Basic Information
This privacy policy is intended to inform users of this website about the nature, scope, and purpose of the collection and use of personal data by us, the website operator www.wholesale-tea-supplier.com.
We take your privacy very seriously and treat your personal data confidentially and in accordance with legal regulations. Since new technologies and the continuous development of this website may lead to changes to this privacy policy, we recommend that you review the privacy policy regularly.
Definitions of the terms used (e.g., “personal data” or “processing”) can be found in Art. 4 GDPR.
Responsible for Data Processing
The person responsible for the processing of personal data is Mr. Julien Huot, whose contact details can be found in the legal notice. Our data protection officer is Mr. Julien Huot.
Access Data
We collect data on accesses to the website based on our legitimate interest (see Art. 6 para. 1 lit. f. GDPR) and store these as “server log files” on the server of the website. These data are used by us to technically and content-wise optimize the website, minimize errors, and create content more targeted for our visitors by analyzing user behavior. The following data are logged:
- Visited website
- Time at the time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Used browser
- Used operating system
- Used IP address
The server log files are stored for a maximum of 14 days and then deleted. The data storage is carried out for security reasons, for example, to be able to clarify cases of abuse. If data must be retained for evidence, they are exempt from deletion until the incident is finally resolved.
Hosting
The hosting of our website content is provided by the provider OVH, 2 rue Kellermann, 59100 Roubaix, France.
The OVH data centers are mainly located in France, with additional locations in Canada, the USA, Australia, Germany, Poland, the United Kingdom, and Singapore. The protection of your data is subject to the General Data Protection Regulation (GDPR). Further information can be found at the following link: OVH Compliance Certification.
We have concluded a Data Processing Agreement (DPA) with OVH for the use of the service. This legally required contract ensures that the processing of personal data of our website visitors only takes place according to our instructions and in compliance with the GDPR.
Further information about the Data Processing Agreement (DPA) can be found here: OVH Data Processing Agreement.
Further information about OVH’s data protection regulations can be found here: OVH Privacy Policy.
Range Measurement & Cookies
This website uses cookies for pseudonymized range measurement, which are either transmitted from our server or the server of third parties to the user’s browser.
We use the consent tool “Complianz” to manage the cookies we use and the consents we ask for. Further information can be found in our separate cookie policy.
Collection and Processing of Personal Data
We collect, use, and disclose your personal data only if this is permitted by law or if you consent to the data collection. Personal data refers to all information that serves to determine your person and which can be traced back to you—such as your name, IP address, email address, or telephone number.
The processing of personal data is based on our legitimate interest in optimizing our online offering. You can visit this website without providing any personal information. However, to improve our online offering, we store your access data to this website (without personal reference). These access data include, for example, the file you requested or the name of your internet provider. Through the anonymization of the data, conclusions about your person are not possible.
We collect the data that you provide to us during an order or contact. Mandatory fields are marked as such. The personal data collected on our website are used for processing orders and managing the business relationship (deliveries, invoices, customer service).
The main recipients of your personal data collected on our website are ourselves for processing your orders and managing the customer relationship.
To fulfill the contract that binds us, we transmit data to our following payment or payment security service providers, delivery service providers, and business partners:
- PAYPLUG
- LA POSTE / COLISSIMO
- UPS
- BREVO
The transfer of personal data to these providers only occurs within the framework of the necessary contract processing.
Recording of Bank Data
To improve your shopping experience, we offer to store your bank data so that you do not have to re-enter them for each order. The legal basis for storing your bank data is your consent. Therefore, your bank data (card number, expiration date, cardholder name) will only be stored if you have previously given your consent. We will never store the visual cryptogram on the back of your credit card.
Managing Bank Data
You can inform us at any time that you no longer wish to store your bank data by either:
- Sending a message to contact@madeinthe.fr or
- Viewing and deleting all your registered cards in the SSL-secured “My Account” area.
Handling Contact Data
If you contact us as the website operator through the offered contact options, your information will be stored so that it can be accessed to process and respond to your inquiry. Without your consent, these data will not be disclosed to third parties.
Handling Comments and Posts
Website visitors cannot leave comments and posts that may violate applicable law and for which we, as the website operator, could be held liable. However, visitors have the option to send us their comments and suggestions via our contact form or email, which we may publicly post on the website.
This only happens:
- after a thorough review of the post
- if there is a general benefit for our visitors
- and if the author agrees.
The identity of the post author will be anonymized or significantly reduced with their consent, for example, by only providing initials or first name.
When contacting via the email addresses provided by us, such as contact@madeinthe.fr, the personal data transmitted with the email will be stored.
Google Analytics
This website uses the service “Google Analytics” by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) due to our legitimate interests for the optimization and analysis of our online offering in accordance with Art. 6 para. 1 lit. f. GDPR. The service (Google Analytics) uses “cookies”—text files that are stored on your end device. The information collected by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.
These are data such as:
- Browser type/version,
- Used operating system,
- Referrer URL (the previously visited page),
- Hostname of the accessing computer (IP address),
- Date & time of the server request,
- Screen resolution,
- Geographical data (location),
- Preferred language setting for displaying the website,
- Data on website usage (mouse movements, clicks).
Google LLC complies with European data protection law and is certified under the Privacy Shield Agreement: Privacy Shield Certification.
IP anonymization is activated on this website. The IP address of users is truncated within member states of the EU and the European Economic Area and in other contracting states of the agreement. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Due to this truncation, personal reference to your IP address is eliminated. The IP address transmitted by the browser will not be combined with other data stored by Google.
As part of the agreement on order data processing, which we, as the website operator, have concluded with Google Inc., the latter uses the information collected to evaluate website usage and website activity and provide services related to internet usage.
The data collected by Google on our behalf are used to evaluate the use of our online offering by individual users, e.g., to create reports on website activity to improve our online offering.
You can prevent the storage of cookies on your device by making the appropriate settings in your browser. It is not guaranteed that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
Additionally, you can prevent the collection of data generated by cookies and related to your use of the website (including your IP address) and the processing of these data by Google by downloading and installing the browser plugin available at the following link: Browser Add-On for Disabling Google Analytics.
Alternatively, by clicking on this link Disable Google Analytics, you prevent Google Analytics from collecting data about you within this website. By clicking the above link, you download an “opt-out cookie.” Your browser must, therefore, generally allow the storage of cookies. If you delete your cookies regularly, you will need to click the link every time you visit this website.
Here are further details regarding data usage by Google Inc.:
Use of Social Media Plugins
Currently, we do not use any social media plugins on our website.
Newsletter Subscription and Contact Form (Brevo)
Newsletter Subscription
We offer you a newsletter in which you are informed about current product offers and new articles on our website. You will only receive our newsletter with your explicit consent, which you provide to us when subscribing to the newsletter or by checking the box “Receive newsletter” on the order overview page. To subscribe to the newsletter, you must provide a valid email address. The newsletter is sent by the mailing service Brevo, a shipping platform of the provider Sendinblue, 106 Boulevard Haussmann, 75008 Paris, France. Brevo is TÜV Rheinland certified, and the server locations are in France and Germany.
With the Brevo service, we can organize our newsletter dispatch and analyze our newsletter campaigns. For example, we receive information on whether a newsletter has been opened and which links contained therein were clicked.
As soon as you register for our newsletter with your email address, it is stored at Brevo for the purpose of sending an email to the address owner to confirm the newsletter subscription (“Double Opt-In”). After confirmation, the email address is stored permanently at Brevo until you unsubscribe from our newsletter or we delete your email address. Brevo stores the subscription date as well as the IP address of the subscription. No further use of your IP address is made.
By subscribing to the newsletter, you agree to receive the newsletter and the described procedures.
Revocation and Cancellation
You can revoke your consent to receive the newsletter at any time and thus cancel the newsletter subscription.
- Click the unsubscribe link in every email.
- Send an email to the following address and state the reason: contact@madeinthe.fr
After your cancellation, your personal data will be deleted. Your consent to the newsletter dispatch also expires. At the end of each newsletter, you will find the link to unsubscribe.
Contact Form
You have the option to send us messages via the contact form. The forwarding of the message is carried out (as well as the previously described newsletter dispatch) by the mailing service Brevo, a shipping platform of the provider Sendinblue, 106 Boulevard Haussmann, 75008 Paris, France. Brevo is TÜV Rheinland certified, and the server locations are in France and Germany.
To provide its services, Brevo has access to information from the email distribution list provided by the website operator, such as email address, name (first name and optionally last name), and date of registration. It also has access to the subject and content of the emails sent via the distribution lists. This information contains personal data of third parties.
According to its own statements, Brevo takes all measures required pursuant to Art. 32 GDPR to ensure the security of personal data, in particular to prevent them from being falsified or damaged or unauthorized third parties from gaining access to them. These include, in particular, the following measures:
- Multi-stage firewall,
- Proven antivirus protection and intrusion detection,
- Encrypted data transmission using SSL/https/VPN technology,
- Tier 3 and PCI DSS certified data centers.
The website operator has concluded a contract for order data processing with Brevo.
For more information about Brevo’s privacy policy, please visit: Brevo.com Privacy Policy.
Contact by Email
Alternatively, you can contact us via the email addresses we provide, such as contact@madeinthe.fr. In this case, the user’s personal data transmitted with the email will be stored.
Integration of Third-Party Services and Content
Based on our legitimate interests (analysis, optimization, and economic operation of our online offering in accordance with Art. 6 (1) lit. f. GDPR), we use content or service offers from third parties on our website to integrate their content and services, such as videos or fonts. Third-party providers of these contents necessarily require the user’s IP address, without which they could not send the contents to their browser. The IP address is thus required for displaying these contents. We only attempt to work with providers who use IP addresses solely for delivering the contents. Pixel tags from these third-party providers may also be used. These are invisible graphics for tracking user data for statistical or marketing purposes, such as the visit history on individual pages of this website. This information may also be stored pseudonymously in cookies on the user’s device. It may include technical data about the browser, operating system, referring websites, or visit time.
User Rights
As a user, you have the right to receive, upon request and free of charge, information about what personal data has been stored about you. You also have the right to correct incorrect data and to restrict or delete your personal data. If applicable, you can also exercise your right to data portability. If you believe that your data has been processed unlawfully, you can file a complaint with the competent supervisory authority.
Deletion of Data
Unless your request conflicts with a legal obligation to store data (e.g., data retention), you have the right to have your data deleted. Data stored by us will be deleted if it is no longer necessary for its intended purpose and there are no statutory retention periods. If deletion cannot be carried out because the data are required for permissible legal purposes, the data processing will be restricted. In this case, the data will be blocked and not processed for other purposes.
Right to Object
Users of this website may exercise their right to object and oppose the processing of their personal data at any time in accordance with Article 21 of the GDPR.
If you wish to correct, block, delete, or receive information about the personal data stored about you, or if you have any questions regarding the collection, processing, or use of your personal data, or if you wish to revoke any consent granted, please contact the following email address: contact@madeinthe.fr
Liability for Content
We have created the content of our website to the best of our knowledge and belief. Despite the greatest care, we cannot assume any liability for the accuracy, completeness, and timeliness of the content. As a service provider, we are responsible for our own content on these pages under the general laws according to the EU Digital Services Act. However, as a service provider, we are not obligated to monitor transmitted or stored foreign information or to investigate circumstances indicating illegal activity. Obligations to remove or block the use of information under general laws remain unaffected by this. However, liability in this regard is only possible from the time of knowledge of a specific legal violation. Upon becoming aware of such legal violations, we will remove the content immediately.
Copyright
The brand “MADE in THÉ” is a registered trademark owned by the company SAS Made in Thé. Any unauthorized reproduction of this brand, logos, image and text content, and other distinctive signs constitutes an infringement that will be prosecuted. The infringer is subject to civil and criminal sanctions, particularly the sanctions of the Intellectual Property Law under EU copyright law.
This privacy policy was created with the help of a template from www.datenschutz.org.