What personal data do we collect?
If you register for an account with us, we can offer you additional services. When you register and purchase products on the Site, we collect and use the following information:
When you purchase products on the Site, certain portions of your credit card details (cardholder’s name, expiry date, first 6 and last 4 digits of your credit card number) are collected and stored; this data is kept for a period of 30 days following receipt of the product, then archived for a period of thirteen (13) months (15 months if the card is a delayed-debit card) for the management of claims;
The information (name and email address) you provide when you register and create an account for the Site or the RobotShop Community; when you order products on the Site, we also collect and use your invoicing and shipping addresses.
- Your contributions on the RobotShop Community forums; this information is retained and may be available online for a maximum of ten (10) years, with some contributions of a particular interest exceptionally available for a longer period of time.
Your email address, when you report a problem with the Site;
Records of all product orders and/or services that you place through the Site. In accordance with our financial information retention obligations, we keep your ordering information for seven (7) years ;
Records of all correspondences when you contact us;
Records of all RobotShop contests or promotions in which you participate;
Details of your visits to the Site including, but not limited to, data transmission, location and communication data and the resources you access.
Unless otherwise noted above, we retain your data for a period of five (5) years after their release or last contact with you.
What do we do with the personal data we collect?
We use your personal information to provide you with a better service, especially for the following reasons:
To offer the Site’s functionality and complete the transactions performed on the Site;
To process and collect payments you make when you purchase products on the Site;
For internal record keeping;
To improve the Site and our services;
To enhance and personalize your experience when you visit the Site;
To advertise certain products for which we believe you would be interested in when you visit the Site or other external sites;
To communicate with you via email, phone or mail with respect to your orders, purchases or any other transactional matters or with respect to your account (if you have one);
To communicate with you regarding any specific requests from you;
To perform statistical analyzes;
To communicate with you via e-mail, telephone or mail for the purpose of direct marketing, marketing studies, feedback and opportunities about products, services, promotions and events or requests at any time.
Data processing in connection with points 1, 2, 3, 7 and 8 are based on the legal basis necessary for the execution of contracts concluded with you when you purchase products on our Site. Data processing in connection with points 4 and 9 are based on our legitimate interest in providing you with a high quality customer experience and transactional site. Data processing in connection with points 5, 6, and 10 are based on your consent, which you may withdraw at any time by simply notifying our Data Protection Officer.
Who do we share this information with?
Your personal information will be used for the purposes indicated above by the competent service of RobotShop and by those who assist them in their duties. They will also be made available to our service providers collaborating with us and performing certain services on our behalf, including the provision of computer support, computer maintenance, customer services, hosting services, marketing services and online payment services. These service providers may have access to this information for the purpose of performing their duties. They are not allowed to share or use this information for any other purpose. RobotShop can also share personal information with other companies within the RobotShop group, especially for the purposes of good management, intragroup analysis or decision-making.
RobotShop may also disclose your personal data:
In response to a court order, a request for cooperation from a police authority or a government agency, to establish or exercise legal rights, to defend legal claims, or in case of requisition or authorization in accordance with the laws and/or regulations in force;
If RobotShop believes that the disclosure is appropriate in the context of an investigation, preventive measures or actions concerning illegal activities, suspicions of fraud or other wrongdoing; to protect and defend the rights, property, safety of RobotShop, its consumers, its personnel, its suppliers or others, to comply with applicable laws or cooperate with police authorities, to ensure the application of this Convention or other conventions; and
In the context of a potential or actual sale of RobotShop or of its activities or assets.
Except as noted above, we will not transfer, disclose, sell, distribute, rent or lease your personal information to third parties without your prior authorization or without a legal or judicial obligation or authorization.
Direct Prospecting and your preferences
RobotShop may wish to provide you with information on new products, promotions, special offers or other transactions that may be of interest to you and invite you to participate in market research. This communication can be done by mail, telephone, email or SMS.
- Advertise our products on external sites. This advertising results from the placement of cookies by third parties, including Google and Adserve, on our site. These cookies allow them to identify your visit to our Site and your preferences during this visit, as well as your subsequent visits to third party sites on their Adserving network. This process allows us to provide you with personalized advertising on these third party sites from information collected about your interests during your visit to our Site.
- Help the Site to function properly and ensure that the "add to cart", navigation and country-related settings are maintained.
- Monitor the performance of the site and ensure that navigation on our site is fast.
- Allow you to share your content on social networks, express your interest in content and connect with your social media networks.
- Evaluate the conversion of third parties by allowing us to collect anonymous data on the effectiveness of our marketing.
Where will my personal data be stored?
We use data center facilities located in the United States and your personal data will be stored and processed in that country. We use data center facilities operated by leading companies in the field with whom we have agreements that impose a high level of security and protection. In practice, this means that, among other things, our data center providers will only process your personal information in accordance with our instructions, our data center providers have implemented and will maintain robust technical and organizational measures to protect your personal information and we would be notified without undue delay in the event of a security incident involving our client’s personal information.
If we transfer your unencrypted personal data to another company or service provider, we will ensure that we have security and privacy measures in place with such third parties by guaranteeing the manner in which they hold and retain personal data on our behalf.
Will my personal data be transferred abroad?
As a company, we operate out of Canada and are subject to the Canadian Personal Information Protection and Electronic Documents Act of 13 April 2000, which level of protection has been acknowledged as equivalent to that of the European Union by Commission Decision dated 20 December 2001. We use data center facilities located in the United States and your personal data will be stored and processed in that country. We use data center facilities operated by leading companies in the field who have adhered to the Privacy Shield and/or with whom we have agreements that incorporate the EU Model Clauses, which were approved by the European Union data protection authorities. This means that the data we store in those facilities are given the same high level of protection it would receive in the European Economic Area. In practice, this means that, among other things, our data center providers will only process your personal information in accordance with our instructions, our data center providers have implemented and will maintain robust technical and organizational measures to protect your personal information and we would be notified without undue delay in the event of a security incident involving our client’s personal information.
Security and Storage
Please note that the internet is not a secure means of communication. Internet-based communications such as email are not secure unless encrypted.
We have implemented appropriate hardware, electronic and managerial procedures to safeguard and protect the information we collect online. We use widespread encryption technology when we retrieve or transfer customer banking information from our servers. All your banking information is transferred from your browser to our secure payment gateway via Secure Sockets Layer (SSL) encryption protocol. Our payment gateway providers use the Secure Sockets Layer (SSL) secure encryption system. The transfer of the other data collected is processed via a secure connection.
What are your rights regarding your data?
You have the right to access and to the portability of your personal data at any time, to rectify and erase it, to request the limitation or oppose the processing of data, as well as the right to set guidelines on the fate of your data after your death.
Any request to exercise the aforementioned rights must be addressed to our Data Protection Officer, at the address indicated above and accompanied by a signed copy of your identity document, so that we can ensure that you are the relevant person in question.
You also have the right to lodge any complaints concerning the processing of your personal information with the competent supervisory authority.