Privacy Policy

Apoticaria is committed to ensuring the highest level of protection for your personal information.

As part of its activities, Apoticaria provides its customers with an e-commerce service accessible from the website www.apoticaria.com.

In order to provide its service, Apoticaria collects personal data about individuals. The collection of data takes place on the Apoticaria website, by telephone or when receiving paper orders.

The purpose of this section is to provide you with comprehensive information about Apoticaria's use of its customers' personal data.

In the personal data collection forms on the Site or in paper format, the Customer is informed, among other things, whether the data collection is mandatory or not. If a mandatory data field is not provided, Apoticaria will not be able to perform its services.

Table of contents

• 1. WHO COLLECTS PERSONAL DATA?
• 2. WHAT ARE THE PURPOSES OF THE COLLECTION OF YOUR PERSONAL DATA AND WHY DO WE COLLECT IT?
• 2.1 LEGAL BASIS FOR PROCESSING
• 2.2 WHAT DATA DO WE COLLECT, AND HOW DO WE USE IT?
• 3. TO WHOM IS YOUR DATA TRANSMITTED?
• 4. WHAT ARE MY DATA RIGHTS
• 4.1. What are my rights?
• 4.2 How to exercise them?
• 5. HOW LONG WILL MY DATA BE KEPT?
• 5.1. General rules concerning the management of the commercial relationship :
• 5.2. Specific rules concerning certain data processing operations :
• 6. WHAT SECURITY MEASURES ARE TAKEN TO PROTECT MY DATA?
• 6.1. General rules
• 6.2. Rules applicable to bank data and the bank card
• 7. WHAT SHOULD WE KNOW ABOUT THE DATA COLLECTED BY SOCIAL NETWORKS?
• 8. WILL I RECEIVE COMMERCIAL SOLICITATIONS?
• 8.1. Principles applicable to Apoticaria
• 8.2. Prospecting by email and sms
• 9. DOES APOTICARIA USE COOKIES, TAGS AND TRACERS
• 9.1. WHAT IS A COOKIE?
• 9.2. FOR WHAT PURPOSES ARE COOKIES, TAGS AND TRACERS USED?
• 9.3. HOW TO CONFIGURE THE DEPOSIT OF COOKIES, TAGS AND TRACERS?
• 9.4. LES PIXELS DE SUIVI DANS NOS E-MAILS
• 10. WHAT IS THE DATA PROTECTION OFFICER OF APOTICARIA
• 10.1. WHAT ARE ITS MISSIONS?
• 10.2. HOW TO CONTACT THE DATA PROTECTION OFFICER

1. WHO COLLECTS PERSONAL DATA?

The company that collects the personal data and implements the data processing is :

Apoticaria, société à responsabilité limitée au capital de 310 000 Euros, immatriculée au Registre du Commerce et des Sociétés de Auch sous le numéro 493 713 127 dont le siège social est situé au 280, chemin de Haille 32190 MARAMBAT.

2. WHAT ARE THE PURPOSES OF THE COLLECTION OF YOUR PERSONAL DATA AND WHY DO WE COLLECT IT?

2.1 LEGAL BASIS FOR PROCESSING

The privacy of the users is protected by the regulations. According to the data protection regulations, Apoticaria is only allowed to use the personal data of its users if it has a valid legal basis. Apoticaria must ensure that it has one or more of the following legal bases:

• The performance of a contract (e.g. to process and fulfill an order for goods or to open and manage an Apoticaria account), or ;
• Fulfillment of a legal obligation (e.g., retention of invoices), or ;
• When it is in the legitimate interest of Apoticaria, or ;
• When the user has given consent.

A "legitimate interest" of Apoticaria must not conflict with the rights and freedoms of users. Examples of legitimate interests mentioned in the GDPR include fraud prevention, direct marketing and data sharing within a group of companies (such as Apoticaria).

2.2 WHAT DATA DO WE COLLECT, AND HOW DO WE USE IT?

Apoticaria collects and saves personal data from its customers for the following purposes:

Data	How do we use this data?	Why?
Name / Contact information	Pour livrer vos commandes à votre adresse. Pour vous envoyer vos informations de commande par email : paiement, envoi, mise à jour de la commande, etc. Pour vous envoyer nos promotions en cours, nouveaux produits, etc. par email. Respecter la loi qui nous demande de vous informer en cas de changements dans les services que nous proposons. Prévenir et détecter la fraude. Vous proposer des publicités Apoticaria.com quand vous naviguez sur internet. Comprendre ce que vous et les autres clients aimez. Recevoir votre paiement, vous rembourser. Prévenir et détecter la fraude.	Nous collectons ces données afin de respecter notre engagement : livrer votre commande. Nous collectons ces données afin de vous tenir informé de l'état de votre commande. Pour vous partager nos actualités. Ces emails vous sont envoyés uniquement si vous vous être inscrit à notre newsletter. Pour nous permettre de vous tenir au courant des informations clés, comme par exemple notre politique de confidentialité. Pour prévenir et détecter toute tentative de fraude envers vous ou Apoticaria. Pour relayer nos offres, y compris celles basées sur votre historique de navigation. Ceci est établi sur la base de nos intérêts commerciaux légitimes. Pour vous proposer des produits et services de qualité à des prix compétitifs. Afin de remplir nos engagements. Pour prévenir et détecter toute tentative de fraude envers vous ou Apoticaria.
Contact history When you contact us by: phone, email, mail, social networks, online chat and in-branch.	Fournir un service client et un support. Former notre personnel. Avis et commentaires.	Pour répondre à vos questions, réclamations, plaintes ou demandes de remboursements. Nous utilisons ces données pour former notre service client et améliorer nos services. Nous utilisons ces données pour améliorer nos services et aider les autres clients dans leur expérience d'achat.
Historique de vos achats Ce que vous avez acheté et les produits que vous avez mis dans votre panier.	Pour passer votre commande. Gérer les retours et proposer un service client.	Nous collectons ces données afin de respecter notre engagement avec vous. Nous collectons ces données afin de respecter notre engagement avec vous.
Informations sur les appareils que vous utilisez (smartphone, tablette, ordinateur) et comment vous naviguez sur notre site internet. Les informations que vous nous fournissez lorsque vous naviguez sur notre site ou utilisez notre application,y compris votre adresse IP, type d'appareil et vos données de localisation, et la façon dont vous utilisez notre site web.	Découvrir ce que vous et les autres clients aimez. Améliorer notre site internet. Protéger notre site internet. Vous offrir la meilleure expérience de navigation possible. Pour vous recommander des produits. Pour vous proposer des publicités Apoticaria.com lorsque vous naviguez sur internet.	Pour être sûr de vous proposer les meilleurs produits et services possibles à des prix attractifs et vous offrir une expérience d'achat personnalisée. Ceci est basé sur nos intérêts commerciaux légitimes. Pour vous offrir la meilleure expérience de navigation possible. Pour prévenir et détecter toute tentative de fraude envers vous ou Apoticaria, et de remplir nos obligations légales concernant la protection de vos données. Nous utilisons les informations recueillies par l'utilisation de cookies dans votre navigateur web. Cela inclut la collecte d'informations sur les pages web que vous avez consultés, les produits sur lesquels vous avez cliqué et les termes de recherches que vous avez saisis. Pour vous recommander des produits en fonction de votre navigation et historique d'achats. Ceci est basé sur nos intérêts commerciaux légitimes. Pour relayer nos offres, y compris celles basées sur votre historique de navigation. Ceci est établi sur la base de nos intérêts commerciaux légitimes.
Your entries in contests, responses to our surveys and comments.	Pour l'organisation et la gestion des concours. Sondages et commentaires.	Pour organiser un tirage au sort ou désigner un gagnant aux jeux concours. Votre consentement est demandé au moment de l'inscription. Nous utilisons les données recueillies pour améliorer notre offre de service à la clientèle et pour aider les autres clients dans leur expérience d'achat.

3. TO WHOM IS YOUR DATA TRANSMITTED?

Your data is passed on to partners of Apoticaria who may process the data on their behalf (these are recipients) or solely on behalf of and according to the instructions of Apoticaria (these are subcontractors).

The recipients of the data are:

• Banks and financial institutions used for online payment on the site
• The police authorities in the context of judicial requisitions concerning the fight against fraud
• Customs services in case of delivery abroad

Apoticaria also uses subcontractors for the following operations:

• Secure payment on websites and mobile applications
• The fight against fraud and the recovery of unpaid bills
• The shipping of your orders and packages
• Management of the chat, phone calls, their possible recordings and the sending of postal mail
• Personalization of site content
• Carrying out technical maintenance and development of the website, internal applications and the Apoticaria information system.
• The sending of commercial prospecting emails and mobile notifications

Apoticaria may also share personal data if the structure of the Apoticaria Group changes in the future:

• In the event of a sale, transfer or merger of the business or any part thereof, or if Apoticaria acquires or merges with another company.
• If such a transaction takes place, Apoticaria will ensure that the other party complies with data protection legislation.

4. WHAT ARE MY DATA RIGHTS

4.1. What are my rights?

Pursuant to Articles 14 to 22 of Regulation 2016/679 of 27 April 2016, any natural person using the service has the right to exercise the following rights:

Un droit d’accèsUn droit de rectification,Un droit d’opposition et d’effacement au traitement de ses donnéesUn droit d’opposition au profilageUn droit à la limitation du traitement,Un droit à la portabilité de ses données

Finally, when Apoticaria detects a personal data breach that may pose a high risk to your rights and freedoms, you will be informed of this breach as soon as possible.

4.2 How to exercise them?

These rights can be exercised with the company Apoticaria which collected the personal data in the following way:

By mail, by writing to us at the following address

Apoticaria - BP 9 - 32190 Vic-Fezensac, indicating your name, first name, address, email and if possible customer reference in order to speed up the processing of your request.

Electronically to: contact@apoticaria.com

In order to guarantee the identity of the applicant, all requests for personal data held by Apoticaria must be accompanied by proof of identity.

Apoticaria will respond within 1 month after exercising the right. In some cases, due to the complexity of the request or the number of requests, this period may be extended by 2 months.

5. HOW LONG WILL MY DATA BE KEPT?

Apoticaria has determined specific rules regarding the retention of Users' personal data.

5.1. General rules concerning the management of the commercial relationship :

To calculate the most relevant shelf life, Apoticaria distinguishes:

• People who are known as "prospects" and have never made a purchase from Apoticaria and its partners
• The people called "customers" who have made at least 1 purchase

A separate retention period will be applied to prospects and customers.

For prospects, the starting point of the retention period is the creation of the account.

For customers, the starting point of the retention period is the last purchase made by the customer at Apoticaria. The retention period of a customer's data will differ depending on whether the customer is a member of a loyalty program or not.

5.2. Specific rules concerning certain data processing operations :

For certain types of processing, data retention is subject to specific retention periods.

Here are some examples:

Les consignes concernant la lutte contre la fraude sont conservées 3 ans.Les factures liées aux achats sont conservées 10 ans.

For more information on the retention periods applied by Apoticaria, you can contact the data protection officer.

6. WHAT SECURITY MEASURES ARE TAKEN TO PROTECT MY DATA?

6.1. General rules

As the person in charge of processing, Apoticaria takes all necessary precautions to preserve the security and confidentiality of the data and in particular to prevent it from being distorted, damaged or accessed by unauthorized third parties.

Apoticaria has deployed a robust security system to ensure the utmost security of the data collected and to detect data breaches. This includes physical security of the buildings housing our systems, computer system security to prevent external access to your data, and having secure copies of your data.

When using subcontractors, Apoticaria ensures that the subcontractors comply with the data protection regulations.

6.2. Rules applicable to bank data and the bank card

To ensure the security of payments, Apoticaria uses the services of a PCI-DSS certified provider, Stripe. This standard is an international security standard whose objectives are to ensure the confidentiality and integrity of cardholder data, and thus to secure the protection of card and transaction data.

When you place a credit card order with Apoticaria, our order taking system connects in real time with the Stripe system which collects your data and performs various checks to prevent abuse and fraud. The data is stored on Stripe's servers and is not transmitted to Apoticaria's servers at any time. Stripe makes the authorization request to the bank and sends us a transaction number that allows transactions up to the amount of the authorization.

In order to avoid having to re-enter your credit card information for future orders, you can choose to have your credit cards associated with your online account by checking the appropriate box. Your credit cards are stored securely with Stripe. You can consult the list of your registered cards (in hidden mode), but also delete all or part of its contents, in the "Cards" section. In this case, your deleted cards will no longer appear in your online account or in future orders.

In order to be able to debit the account at the time of invoicing or to credit it following a return, Stripe keeps the bank data associated with the authorization number, the time necessary to carry out the transaction (payments after shipment of the goods) and the processing of possible complaints (returns, disputes).

If you have chosen to register your credit cards, they are automatically deactivated when the validity date of the card expires.

7. WHAT SHOULD WE KNOW ABOUT THE DATA COLLECTED BY SOCIAL NETWORKS?

Apoticaria offers to use social networks to improve the business relationship and to provide you with targeted advertising offers on these networks.

The use of social networks to interact with Apoticaria (including, but not limited to, Facebook Messenger, Facebook Connect, Facebook's "share" buttons, Instagram or Twitter) may result in the exchange of data between Apoticaria and these social networks.

For example, if you are logged into the Facebook social network on your computer and you visit a page on the Apoticaria Site, Facebook may collect this information. Similarly, if you click on the "tweet" button on a page of the Apoticaria Site, Twitter will collect this information.

Apoticaria invites you to consult the personal data management policies of the various social networks to find out what personal data they may transmit.

8. WILL I RECEIVE COMMERCIAL SOLICITATIONS?

8.1. Principles applicable to Apoticaria

Apoticaria uses your contact information to send you targeted advertisements, including by email, postal mail, SMS, mobile notification, social networks or third party websites.

In this context, Apoticaria is committed to respecting the rules applicable to each prospecting channel.

8.2. Prospecting by email and sms

Apoticaria complies with the rules of the Directive 2002/58/EC of July 12, 2002, which provides for the express prior consent of the User for the sending of commercial prospecting by electronic means (e-mail or SMS).

Thus, when you create your account on the site, you are expressly asked for your consent:

• To receive offers from Apoticaria by email
• To receive offers from Apoticaria's partners to whom your information may be sent
• To receive offers from Apoticaria by sms

Apoticaria will not send you personalized email or text messages if you have not consented to them.

There is an exception in the case where the User, without having given his prior consent, can nevertheless be canvassed if he is already a customer of Apoticaria and the purpose of the canvassing is to offer similar products or services.

In any case, the User has the possibility to oppose the reception of such solicitations by carrying out the following actions:

• When creating your account, check "no" in the boxes related to prospecting;
• For email, by clicking on the unsubscribe link provided in each email or by going to your Apoticaria account in the newsletter section;
• For the sms, by sending a stop SMS to the number indicated in it or by going to his account Apoticaria in the newsletter section;
• By contacting customer service.

9. DOES APOTICARIA USE COOKIES, TAGS AND TRACERS

When using our Service, information relating to the navigation of your terminal (computer, tablet, smartphone, etc.) may be recorded in "Cookies" files deposited on your terminal, subject to the choices you have expressed concerning Cookies and that you can modify at any time.

9.1. WHAT IS A COOKIE?

The term "cookie" encompasses several technologies used to track the browsing habits or behavior of the Internet user. These technologies are multiple and in constant evolution. In particular, there are cookies, tags, pixels and Javascript code.

A cookie is a small text file saved by the browser of your computer, tablet or smartphone and which allows to keep user data in order to facilitate navigation and to allow certain features.

There are two types of cookies:

• first party cookies, deposited by Apoticaria for the needs of navigation and operation of the site;
• third party cookies deposited by third party partner companies in order to identify your centers of interest and to send you personalized offers. These third party cookies are directly managed by the companies that publish them and that must also respect the regulations on data protection.

9.2. FOR WHAT PURPOSES ARE COOKIES, TAGS AND TRACERS USED?

The Cookies that Apoticaria issues on the site and mobile application allow us to:

• to establish statistics and volumes of frequentation and use of the various elements composing our services. For this purpose, we use audience measurement cookies.
• to adapt the presentation of our Site according to the terminal used;
• to adapt the presentation of our Site according to the affinities of each user;
• to memorize information relating to a form that you have filled out on our Site (registration or access to your account, subscribed service, contents of an order basket, etc.);
• to allow you to access reserved and personal areas of our Site, such as your account, thanks to identifiers;
• implement security measures, such as requiring you to log back into your account after a certain period of time;
• share information with advertisers on other websites to provide you with relevant advertisements in line with your interests. In this regard, we use advertising cookies.
• share information on social networks. As such, we use cookies to share on these networks.

9.3. HOW TO CONFIGURE THE DEPOSIT OF COOKIES, TAGS AND TRACERS?

In accordance with the 2002/58/CE directive of July 12, 2002, Apoticaria collects your prior consent to the deposit of advertising, audience measurement and social network sharing cookies.

You can choose at any time to express and modify your wishes regarding cookies, by the means described below.

9.3.1. Setting up your browser

You can configure your browser so that cookies are saved on your terminal or, on the contrary, that they are rejected, either systematically or according to their sender. You can also configure your browser software so that you are offered the option of accepting or rejecting cookies from time to time, before a cookie is likely to be stored in your terminal.

How do you exercise your choices, depending on the browser you use?

Each browser has a different configuration for managing cookies and your choices. It is described in the help menu of your browser, which will allow you to know how to modify your wishes regarding cookies.

Pour Internet Explorer™ : http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies ,
Pour Safari™ : http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
Pour Chrome™ : http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,
Pour Firefox™ : http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,
Pour Opera™ : http://help.opera.com/Windows/10.20/fr/cookies.html

9.3.2. Setting the operating system of your smartphone

You have the possibility to control the deposit of Cookies on your smartphone in the operating system rules.

On iOS: https://support.apple.com/fr-fr/HT201265

On Android: https://support.google.com/chrome/topic/3434352

9.3.3. Setting cookies with a tool offered by Apoticaria

In order to comply with the regulations, Apoticaria uses a tool that allows the user to configure the deposit of cookies when connecting to the site www.apoticaria.com

To access the list of deposited cookies and to configure the deposit click here

9.3.4. List of audience analysis tools used by Apoticaria

• Google Adwords to analyze the sales made through this channel
• Google Analytics to analyze the type of audience
• Yandex Metrica to analyze user behavior on the site and improve the use of the site
• Google Tag Manager to analyze the behavior of visitors and improve the use of the site
• Boutons de partage Facebook et Twitter

9.4. Les pixels de suivi dans nos courriels

Nos courriels peuvent contenir un pixel de suivi : une image de très petite taille, généralement invisible, hébergée sur un serveur distant. Lorsque vous affichez le message, votre logiciel de messagerie charge cette image, ce qui nous permet de savoir que le courriel a été ouvert.

Nous utilisons cette information pour mesurer l'intérêt suscité par nos communications et adapter leur fréquence, afin de ne pas vous solliciter inutilement.

Ce suivi relève de l'article 82 de la loi Informatique et Libertés, au même titre que les cookies déposés sur notre site. Son régime est distinct de celui applicable à l'envoi de nos courriels : votre inscription à notre newsletter n'emporte pas acceptation du suivi des ouvertures. Il n'est mis en œuvre qu'après recueil de votre accord ou, pour les adresses collectées avant le 14 avril 2026, en l'absence d'opposition de votre part à la suite de notre information.

Vous pouvez refuser ce suivi, ou revenir sur votre choix, à tout moment et sans vous désinscrire de nos courriels, depuis la page suivante : https://apoticaria.com/pages/suivi-emails . Votre choix est conservé et appliqué à l'ensemble de nos envois ultérieurs ; il ne modifie ni votre inscription à nos communications, ni les offres dont vous bénéficiez.

Les liens hypertextes contenus dans nos courriels peuvent comporter un identifiant permettant de savoir quels contenus ont été consultés. Cette mesure repose sur notre intérêt légitime à évaluer la pertinence de nos communications ; vous pouvez vous y opposer à la même adresse.

Nos courriels sont expédiés via Klaviyo, Inc. (États-Unis), agissant en qualité de sous-traitant pour notre compte.

10. WHAT IS THE DATA PROTECTION OFFICER OF APOTICARIA

10.1. WHAT ARE ITS MISSIONS?

The data protection officer appointed within Apoticaria is responsible for ensuring compliance with the regulations and rules described in this document.

In particular, he or she is responsible for establishing a register of personal data processing operations carried out within the company and for ensuring that these comply with the regulations and any changes to them.

He ensures team awareness and responds to users wishing to exercise their rights regarding the personal data collected by Apoticaria

10.2. HOW TO CONTACT THE DATA PROTECTION OFFICER

You can contact the data protection officer at contact@apoticaria.com

To find out more about your rights, visit the website of your supervisory authority:

• In France, the CNIL: https: //www.cnil.fr
• In the UK, the ICO: https: //ico.org.uk
• In Spain, the AEPD: http: //www.agpd.es/portalwebAGPD/index-idfr-idphp.php
• In Portugal, the CNPD: https: //www.cnpd.pt/index.asp
• In Belgium, the OPC: https: //www.privacycommission.be/fr
• In Switzerland, FDPIC: https: //www.edoeb.admin.ch/edoeb/de/home.html