Last update: 2019-12-04
Purpose of the processing operation
DeepinBricks is a website that provides an e-commerce manager with statistics
about his customers, orders, and store in a more general way. Data are collected
when an order is placed at the store in question and are provided by BrickLink and Brick Owl.
Data are grouped in a customer database.
This database enables to:
- Carry out mailing operations with the store’s customers to offer discounts or products similar to those previously ordered
- Compile statistics on orders, sales, customers
- Perform customer profiling to gain a better understanding of them
- Improve the website experience with new functionalities
Legal basis for the processing operations
We only collect personal data when we have a legal basis to do so. The sending of commercial requests by email for products similar to those ordered by customers is based on the legitimate interest of the store manager (see Article 6.1.f of the European Data Protection Regulation), namely, to promote articles to customers. The performance of statistical studies based on customer data also relies on the legal basis for processing the legitimate interest of the manager.
Data categories
1. Customer identity
The last name, first name, address, email address, are useful to have an identification of the different customers of the store and in particular to be able to carry out emailing campaigns thanks to the email addresses. Addresses, and in particular the country, provide a view of the distribution of customers around the world. A wishlist, which can be built from DeepinBricks, BrickLink or Brick Owl, will be saved in our database to be able to send the customer a notification if the product he is waiting for becomes available in the store.
2. Store and manager data
The name, email address, password, are registered to allow a secure connection to DeepinBricks. The description of the store, the country, the logo, the internet links, are also recorded data allowing a better knowledge of the store and can be reused when the manager communicates with his customers. In addition, its turnover and sales are collected and then reused in the display of graphics.
3. Order data
The order number, order date, purchase details, purchase amount, invoice payment data, customer opinion, allow the manager to have an overview of the orders to be processed. These information are also useful for producing statistics on the most requested products, or for establishing the various customer profiles. Order and customer data will also be used to create customer groups, based on their characteristics, through which mailing campaigns can be targeted, based on customer expectations. Finally, when the customer leaves a feedback when an order is delivered, it will be saved and transmitted to the manager via our website.
4. Mailing campaign data
When a mailing campaign is carried out, we collect some data about its success, and then produce statistics for the store manager. In particular, we collect the group of customers to whom the mailing campaign was sent, with the email address of each one, the date, but we also recover the action carried out by the customer to know the number of customers who clicked on the email.
5. Cookies
When the manager authenticates to access their personal space, we offer to save their login information in the form of a cookie. This will allow them to no longer have to enter their login and password for future connections. If the user decides not to tick the ‟Remember me” box, no cookies will be used.
Data recipient
The store manager is the sole and unique recipient of all data. Under no circumstances are they resold or disclosed to third parties. This data is stored on a server in France.
Data retention duration
Customer and order data are kept for the duration of the commercial relationship with the store and for a period of five years from the last purchase. When the manager decides to delete their account, the data concerning them as well as those of the store and its customers are kept for a period of six months before being definitively deleted. However, the store manager will have the possibility to download for their personal archive the invoices of the orders placed.
| Object | Data category | Retention duration |
|---|---|---|
| Subscribe to the store newsletter | Email address, group to which the customer belongs | Until unsubscribing via a link provided for this purpose |
| Order history | List of orders placed with the store | During the commercial relationship with the store, plus a period of five years |
| Connection to DeepinBricks | Login information in the form of a cookie | For a period of 1 month |
| Information about the store and its manager | Manager identity, connection identifiers, description of the store | As long as the store has a DeepinBricks account, plus a six-month period |
Your rights
If you no longer wish to receive advertising or news from the store manager,
simply click on the unsubscribe link provided for this purpose in the emails you receive.
You can access your personal data, correct them or request that they be deleted.
You also have a right to portability and a right to limit the processing of your data.
For more information about your rights to your data, we invite you to visit the CNIL website.
To exercise these rights or for any question relating to the processing of your data,
you can contact us at privacy@deepinbricks.com. If, after contacting DeepinBricks’ support,
you believe that your ‟Data Protection” rights have not been respected,
you can file a complaint with the CNIL.
Data security
Personal data are protected by technical and organizational measures in accordance with the requirements imposed by French and European laws. They are thus secure and confidential. We use encryption and authentication technologies to achieve these objectives.
