PRIVACY POLICY

Privacy Policy

Last updated: 21/10/2024

At Karen Rosel EI, myarnica.com, your privacy is of utmost importance to us. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you engage with our online homeopathic wellness consultation services. By using our website or services, you agree to the collection and use of information in accordance with this policy.

1. Data Controller

The data controller responsible for your personal data is:

Karen Rosel EI, Roanne, France

Email: [email protected]

SIRET Number: 94947515600012

2. Data We Collect

We collect several types of personal data to provide and improve our services. The types of personal data we may collect include:

2.1. Personal Information

- Contact Information: Name, email address, phone number.

- Identity Information: Date of birth.

- Consultation Information: Health history, lifestyle information, wellness goals, and preferences you provide during your consultations.

2.2. Technical Data

- Device Information: IP address, browser type, operating system, and device type when using our website.

- Usage Data: Information about how you use our website, such as time spent on our site, pages visited, and links clicked.

2.3. Cookies and Tracking Technologies

We use cookies and similar technologies to track activity on our website and store certain information. Cookies may include session cookies, persistent cookies, and analytical cookies.

3. How We Use Your Data

We use your personal data for the following purposes:

- Service Provision: To provide online homeopathic consultations, including the development of personalized wellness plans.

- Customer Support: To respond to your inquiries, and manage your account and consultation history.

- Payment Processing: To process payments for our services.

- Compliance: To comply with legal obligations and protect our business.

- Improvement of Services: To analyze and improve our website and services based on user activity.

4. Legal Basis for Data Processing

We process your personal data under the following legal bases:

- Consent: When you voluntarily provide personal data for consultation purposes.

- Contractual Obligations: To fulfill the service agreement when you book an online consultation.

- Legal Compliance: To comply with legal obligations under French law and the General Data Protection Regulation (GDPR).

- Legitimate Interests: For legitimate business purposes such as improving our services and ensuring website security.

5. How We Share Your Data

We do not sell or share your personal data with third parties for commercial purposes. However, we may share your data with:

- Service Providers: Third-party providers (e.g., payment processors, website hosts) to help us run our business and provide services to you.

- Legal Authorities: If required by law, we may share data with law enforcement or regulatory authorities.

All service providers are subject to data protection requirements and will only process your data as instructed by us.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Typically, we retain:

- Consultation Data: For a period of 20 years, in compliance with legal requirements for medical records.

- Financial Data: For a period of 10 years to meet tax and accounting obligations.

After the retention period, your data will be securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure storage, and access controls.

However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

8. Your Rights Under GDPR

As a user based in France or the European Union, you have the following rights regarding your personal data:

- Right of Access: You may request a copy of the personal data we hold about you.

- Right to Rectification: You may request corrections to inaccurate or incomplete data.

- Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data, subject to legal obligations.

- Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.

- Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances.

- Right to Object: You may object to the processing of your data based on legitimate interests or direct marketing purposes.

- Right to Withdraw Consent: If we process your data based on consent, you have the right to withdraw consent at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request in accordance with GDPR requirements.

9. International Transfers

Your personal data is stored and processed within the European Economic Area (EEA). If we transfer your data outside the EEA, we will ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website or by email.

11. Contact Us

If you have any questions about this Privacy Policy or your data protection rights, please contact us:

Karen Rosel EI

Email: [email protected]

Address: Roanne, France

If you are not satisfied with our response, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French data protection authority.

---

By using our website or booking a consultation, you agree to the terms of this Privacy Policy.

---

This privacy policy complies with the European Union's General Data Protection Regulation (GDPR) and French data protection law (**Loi Informatique et Libertés**).