolve your problems, or subscribe you to our newsletter if requested.
  • Newsletter Subscription: By subscribing to our newsletter, your email address is shared with our third-party provider responsible for the creation and delivery of our communications:
    SENDINBLUE: 7 Rue de Madrid, 75008 Paris, France.
  • Anonymous Statistical Data: During your visit, we may collect anonymized data for statistical, analytical, and performance improvement purposes. This may include visited pages, time spent on the site, scroll percentage, interactions with pages, or any other relevant indicators to optimize your user experience.

We collect this data in strict accordance with the principles of data minimization and purpose limitation as defined by the GDPR and are committed to protecting its confidentiality.

5. Data Processing by WordPress & WooCommerce

5.1. Data Collected via WordPress

WordPress is the content management system used to manage our website. It may collect and process the following data:

  • Cookies: WordPress uses cookies to ensure the proper functioning of the site (e.g., remembering your login preferences).
  • Comments: When you leave a comment, WordPress collects the data entered in the comment form, as well as your IP address and browser user agent to help with spam detection.

5.2. Data Collected via WooCommerce

WooCommerce is the solution used to manage our online store. It processes the following data to facilitate your purchases:

  • Order Data: First name, last name, address, email, phone number, ordered products, payment method.
  • Payment Data: WooCommerce does not store your payment information (credit card or bank account) directly. This data is securely transmitted to third-party payment processors (e.g., Stripe, PayPal) in compliance with PCI DSS security standards.
  • Order History: Your order information is stored for purchase tracking, customer support, and legal obligations (e.g., invoicing).
  • Cookies: WooCommerce uses cookies to:
    • Track products added to your cart.
    • Identify you when you’re logged in.
    • Ensure proper checkout functionality.

5.3. Purposes of Processing

Data collected via WordPress and WooCommerce is used to:

  • Manage your user account.
  • Process and ship your orders.
  • Provide customer support.
  • Improve the user experience on our site.
  • Fulfill our legal and administrative obligations.

5.4. Data Sharing

Your data may be shared with third-party services integrated into WordPress and WooCommerce, including:

  • Payment processing plugins (e.g., Stripe, PayPal).
  • Shipping services for order delivery.
  • Marketing or analytics extensions (with your consent, where applicable).

6. Data Storage

Your data is stored on servers operated by O2Switch in France.

Company Identification:

  • Company Name: O2Switch
  • Legal Form: SAS with a capital of €100,000
  • Head Office Address: CHE DES PARDIAUX, 63000 CLERMONT-FERRAND, France
  • SIRET: 510 909 807 00032

7. Legal Basis

Your personal data will be processed in accordance with the General Data Protection Regulation (GDPR) established by the European Commission. Your data will only be collected and processed in the following cases:

  • Consent: When we have obtained your explicit consent for processing your data (Article 6, paragraph 1, point a of the GDPR).
  • Legitimate interest: When we have a legitimate interest to process your data, while respecting your rights and freedoms (Article 6, paragraph 1, point f of the GDPR).
  • Contract performance: When processing is necessary for the performance of a contract to which you are a party, or for pre-contractual measures (Article 6, paragraph 1, point b of the GDPR).
  • Legal obligation: When processing is required to comply with a legal obligation to which we are subject (Article 6, paragraph 1, point c of the GDPR).

We are committed to processing your data transparently, lawfully, and securely, while respecting your data protection rights.

8. Your Rights

You can exercise your rights regarding your personal data at any time, in accordance with the General Data Protection Regulation (GDPR):

  • Access your data: You have the right to request access to your personal data we have collected.
  • Rectification or deletion: You may request correction or deletion of your personal data, as long as it complies with legal requirements and processing conditions.
  • Withdrawal of consent: If you previously gave consent for data processing, such as for newsletter subscriptions, you may withdraw that consent at any time. This does not affect the lawfulness of processing before the withdrawal.
  • Data portability: You have the right to receive your data in a structured, commonly used, and machine-readable format, where technically possible and available via our WordPress platform.

To exercise these rights, you can contact us directly using the information provided in our privacy policy. We will respond to your request as soon as possible, in accordance with applicable laws.

9. Data Retention Period

Personal data provided during registration or a purchase will be retained as long as the user maintains a commercial relationship with Detay, and in accordance with applicable legal obligations. These data will also be retained to the extent necessary for managing transactions, for tax purposes, or other legal obligations. However, the user may explicitly request the deletion of their personal data at any time. In that case, we will delete the data, provided it does not conflict with legal obligations that may require us to retain them.

10. COOKIES AND SIMILAR TECHNOLOGIES (Transients, pixels, tags, etc.)

A cookie is a small text file placed on a user’s device when visiting a website. It allows the site to store specific information, such as language preferences, login status, or items added to a shopping cart. This information is sent back to the site upon subsequent visits, improving the user experience. Cookies are also used to track visitor behavior for statistical or marketing purposes, such as displaying targeted ads.

A transient is a temporary storage mechanism mainly used by WordPress to cache information. Unlike cookies, transients are not stored on the user’s device but in the site’s database. They help improve performance by storing queries or data that are expensive to compute for a limited time. After that time, transients automatically expire.

A pixel is an extremely discreet tracking tool, typically in the form of an invisible image embedded in a web page or email. When a user opens the email or visits the page, a request is sent to a server. This allows data collection such as IP address, browser type, and visit time. Pixels are often used in marketing campaigns to measure engagement, like knowing how many people opened an email or clicked on an ad.

A tag is a piece of code inserted into a website to collect data or trigger specific actions. It can track user visits, record events like button clicks, or send data to third-party tools such as Google Analytics or Facebook Ads. Tags are essential for analyzing website or ad campaign performance, enabling administrators to make data-driven decisions.

These tools all play key roles in the digital ecosystem—whether to boost site performance, personalize the user experience, or monitor behavior for analytics or marketing.

10.1. Strictly Necessary Cookies

Strictly necessary cookies are essential for the proper functioning of the website. For example, they allow you to stay logged in during your visit or return to the site without having to log in again.

The legal basis for using strictly necessary cookies is our legitimate interest in providing a functional and stable website (Article 6, paragraph 1, point f of the GDPR). Their use is lawful and permitted without your prior consent.

10.2. Functional Cookies

A functional cookie is essential for the proper operation of a website. It provides core services and improves the user experience by remembering choices or specific actions. For example, these cookies may retain your language preferences, your shopping cart, or keep you logged in.

In accordance with Article 6, paragraph 1, point a of the GDPR, the use of functional cookies requires your prior consent. This means these cookies are only activated after you have explicitly accepted them via a banner or dedicated interface. This consent is essential to ensure that your personal data is collected and processed transparently and respectfully.

10.3. Performance Cookies

Performance cookies are used to analyze and measure website performance. They collect anonymous data about how visitors interact with the site—such as the most visited pages, session duration, or encountered errors. This data helps improve the user experience by optimizing site features or identifying areas for improvement.

According to Article 6, paragraph 1, point a of the GDPR, the use of performance cookies requires the user’s explicit consent. These cookies are only enabled after your agreement, given via a banner or preference manager. This practice ensures your navigation respects your privacy and data processing choices.

10.4. Advertising Cookies

Advertising cookies collect information about your browsing behavior and online interactions to deliver targeted and personalized advertisements. They allow advertisers and websites to display ads tailored to your interests, based on your searches, visited pages, or clicks. These cookies are also used to limit how often an ad is shown and to measure the effectiveness of campaigns.

In accordance with Article 6, paragraph 1, point a of the GDPR, advertising cookies can only be installed after obtaining your explicit consent. A banner or preference manager allows you to choose whether to accept their use. This consent ensures your personal data is used transparently and in accordance with your privacy rights.

11. Jurisdiction & GDPR

In the event of a dispute concerning the processing of your personal data, the competent authority is the Data Protection Authority in Belgium. You have the right to file a complaint with this authority if you believe your data protection rights have been violated. You can contact the authority at:

Data Protection Authority
Rue de la Presse 35, 1000 Brussels, Belgium
Website: https://www.gegevensbeschermingsautoriteit.be

12. Changes to the Policy

Detay reserves the right to modify this privacy policy to reflect legislative, regulatory, or industry practice changes. In the event of changes, Detay commits to informing you in advance and providing reasonable notice, giving you enough time to review and respond if necessary. We encourage you to regularly consult this policy to stay informed of updates.