/
Management of Personal Data
For personal data collected in connection with the creation of a user’s personal account and their navigation on the site, the data controller is represented by the company. As the data controller for the personal data it collects, ARKA Concept is committed to complying with the applicable legal provisions. It is the company’s responsibility to define the purposes of data processing, to provide prospects and clients with comprehensive information about the processing of their personal data, and to maintain a processing register that accurately reflects the reality of data management.
Whenever ARKA Concept processes personal data, the company takes all reasonable measures to ensure the accuracy and relevance of the personal data in relation to the purposes for which it is processed.
The Client is informed of the regulations regarding marketing communication, the Law of June 21, 2014, for confidence in the Digital Economy, the Data Protection Act of August 6, 2004, as well as the General Data Protection Regulation (GDPR: No. 2016-679).
Non-communication of Personal Data
ARKA Concept is prohibited from processing, hosting, or transferring the collected information about its clients to a country outside the European Union or one deemed “inadequate” by the European Commission without prior notification to the client. However, ARKA Concept remains free to choose its technical and commercial subcontractors, provided they offer sufficient guarantees in line with the requirements of the General Data Protection Regulation (GDPR: No. 2016-679).
ARKA Concept is committed to taking all necessary precautions to preserve the security of the information, ensuring that it is not communicated to unauthorized individuals. However, if an incident affecting the integrity or confidentiality of the client’s information comes to ARKA Concept’s attention, it will inform the client as soon as possible and communicate the corrective actions taken. Additionally, ARKA Concept does not collect any “sensitive data.”
The User’s Personal Data may be processed by ARKA Concept’s subsidiaries and subcontractors (service providers), solely for the purposes of fulfilling the objectives of this policy.
Within the scope of their respective duties and for the purposes mentioned above, the primary individuals who may have access to ARKA Concept’s users’ data are mainly the agents of our customer service.
Security
To ensure the security and confidentiality of personal data and health-related personal data, ARKA Concept uses networks protected by standard devices such as firewalls, pseudonymization, encryption, and passwords.
When processing personal data, ARKA Concept takes all reasonable measures to protect it against loss, misuse, unauthorized access, disclosure, alteration, or destruction.
Applicable Law and Jurisdiction
Any dispute related to the use of the website www.arkaconcept.com is governed by French law. Except in cases where the law prohibits it, exclusive jurisdiction is granted to the competent courts in Amiens.
When processing personal data, ARKA Concept takes all reasonable measures to protect it against loss, misuse, unauthorized access, disclosure, alteration, or destruction.
Purpose of Collected Data
ARKA Concept may process all or part of the data for the following purposes:
To allow navigation on the site and manage and track the services and orders placed by the user: connection and usage data, billing information, order history, etc.
To prevent and combat cyber fraud (spamming, hacking, etc.): hardware used for browsing, IP address, password.
To improve navigation on the site: connection and usage data.
To conduct optional satisfaction surveys on https://arkaconcept.com.
To run communication campaigns (SMS, email): phone numbers, email addresses.
ARKA Concept does not sell your personal data. It is only used when necessary or for statistical and analytical purposes.
Right of Access, Rectification, and Opposition
In accordance with current European regulations, ARKA Concept users have the following rights:
The right to update, complete, or delete personal data when it is inaccurate, incomplete, ambiguous, outdated, or when its collection, use, communication, or storage is prohibited (Article 17 of the GDPR).
The right to withdraw consent at any time (Article 13-2c of the GDPR).
The right to limit the processing of users’ data (Article 18 of the GDPR).
The right to object to the processing of users’ data (Article 21 of the GDPR).
The right to data portability for data provided by the users, when these data are subject to automated processing based on their consent or a contract (Article 20 of the GDPR).
The right to determine the fate of users’ data after death and to choose to whom www.arkaconcept.com should communicate (or not) their data, to a third party they have previously designated.
If a user wishes to know how ARKA Concept uses their personal data, requests corrections, or objects to its processing, the user can contact ARKA Concept in writing at the following address: contact@arkaconcept.com. In this case, the user must specify which personal data they would like ARKA Concept to correct, update, or delete, and provide a copy of an identification document (ID card or passport) to verify their identity.
Requests for deletion of personal data will be subject to the obligations imposed on ARKA Concept by law, particularly regarding the retention or archiving of documents. Finally, ARKA Concept users can file a complaint with the relevant supervisory authorities, including the CNIL (www.cnil.fr/fr/plaintes).
Incident Notification
Despite all efforts, no method of transmission over the Internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security. If we become aware of a security breach, we will notify the affected users so they can take appropriate measures. Our incident notification procedures are in line with our legal obligations, both at the national and European levels. We are committed to fully informing our clients of any security issues regarding their account and providing them with all necessary information to help them comply with their own regulatory reporting obligations.
No personal information of the user of the ARKA Concept website is published without their knowledge, exchanged, transferred, assigned, or sold to third parties through any medium. Only the possibility of a purchase of ARKA Concept and its rights would allow the transmission of such information to the potential buyer, who would also be bound by the same obligation to preserve and modify data in relation to the users of the website www.arkaconcept.com.