INFORMATION
Privacy Policy
Version dated October 21, 2025
I. PRIVACY POLICY AND PERSONAL INFORMATION
This Privacy Policy applies to the website www.diega.fr.
The purpose of this privacy policy is to inform users of the www.diega.fr website :
- how their personal data is collected and processed in accordance with applicable law, and in particular the European Regulation, No. 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which entered into force on May 25, 2018. Any data that could identify a user must be considered personal data. This includes, in particular, the user’s first name, last name, age, mailing address, email address, location, and IP address:
- What are users' rights regarding this data;
- who is responsible for processing the personal data that is collected and processed;
- to whom this data is disclosed;
The data controller reserves the right to modify this privacy policy to ensure its compliance with applicable law. In the event of substantial changes that may affect users’ rights or the conditions under which their data is collected and/or processed, SARL C.P. undertakes to inform users of the changes by any appropriate means and to obtain their consent, where necessary.
We encourage you to review this Privacy Policy regularly to stay informed of any updates. The date of the last update will be indicated at the top of this document.
1. Data Collected and Processed, and Methods of Collection
First-time visit to the site www.diega.fr
When a user visits the site for the first time www.www.diega.fr, the following personal data is collected:
- Delivery country: This information is collected to personalize the user experience, specifically by displaying delivery options and fees tailored to the user's geographic location.
- Language: This information is collected to display the website in the language that best suits your preferences or location.
The processing of this data is based on the legitimate interest of SARL C.P. to provide a seamless and personalized user experience from the very first visit to the site.
This data is stored for the duration of the user's browsing session—specifically, the delivery country and language—to ensure immediate personalization.
Create an Account
When a user creates a customer account on the website www.diega.fr, the following personal data is collected:
- First and last name: This information is collected to identify the customer, personalize interactions, and facilitate the management of orders or support requests.
- Email address: This information is required to communicate with the customer, including to send account creation and order confirmations, service-related notifications, enable account recovery in case of a forgotten password, or to share news, information about special offers, promotions, upcoming events, or new products.
The processing of this data is based on:
· To fulfill a contract, since this information is necessary to create and manage the user’s customer account;
· The user's consent to receive marketing or promotional communications.
The collected data is retained for as long as the customer account remains active. SARL C.P. will regularly review the personal data it holds and delete any data that is no longer necessary. No personal data will be retained for more than ten years. After this period, such data may be anonymized and retained by SARL C.P. for legal or statistical purposes.
Users may request the deletion of their customer account and associated data at any time by contacting us at the following address: dpo@diega.fr
Ordering Products on the Website www.diega.fr
When a Customer makes a purchase on the website www.diega.fr, the following personal data is collected:
- First and last name: This information is required to identify the customer and personalize communications related to the purchase.
- Mailing address: This information is essential for processing and delivering orders to the specified address.
- Phone number: This information allows us to contact the customer in case of a problem with the order or delivery.
- Email address: This information is used to send order confirmations and invoices, provide information regarding delivery tracking, and offer customer support when needed. It is also used to share news, information about special offers, promotions, up , or new products via the newsletter, provided the customer has agreed to subscribe to the newsletter.
The treatment is based on:
- The performance of a contract, provided that such data is necessary to process and fulfill the order.
- A legal requirement to comply with accounting and tax regulations.
SARL C.P. will store all collected data in its website's computer systems under reasonable security measures.
SARL C.P. will regularly review the personal data it holds and delete any data that is no longer necessary. No personal data will be retained for more than ten years. After this period, such data may be anonymized and retained by SARL C.P. for legal or statistical purposes.
Saving banking information for a future purchase
Our website allows our customers to save their banking information (such as credit card details) to make the payment process easier and faster for future purchases.
Banking information is collected and stored to streamline the payment process for future purchases on our website, so you won't have to re-enter this information with every order.
The processing of this data is based on the customer's explicit consent; the customer may choose to save their banking information during checkout.
When you choose to save your payment information on our website, your information is securely stored by our third-party payment providers:
SHOPIFY PAYMENTS, PAYPAL, and ALMA
The secure payment platform’s server is protected by TLS encryption to ensure the most effective possible protection of all data related to payment methods, and at no time will the user’s banking information pass through the computer system of SARL C.P., which is released from any liability in this regard.
Your payment information is retained only as long as necessary to process your payments and is deleted upon request or when you remove your payment methods from your account.
If you have any questions or would like to delete your banking information, please contact us at the following email address: dpo@diega.fr.
Newsletter Sign-up
Subject to the user’s express consent, obtained when the user subscribes to the SARL C.P. newsletter, the following personal data is collected:
- Email address: This information is required to send newsletters containing news, information about our products or services, and promotional offers, as well as to personalize communications and ensure they align with the user’s interests.
The processing is based on the user's explicit consent.
Data is retained until the user withdraws consent (by unsubscribing from the newsletter). If there is no activity (no interaction with our communications) for 3 years, the data will be deleted, unless there is a legal obligation or a legitimate interest in retaining it.
Users may withdraw their consent at any time by clicking the unsubscribe link included in each email or by contacting us at the following address: dpo@diega.fr.
Using hCaptcha
We use the hCaptcha service to protect our website and ensure the security of our systems, particularly when users sign up for our newsletter. This service helps distinguish human users from automated programs (bots) in order to prevent abuse or unauthorized access to our services.
When hCaptcha is enabled, it may collect certain information about your interaction with our site, such as:
· Your IP address;
· Information about your device (for example, browser type, operating system);
· Your mouse movements and behavior on the site (to detect automated activity).
This data is processed by hCaptcha in accordance with its own privacy policy. We encourage you to review this policy for detailed information on how your data is collected, used, and protected:https://www.hcaptcha.com/privacy.
This processing is based on our legitimate interest in protecting the security of our website, as well as our obligation to prevent any misuse of our services.
Data collected via hCaptcha is transmitted directly to and processed by the entity that operates hCaptcha (Intuition Machines, Inc.). We do not share this data with any other third parties.
The data collected by hCaptcha is not stored or processed by our company. It is used only for as long as necessary to verify your interaction with our website.
2. Disclosure of Data to a Third Party
SARL C.P. may share personal data with its subcontractors, service providers, and suppliers. For example, when a Customer makes a purchase on the website, their contact information will be shared with the delivery service provider.
The data collected and processed by the website may be hosted and processed outside the EU or the EEA.
In the event that Personal Data is transferred to a country outside the European Union, we are committed to taking the necessary technical and organizational measures to ensure an adequate level of security for your Data, as if it had remained within the European Union.
We require these data recipients to implement the necessary measures to ensure the same level of protection as that required by European data protection regulations, for example by using the European Commission’s standard contractual clauses, binding corporate rules (BCR)
3. Data Controller and Data Protection Officer
The controller of personal data is: SARL C.P
. The controller may be contacted by email at eshop@diega.fr or by mail at the following address:
SARL C.P, 6 rue Béranger, 75003, Paris.
The Data Controller is responsible for determining the purposes and means of processing personal data.
The Data Protection Officer (DPO) is: Mr. Simon Petit. He can be contacted by email at dpo@diega.fr or by mail at:
SARL C.P, 6 rue Béranger, 75003, Paris.
The DPO is responsible for ensuring the protection of the personal data collected, for ensuring that users' rights are respected, and for providing users with all necessary assistance regarding their data.
Obligations of the Data Controller
The data controller undertakes to protect the personal data collected and to use such data only for the purposes for which it was collected.
The website has a TLS certificate to ensure that the information and data transmitted through the site are secure. The purpose of this certificate is to secure the data exchanged between the user and the website.
The data controller agrees to notify the user in the event of a correction or deletion of data, unless doing so would entail disproportionate administrative burdens, costs, or procedures for the data controller.
In the event that the integrity, confidentiality, or security of the user’s personal data is compromised, the data controller undertakes to notify the user by any means.
4. User Rights
In accordance with the regulations governing the processing of personal data, the user has the rights listed below:
Right of Access, Right to Correction, and Right to Erasure
Users may view, update, modify, or request the deletion of their personal data.
If the user has one, he or she has the right to request the deletion of his or her personal account.
Right to Data Portability
The user has the right to request that their data, held by the website, be transferred to another website.
Right to Restriction and Objection to Data Processing
The user has the right to request the restriction of, or to object to, the processing of their data by the website; the website may not refuse such a request unless it can demonstrate the existence of legitimate and compelling reasons that override the user’s interests, rights, and freedoms.
For any information regarding their rights, or to exercise those rights, users should write to the data controller at eshop@.diega.fr or by mail to the following address: SARL C.P, 6 rue Béranger, 75003, Paris.
In order for the data controller to comply with the user’s request, the user must provide the following information: first and last name, email address, and, if applicable, account number, personal account number, or subscriber number.
The Data Controller is required to respond to the user within 30 days.
Rights Related to Automated Individual Decision-Making
The user has the right not to be subject to a decision based solely on automated processing, including profiling, if that decision produces legal effects concerning the user or similarly significantly affects the user.
The user has the following rights regarding this type of processing:
- The right to receive an explanation of the logic used in automated decisions, as well as their significance and anticipated consequences;
- The right to request human intervention to review the automated decision;
- The right to challenge any decision made solely by automated means.
To exercise these rights, or for any questions regarding our automated decision-making processes, users may contact the Data Controller at eshop@diega.fr or by mail at the following address: SARL C.P, 6 rue Béranger, 75003, Paris.
We ensure that any automated decision involving your personal data complies with regulations and is limited to legitimate and necessary purposes.
Right to file a complaint with the competent authority
If the Data Controller does not respond to the user’s request, or if the user believes that his or her rights have been violated, the user has the right to file a complaint with the CNIL or any competent court.
II. COOKIE POLICY
When using the website, SARL C.P. may, subject to the user’s choice, set one or more cookies for their legally permitted duration. The cookies set serve several purposes:
• Compile statistics on attendance;
• Improve the site's appeal and usability;
• To enable or facilitate navigation on the site and thereby tailor offers and messages to individual users (language used, screen resolution, operating system, etc.);
• Store information related to a form, or to products or services that the user has subscribed to;
The use of cookies by third parties is subject to those third parties’ privacy policies. SARL C.P. may include cookies on the website to collect browsing data and to measure and optimize the effectiveness of campaigns. This data is never used to identify individuals by name.
If the user has consented in their web browser to the storage of cookies on their device, cookies embedded in the pages and content they have viewed may be temporarily stored in a designated area of their device. They will be readable there only by the party that issued them.
If the user refuses to allow cookies to be stored, or if the user deletes cookies that have been stored, the user will no longer be able to use certain features necessary for navigating certain pages of the website. In such cases, SARL C.P. assumes no liability for any consequences resulting from the impaired functioning of its services.
This information is retained for a maximum of 13 months.
Users can configure their browser software to accept or reject cookies as they choose. They can also configure their browser software so that they are prompted to accept or reject cookies on a case-by-case basis before a cookie is likely to be stored.
Cookie settings vary by browser. They are described in the browser's Help menu. This menu will allow users to learn how to adjust their cookie preferences.
To prevent cookies from being installed, follow the instructions for the browser you are using:
Internet Explorer: From the "Tools > Internet Options" menu, click the "Privacy" tab, select the desired setting, and click "Advanced." Select "Override automatic cookie handling." Check "Enable" or "Block." We recommend enabling the “Always accept session cookies” option to ensure the best possible browsing experience on our Website.
Firefox: From the "Tools > Options" menu, click the "Privacy" tab. Enable or disable “Accept cookies from websites” or “Tell websites not to track me,” depending on your browser version. You can also delete installed cookies by clicking the “Delete cookies individually” option.
Chrome: From the "Tools > Settings" menu, click the "Privacy > Content settings" tab. After selecting the “Show advanced settings” option, click on your preferred cookie setting. If you do not want to allow cookies, you can select the “Block third-party site data and cookies” option.
Opera: In the "Settings > Preferences" menu, click the "Advanced" tab. In the "Cookies" menu, select either "Accept cookies" or "Never accept cookies." If you’d like more control over which cookies are installed on your computer, we recommend selecting the “Ask me before accepting cookies” option.
Safari: From the "Tools > Preferences" menu, click the "Security" tab. From the “Accept Cookies” menu, select “Always” or “Never.” If you have an iPhone, you’ll need to go to “Settings > Safari” and select whether or not you want to accept cookies.
If you use a different browser, you can find more information about cookie settings in the browser’s help or support section.
SARL C.P may modify the Cookie Policy in accordance with applicable laws and regulations or to bring the policy into compliance with guidelines issued by the CNIL. SARL C.P advises users to review the Cookie Policy regularly to stay informed of any changes.