Privacy policy

Privacy Policy

The content of this privacy policy (the “Policy”) is published by the company SUSTY, whose legal notices can be found under the “Legal Notices” section. As the data controller, SUSTY places great importance on protecting and respecting your privacy, and ensures compliance with applicable regulations.

This Policy describes the conditions and terms under which SUSTY (“we”) processes your personal data when you interact with the SUSTY platform — as defined in paragraph 1 below — with our advisors, or when you visit or use our website www.sustyfabrics.com (the “Platform”). This Policy also informs you of your rights regarding the protection of personal data.

This Policy does not address cookies and other trackers that may be placed on the Platform or other media; these are governed by a dedicated Cookie Policy accessible via the following link: [insert link].

1. What is personal data?

Personal data refers to any information that can identify or make identifiable a natural person, directly or indirectly. In France, personal data processing is governed by the General Data Protection Regulation (GDPR) No. 2016/679 and by the amended French Data Protection Act No. 78-17 (the “Applicable Regulation”).

2. Who is responsible for processing your personal data?

The data controller is the entity that determines the purposes (why) and the means (how) personal data is processed.
SUSTY, headquartered at 14 Rue Paul Chatrousse, 92200 Neuilly-sur-Seine, France, registered under number 935 302 596 with the Nanterre Trade and Companies Register, is the data controller of your personal data.

In the context of using the Platform, and when purchasing a product on the Platform, your personal data will be jointly processed by SUSTY and the Partner (vendor) of the purchased product. In this context, both SUSTY and the Partner are joint data controllers and are equally responsible for complying with applicable data protection regulations.

Upon written request sent via registered mail with acknowledgment of receipt to:
14 Rue Paul Chatrousse, 92200 Neuilly-sur-Seine, France,
any concerned individual may obtain the main terms of the joint responsibility agreement between SUSTY and the Partner who collected their personal data.

3. What personal data do we collect and where does it come from?

SUSTY collects the following personal data via the Platform:

• Data provided directly through your customer account (the “Account”);

• Data provided through collection forms available on the Platform;

• Data automatically collected or generated by the Platform, or obtained from third parties.

This includes:

(i) Identifying data: title, name, surname, postal address, phone number, email address, date of birth, company name and legal representative (if applicable), when creating your account or subscribing to our newsletter.
(ii) Social media profile data: if you contact us via Facebook or Instagram or log in using these accounts (e.g. name, profile picture, user ID).
(iii) Order-related data: invoice numbers, transaction details, delivery and billing addresses, product returns, discounts applied, etc.
(iv) Payment data: credit card number, expiry date, CVV (collected for transaction purposes).
(v) ID documents: may be requested when required by law or to verify your identity in case of data access requests.
(vi) Content shared via the Platform: messages, product reviews, uploaded photos, or any other personal contributions.

Required fields are marked with an asterisk or equivalent indicator. Failure to provide mandatory data may result in our inability to fulfill your request or provide our services.

4. How do we use your personal data?

We process your personal data for specific, explicit, and legitimate purposes. Each processing activity is based on a defined legal basis. See the table below: