Privacy Policy

Respect for privacy and protection of personal data is a matter of trust, a value particularly important to LAYTAN company which operates the registered trademark NEHU, by adhering to the respect of fundamental rights and freedoms of each individual.

We recommend that you carefully read this Privacy Policy, as it contains important information about your personal data.

Article 1 - Definition

The definitions help distinguish who the stakeholders are throughout the privacy policy page.

  • LAYTAN company, a simplified joint-stock company, with a share capital of 1,000.00 EUROS, registered with the Paris Trade and Companies Register under number 939 343 695, with its registered office located at 4, rue Guy de Maupassant – 75116 PARIS.
  • The terms "NEHU", "our" and "our" refer to LAYTAN company as the controller of your personal data, unless otherwise indicated in this Privacy Policy.
  • The Publisher, LAYTAN company, domiciled at 4, rue Guy de Maupassant – 75116 PARIS.
  • The User, persons using the Site and all services made available by LAYTAN.
  • Personal data is defined as any information relating to an identifiable natural person, directly or indirectly. For example: a name, a photo, a fingerprint, a postal address, an email address, a phone number, a social security number, an internal registration number, an IP address, a computer login identifier, a voice recording, etc.

Article 2 - Purpose of Privacy Policies

This page is dedicated to all Users, and applies Law No. 78-17 of January 6, 1978 and EU 2016/679 of April 27, 2016 on data protection to inform them how personal data processed via the site is handled and protected: https://www.nehuparis.com

Article 3 - Nature of Data collected

In the context of using the sites, the Publisher may collect the following categories of data concerning its Users:

  • Contact information (name, first name, date of birth, nationality, email address, postal address, telephone number and any other personal data) that you provide by filling out forms on the Website, particularly if you subscribe to our newsletter and if you register and create an account on the Website or following subscription to the Company's newsletter;
  • Information about the operations you perform;
  • Personal data that may appear in communications you send us, for example, to report a problem or to submit questions, concerns, or comments regarding the Website or its content;
  • Other personal data that you voluntarily share with our store staff or online customer service;
  • Information from surveys that we may, from time to time, conduct on the Website for research purposes, if you choose to respond or participate;
  • Credit and debit card information that is considered sensitive personal data;
  • Information about how you use and navigate our Website, such as your IP address and other device identifiers, your operating system and browser type, as well as information about the Website pages you visit, collected through cookies;
  • We may also collect information about how your device has interacted with us, including the pages you have viewed and the links you have clicked, how you navigate to and from our websites and NEHU content, your preferences, products and/or services you have viewed or searched for, and system and download errors and response times;
  • Personal information collected from third parties, such as data you agree to share with us on publicly accessible social networks (e.g., Facebook, Instagram, etc.) and/or that we may collect from other publicly accessible databases.
  • Information you may provide by filling out forms or contacting us as well as your comments or other communications you send us that may include health data relating to possible adverse effects of our cosmetic products.

These Users' Personal Data are collected based on the following legal grounds:

  • The free, specific, and informed consent of the User, particularly when creating an account, subscribing to the newsletter, or exclusive offers proposed by the Company's partners.
  • Compliance with legal obligations imposed on the Company.
  • The execution of a contract concluded between the User and the Company, for example in the context of applying general terms of use or sale.
  • The legitimate interest of the Company, particularly to ensure transaction security.

This data is necessary:

  • To fulfill orders you have placed with us and to provide you with after-sales service;
  • To facilitate User access to the site and allow access to certain site services or any other digital platforms in general;
  • To allow NEHU to update their site to improve its navigation and content;
  • To respond to the User's request for contact or information request for which you have previously consented;
  • To edit personal documents for the User;
  • To meet all regulatory requirements.

Article 4 - Communication of Personal Data to Third Parties

Communication to authorities based on legal obligations, your personal data may be disclosed pursuant to a law, regulation, or by virtue of a decision by a regulatory or judicial authority.

Generally, we commit to comply with all legal rules that could prevent, limit, or regulate the dissemination of information or data and particularly to comply with Law No. 78-17 of January 6, 1978 relating to information technology, files, and freedoms.

Communication to specifically authorized NEHU staff members, in strict compliance with their missions;

Communication to specifically authorized technical service provider staff members, in strict compliance with their missions solely for technical management purposes;

They will not under any circumstances be communicated to unauthorized third parties.

Prior information for communication of personal data to third parties in case of merger/acquisition.

Prior information and opt-out possibility before and after merger/acquisition.

In the event we take part in a merger, acquisition, or any other form of asset transfer, we commit to ensuring the confidentiality of your personal data and to informing you before they are transferred or subjected to new confidentiality rules.

Article 5 - Purpose of Personal Data reuse

Perform operations related to customer management concerning:

  • Management of technical prospecting operations (which includes notably technical operations such as standardization, enrichment, and deduplication);
  • Selection of persons to carry out loyalty, prospecting, survey, product testing, and promotion actions. Unless consent from concerned persons is obtained under the conditions provided in Article 6, these operations must not lead to the establishment of profiles likely to reveal sensitive data (racial or ethnic origins, philosophical, political, union, religious opinions, sexual life, or health of persons);
  • Carrying out solicitation operations;
  • Managing people's reviews of products, services, or content;

Pursuant to Article 21 of the General Data Protection Regulation (GDPR), the User has the right to object, at any time, to the use of their Personal Data when it is processed for commercial prospecting purposes.

Article 6 - Collection of Identity Data

Consulting the Site does not require prior registration or identification. It can be done without communicating any nominative data concerning you (name, first name, address, etc.).

We do not record any nominative data for simple Site consultation. However, the NEHU site may deny the User certain parts of its site or service when the latter refuses to transmit information.

Article 7 - Collection of Identification Data

The use of the User's identifier may be required to inform them about our services and commercial offers.

No information directly concerning the User is transmitted for the purpose of unsolicited contact or commercial offers from a third party who would not be designated as a partner.

Article 8 - Geolocation

Geolocation is used for service provision purposes.

We collect and process your real-time geolocation data to provide our services, particularly to facilitate connection with our centers and services closest to your position.

In accordance with your right to object provided by Law No. 78-17 of January 6, 1978 relating to information technology, files, and freedoms, you have the possibility, at any time, to deactivate geolocation functions.

Geolocation with partner availability for referencing and aggregation (with opt-in)

We may collect and process your geolocation data with our partners. We commit to anonymizing the data used.

In accordance with your right to object provided by Law No. 78-17 of January 6, 1978 relating to information technology, files, and freedoms, you have the possibility, at any time, to deactivate geolocation functions.

Article 9 - Retention of Technical Data

Technical data is retained for the period strictly necessary to achieve the purposes mentioned above.

The duration of this retention may vary, it is determined according to the purpose of data use, particularly to comply with legal and regulatory obligations and for the duration of any period necessary for the establishment, exercise, or defense of legal rights.

Article 10 - Personal Data retention period and anonymization

In accordance with Article 6-5° of Law No. 78-17 of January 6, 1978 relating to information technology, files, and freedoms, personal data processed is not kept beyond the time necessary for the execution of obligations defined when concluding the contract or the predefined duration of the contractual relationship.

Retention of anonymized data beyond the contractual relationship after account deletion.

Information relating to file management, particularly order tracking and billing, is retained for a period of five (5) years after the end of the contractual relationship with the Company, then deleted or archived.

We retain personal data for the period strictly necessary to achieve the described purposes.

Beyond this period, they will be anonymized and retained for exclusively statistical purposes and will not give rise to any exploitation of any kind.

Furthermore, this Personal Data may be stored in a secure archive database with restricted access for a maximum period of ten (10) additional years. This extended retention aims to allow the Company to meet its legal and regulatory obligations and/or ensure the defense of its interests in case of litigation, before their final deletion.

Article 11 - Account deletion

The User has the possibility to delete their Account at any time, by simple request to LAYTAN company by email at team@nehuparis.com

In case of violation of one or several provisions put in place or incorporated herein by reference, LAYTAN company reserves the right to terminate or restrict without any prior warning and at its sole discretion, your use and access to services, your account, and all Sites.

Article 12 - Indications in case of security breach detected by the publisher

We commit to implementing all appropriate technical and organizational measures to ensure a level of security adapted to the risks of accidental, unauthorized, or illegal access, disclosure, alteration, loss, or destruction of your personal data.

In the event we become aware of illegal access to your personal data stored on our servers or those of our service providers, or unauthorized access resulting in the realization of the risks identified above, we commit to:

  • Notify you of the incident as quickly as possible;
  • Examine the causes of the incident and inform you;
  • Take necessary measures within reasonable limits to minimize negative effects and prejudices that might result from said incident.

Article 13 - Limitation of liability

Under no circumstances can the commitments defined in the point above regarding security breach notification be assimilated to any acknowledgment of fault or liability regarding the occurrence of the incident in question.

Article 14 - Transfer of Personal Data abroad

The Publisher commits not to transfer Users' personal data outside the European Union except in cases where it would be companies of the same group as LAYTAN company or for IT maintenance reasons.

Article 15 - Modification of the Privacy Policy

In case of modification of the privacy policy, our commitment is not to lower the level of confidentiality substantially without prior information to concerned persons.

We commit to inform you in case of substantial modification, and not to lower the level of confidentiality of your data; if applicable, you will be informed and we will request your consent.

Article 16 - Applicable Law and Recourse Procedures

The privacy policy and your use of the Site are governed and interpreted in accordance with French laws, particularly Law No. 78-17 of January 6, 1978 relating to information technology, files, and freedoms. The choice of applicable law does not affect your rights as a consumer in accordance with the applicable law of your place of residence.

In case of dispute, the parties will seek an amicable solution before any legal action.

In case these attempts fail, any disputes regarding the validity, interpretation, and/or execution of the privacy policy must be brought, even in cases of multiple defendants or warranty claims, before French courts.

In case of dispute concerning how LAYTAN company collects and processes your Personal Data, you have the possibility to file a complaint with a control authority, the "CNIL" in France, located at 3 place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

Article 17 - Data Portability

The Publisher commits to offering you the possibility to have all data concerning you returned upon simple request to LAYTAN company by email at team@nehuparis.com

The User is thus guaranteed better control of their data and maintains the possibility to reuse it.