Privacy policy

Date of last update: March 25, 2022


For Draw Me A Garden, respecting your privacy is essential. When you use our website or our services, you entrust us with your personal data. We are committed to taking care of it. This policy has been designed to help you understand how we collect and process your personal data, and what your rights are.

1 - Who is responsible for processing your data?

The company Draw Me A Garden, a simplified joint stock company registered under number 828 223 214 RCS Blois and whose head office is located at 21 rue Franciade, 41000 Blois, is responsible for processing your data.

2 - What data do we collect?

We collect the following personal data:

- Data you provide to us: When you contact us, place an order, use our services or website, create an account on our website or otherwise interact with us, we collect the personal information you provide to us.

In all cases, we will only ask you for the information we really need. You are free to communicate them to us or not, but if you refuse, we will not be able to respond to your requests or give you access to our services.

- Data we collect automatically: We collect data from you and your devices when you use our services. We collect this data automatically via cookies. To learn more about these technologies, please read our Cookie Policy .

3 - Why do we collect your data and how long do we keep it?

We process your data for defined purposes, on the basis of a legal “justification” (or legal basis), and for a limited period. The table below details the purposes and legal bases of our processing, as well as the applicable retention periods.

Purposes Legal bases Storage period
1 - Order management
Management of orders, provision of services and delivery of kits. This processing is necessary for the execution of the contract concluded between you and Draw Me A Garden. Duration of the contractual relationship.
Accounting, tax obligations, etc. This processing is necessary to comply with a legal obligation to which we are subject.. In the form of an intermediate archive, for the legal retention period.
Management of pre-litigation and litigation. This processing is necessary for the pursuit of our legitimate interest in establishing proof of a right or a contract, and the defense of our rights. Duration of the related limitation period, generally 5 years.
Monitoring of customer relations (complaints management, after-sales service, etc.). This processing is necessary for the execution of the contract concluded between you and Draw Me A Garden. Duration of the contractual relationship.
2 - Prospecting operations
Commercial prospecting by electronic means. This processing is necessary for the pursuit of our legitimate interest in making ourselves known and developing our activity.

However, where required, we will ask for your consent.		 Until consent is withdrawn (if applicable), or 3 years from the end of the commercial relationship, if you are a customer, or from the collection of your data or the last contact from you, if you are a prospect.
3 - Management of commercial activity
Business statistics, studies, surveys, etc. This processing is necessary for the pursuit of our legitimate interest in order to improve our processes and our commercial performance. 1 year
4 - Management of people’s rights
Management of requests to exercise rights. This processing is necessary to comply with a legal obligation to which we are subject. The time required to respond to your request (in principle, 1 month; maximum 3 months in the event of a complex request).
Management of an opposition list. This processing is necessary for the pursuit of our legitimate interest to respect your wishes relating to the processing of your data. 3 years from the exercise of the right.

Please note that your data may be kept for longer, for example to establish proof of a right or under a legal obligation. In all cases, your data is not kept beyond what is strictly necessary for the purposes for which it is processed. When your data is no longer needed, we will ensure that it is either deleted or anonymized.

4 - Who do we share your data with?

We only share your data with:

- Duly authorized persons from Draw Me A Garden, who need access to your data as part of their duties,

- Our external advisors (lawyers, auditors, etc.), when necessary for the purposes of the legitimate interests pursued by Draw Me A Garden,

- Public or judicial authorities, as long as we are legally required to do so.

- Brevo, our email sending management tool (not just for marketing or commercial purposes), for good use of our site.

We may also share your personal data with third parties in connection with a potential or actual sale or restructuring of our company or certain of our assets, in which case your data may be part of the transferred assets.

Your data is processed in the European Union, with some exceptions. Where applicable (for example, in the event that Draw Me A Garden uses a subcontractor outside the European Economic Area), and in the absence of an adequacy decision from the European Commission under Article 45 of the GDPR, the transfer of your personal data will be governed by appropriate transfer mechanisms under Articles 46 et seq. of the GDPR (such as standard contractual clauses adopted by the European Commission). You can obtain a copy (excluding confidential provisions) by contacting us using the contact details indicated in article 7 “Contact”.

5 - What are your rights and how to exercise them?

You benefit from a certain number of rights over your data.

You may revoke your consent to any processing of your data based on your consent at any time.

You can ask us to confirm whether we are processing your data and, if so, inform you of the characteristics of the processing, allow you to access it and obtain a copy of it.

You can ask us to correct or complete your data if it is incorrect or incomplete.

You can, in certain cases, ask us to erase your data or limit its processing.

You can ask us, in certain cases, to provide you with your data in a structured, commonly used and machine-readable format, or you can ask for it to be transmitted directly to another data controller.

You have the right to define directives (general or specific) relating to the fate of your data after your death.

You can object to any processing of your data which is based on our “legitimate interest”. If you exercise this right, we must cease the processing, unless we demonstrate the existence of compelling legitimate grounds which override your fundamental rights and freedoms, or for the establishment, exercise or defense of legal claims.

You can object at any time to the processing of your data for prospecting purposes.

You can exercise your rights by contacting us using the contact details indicated in article 7 “Contact”.

You also have the right to lodge a complaint with the competent supervisory authority relating to the processing of your data. In France, the supervisory authority for the protection of personal data is the CNIL (www.cnil.fr).

6 - Protection of minors

Our Services are not directed to minors and are not intended for use by minors. We do not knowingly collect information from minors or request any information from them. We do not knowingly allow minors to use our services. Any person providing their information to Draw Me A Garden in the context of an order or the provision of a service declares to have reached the legal age of majority. If we discover that we have collected information from a minor without the permission of their parent or legal guardian(s), we will delete it. Please contact us using the contact information provided in Section 7 below if you believe you have provided us with information about a minor without the permission of their parents or legal guardian(s).

7 - Contact

For more information regarding your rights, to exercise them or for any questions or complaints regarding the protection of your personal data, you can write to us at the following email address: contact@dmag.fr.

8 - Modification of the Policy

We may modify this privacy policy to take into account changes in legislation, our services, our data processing practices or technological advances. Our use of the personal data we collect is subject to the Privacy Policy in effect at the time such data is used. Depending on the type of change, we may notify you of the change by posting a post on this page.