Privacy Policy

1. Personal Data Collection

The Tissus en Ligne website collects your personal data for predetermined and legitimate purposes. JEMTEX, responsible for the processing of personal data carried out on its websites, collects information about you when you create your customer account or during your purchases. The mandatory or optional nature of the data is specified on the information collection forms.

The personal data collected allows us to carry out operations related to:

• customer management;
• prospecting;
• the development of commercial statistics;
• the management of requests for access, rectification, and opposition rights;
• the management of unpaid bills and litigation;
• the management of promotional operations;
• the management of reviews.

The legal basis for these data processings is the execution of contracts to which you are a party or the execution of pre-contractual measures taken at your request.

This data may be used to send information and promotional offers from the Tissus en Ligne website:

• to prospects (non-customers), only after obtaining their prior, free, and express consent (collected via an unchecked checkbox);
• to existing Customers, for products similar to those already ordered on the Site. You can unsubscribe at any time and free of charge from our communications by clicking on the unsubscribe link present in each email.

2. Data Security

We are committed to ensuring the security of your personal data through strict procedures within our company.

For data collected "online", communications on the customer side are encrypted between the user's computer and our servers (HTTPS secure area). JEMTEX undertakes to make every effort to protect your personal data. Within JEMTEX, only persons who, due to their functions, have a legitimate interest in accessing your information will have access to it. As part of technical operations, your data may also be hosted by our subcontractors. The latter are rigorously selected and act in accordance with our instructions. Your personal data is hosted on infrastructure located in Europe. Depending on the services used, your data may be hosted in the European Union or in the United Kingdom. Where personal data is transferred from the European Union to the United Kingdom, such transfers are carried out in accordance with applicable data protection legislation and the European Commission's adequacy decision concerning the United Kingdom.

We do not broadcast your personal data on our website.

For payments, all data entered by the customer during credit card payment is immediately encrypted using the SSL/TLS protocol.

Our secure web payment solution, Stripe, complies with the strictest security criteria and is certified PCI Level 1 — the highest level of security.

No payment data concerning the customer is stored on the site, preventing any possibility of fraud by hacking. The site never knows the credit card number entered, and it is therefore not stored on its server.

3. Data Sharing

In order to achieve the aforementioned purposes, your personal data is shared only with:

• entities of the company JEMTEX;
• our service providers and subcontractors performing services on our behalf (in particular our carriers and logistics providers for delivery, our secure payment provider Stripe/PayPal, our hosting and technical maintenance providers);
• financial and judicial authorities or state agencies, public bodies upon request and within the limits of what is permitted by regulations;
• certain regulated professions such as lawyers, notaries, and statutory auditors.

Under no circumstances will JEMTEX sell or share data with third-party commercial partners.

4. Data Retention

Your personal data is retained for a limited and proportionate duration:

• Customer data (active database): retained for the entire duration of the contractual relationship.
• Intermediate archiving of customer data: retained for a period of 5 years from the end of the commercial relationship (civil and commercial limitation period - Article 2224 of the Civil Code) and 10 years for invoices and accounting documents (legal obligation - Article L. 123-22 of the Commercial Code).
• Prospect data (non-customers): deleted a maximum of 3 years after the last contact from the prospect (request for information, click on a link, etc.).
• Data related to anti-fraud measures and proof management: retained for a period of 15 months from the date of receipt and 24 months from the date of transaction in case of dispute.

5. Your Rights

In accordance with Regulation (EU) 2016/679 (GDPR) and the amended Data Protection Act of January 6, 1978, you have the right of access, rectification, erasure, portability, and restriction of processing of your personal data, as well as the right to object to processing for legitimate reasons or to commercial prospecting.

To exercise these rights, you can contact us:

• via our contact form by selecting the subject "Gestion des données personnelles"; or
• by email to: contact[at]tissus-en-ligne.com or support[at]tissus-en-ligne.com
• by postal mail to: JEMTEX – 6 rue de Mulhouse, 75002 Paris

When you make a request from your logged-in customer account, your identity is presumed established. A copy of an identity document will only be requested in case of reasonable doubt about your identity that the company cannot resolve by other means.

You also have the right to define directives relating to the fate of your personal data after your death.

If you believe, after contacting us, that your Data Protection rights are not being respected or that the processing of your data does not comply with data protection rules, you have the right to lodge a complaint with the competent supervisory authority: the Commission Nationale de l'Informatique et des Libertés (CNIL) – 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07 – Website: www.cnil.fr.