Introduction
RAK & SPA SERVICES (“we”, “us”, “our”) operates the digital platforms and web services reachable at priaalamfs.info. This Privacy Policy informs visitors and clients of our practices concerning the collection, storage, processing, and protection of personal data.
We process all personal data in rigorous accordance with European Union Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”) and the French Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties (“Loi Informatique et Libertés”), under the oversight of the Commission Nationale de l'Informatique et des Libertés (CNIL).
Whether you are discovering our botanical vitality formulas, reviewing scientific monographs, or contacting our Paris headquarters, we are committed to safeguarding your privacy with complete transparency and robust security.
01
Data Controller
The legal entity responsible for the processing of your personal data is:
RAK & SPA SERVICES (SARL)
Capital social : 1 200 000 €
SIREN : 508 088 812 • SIRET : 508 088 812 00054
RCS Paris • Numéro TVA : FR13508088812
Siège social : 7 Rue de Laborde, 75008 Paris, France
Représentant légal : Alexis Ngoummela Kouchere Richard, Gérant
Contact DPO / Privacy :
[email protected]
02
Data We Collect
We only collect personal data that is adequate, relevant, and strictly limited to what is necessary for our stated operational purposes (“data minimization” principle):
Direct Communications
- – Full name and professional title
- – Email address and telephone number
- – Message contents and inquiry records
Technical & Browsing Logs
- – Anonymized IP address & browser agent
- – Pages visited, timestamps, referral URLs
- – Technical cookie session identifiers
03
Legal Bases & Purposes
Under Article 6 of the GDPR, personal data processing is lawful only when grounded in a defined legal basis:
-
1. Consent (Art. 6.1.a GDPR): When you explicitly subscribe to our wellness updates or submit inquiries through our contact forms. You may withdraw consent at any time.
-
2. Performance of a Contract (Art. 6.1.b GDPR): Processing orders, fulfilling customer requests, and providing nutritional advisory services.
-
3. Legal Obligation (Art. 6.1.c GDPR): Accounting, tax invoicing, and regulatory reporting under French commercial laws.
-
4. Legitimate Interests (Art. 6.1.f GDPR): Ensuring website cybersecurity, preventing fraudulent access, and optimizing user navigation.
04
Data Retention & Security
Personal data is retained only for periods proportionate to the intended purposes:
- Inquiry messages: 3 years from the date of last contact.
- Newsletter subscriptions: Until explicit unsubscription or revocation of consent.
- Technical server logs: Maximum 12 months in accordance with CNIL guidelines.
- Financial and commercial transactions: 10 years in compliance with French Commercial Code (Art. L123-22).
We apply industry-standard technical measures, including SSL/TLS 256-bit encryption, strict access controls, and firewall perimeter defenses to safeguard data from accidental loss or unlawful intrusion.
05
Recipients & Transfers
We do not sell, rent, or trade your personal data. Data is shared exclusively with accredited subcontractors (hosting providers, email service processors) operating under strict data processing agreements conforming to GDPR Art. 28. All primary processing servers are located within the European Economic Area (EEA).
06
Your GDPR Rights
Under Articles 15 through 22 of the GDPR, you possess extensive individual prerogatives:
Right of Access
Obtain confirmation as to whether your personal data is processed and request an exact copy.
Right to Rectification
Request prompt correction of inaccurate or incomplete personal records.
Right to Erasure
Demand the permanent deletion of personal records (“right to be forgotten”).
You additionally maintain the right to restriction of processing, data portability, and the right to lodge a formal complaint with the French supervisory authority, the CNIL (3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07 • www.cnil.fr).
