Privacy Policy

As a User and/or Customer of the Shop (hereafter "you"), you acknowledge that you have read and accepted this page (hereafter the "Privacy Policy"), which details and explains the privacy policy applied by Xilam Animation (hereafter "Xilam" or "us").

This Privacy Policy is attached and forms an integral part of the General Terms.

Without a definition to the contrary provided on this page, terms beginning with a capital letter have the same definition as that provided in the General Terms.

For any other questions concerning the processing of your personal data or the exercise of your rights, you can contact us at the following email address: shop@xilam.com.   

General introduction

Personal data refers to any information relating to a person identified or identifiable, directly or not, through an identifier or one or more elements specific to his/her identity. This can be a last name, a first name, an email address, a location, an ID card number, an IP address, a photo, etc.

During your visit to the Shop, we may collect some of your personal data.

We implement appropriate technical and organisational measures to ensure that your personal data is processed in accordance with regulations in effect (notably European Regulation no. 2016-679 on the protection of personal data and the amended French Law No.78-17 on data processing, files and freedoms).

Hereafter, we explain our Privacy Policy with the aim of informing you in a clear and transparent way about:

Part 1: The personal data you provide to the Shop
Part 2: The use of cookies on the Shop
Part 3: How to exercise your rights
Part 4: Your remedies in case of disagreement

Part 1 – The personal data you provide to the Shop

1.1. Personal data that may be communicated to Xilam
During your visit to the Shop, you may be required to provide us with your personal data.
This is the case when you send us, when you subscribe to our newsletter or when you place an order with the Shop.
Each time, we will ask you for permission beforehand, by means of a box to be ticked.
By ticking the box, you give your consent.

The table hereafter lists the personal data concerned, accompanied by the following information:

  • The processing and the purpose pursued by this processing: this makes it possible to know what purposes are served by the collection of your personal data,
  • The recipients of the personal data: this allows you to know who will receive and/or access your personal data,
  • The legal basis justifying the processing: in other words, the legal reason that justifies the collection of your personal data. This may be, for example, your consent, compliance with an obligation provided for by a legal text, execution of a contract, etc.
 
Personal data concerned:
Processing and purpose pursued by this processing
Recipients of personal data
Legal basis for processing
For processing of your order

Customer identification data (title, gender, last name, first name, billing address, delivery address, mobile phone number, email address, customer number, if applicable)

This personal data is used to manage the Customer's order.

 

If you do not provide this personal data, we will not be able to accept your order since we will not be able to fill it.

Xilam

The Super Atelier

The legal basis is:

 

(i) execution of the electronic distance sales contract between you and Xilam when you place an order with the Shop. As a reminder, this sale contract is governed by the General Terms,

 

(ii) the legal obligations to which Xilam is subject.

The Customer's order data (order number, order details, prices, invoices, payments, exercise of the right of retraction, delivery, guarantee, complaints)

This personal data is used to manage the Customer's order.

 

If you do not provide this personal data, we will not be able to accept your order since we will not be able to fill it.

Xilam

The Super Atelier

The legal basis is:

 

(i) execution of the electronic distance sales contract between you and Xilam when you place an order with the Shop. As a reminder, this sale contract is governed by the General Terms,

 

(ii) the legal obligations to which Xilam is subject.
For payment for your order

Customer bank details

 

For bank cards, these are: the number of the card, the expiry date and the visual cryptogram.

This personal data is used to permit payment for the Customer's order.

 

If you do not provide this personal data, you will not be able to pay for your order, and it will not be validated.

If you reside in the European Union, the United Kingdom or Switzerland: Shopify International

 

If you live outside the European Union, the United Kingdom or Switzerland: Shopify Inc.

 

At no time will Xilam have access to this personal data.

The legal basis is execution of the electronic distance sales contract between you and Xilam when you place an order with the Shop. As a reminder, this sale contract is governed by the General Terms,
For receiving newsletters

Email address

This personal data is used for you to receive information from Xilam about the Shop and/or the Xilam universe.

 

If you do not provide this personal data, you will not be able to receive the newsletter.

Xilam

The legal basis is your consent to receive newsletters from Xilam about the Shop and/or the Xilam universe.

 

You can unsubscribe from the newsletter at any time by clicking on the unsubscribe hyperlink at the end of each newsletter email.
For receiving “back in stock” notifications

Email address

This personal data is used for you to an email from Xilam that notifies you about

 

If you do not provide this personal data, you will not be able to receive such notification email.

Xilam

The legal basis is your consent to receive “back in stock” notifications by email from Xilam.
For the contact form

Last name (and/or first name) of the Customer

Email address of the Customer:

This personal data is used to respond to the message you have sent us via the contact form and, if necessary, to respond to any request that this message contains.

 

If you do not provide this personal data, we will not be able to respond to you.

Xilam

The legal basis is your consent to receive a response from Xilam following the message you have sent to Xilam via the contact form.

 

The personal data thus collected will not be transferred, exchanged or sold to third parties.

As specified in the “Recipients” column above, some of your personal data may be disclosed to Xilam's service providers.
These service providers are only required to use your personal data for the purposes specified above and within the limits of our instructions.
Xilam remains responsible for the processing done.
Here is the identity of the service providers concerned:
  • Le Super Atelier: this is Ad Astra Corporation, also called AAC or Le Super Atelier, a Limited Liability Company with capital of 12,450 €, registered with the Commerce and Business Registry of Rouen under number 789 710 118 and whose registered office is located at 221 rue Jacqueline Auriol, 14760 Bretteville-sur-Odon, France.
  • Shopify International: this is Shopify International Ltd., an Irish company, with registered office at 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, DO4 XN32, Republic of Ireland,
  • Shopify Inc.: this is Shopify Inc., a Canadian company registered with the TSX and NYSE, under registration number: 426160-7, and having its registered office at 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada.

For delivery of your order, Le Super Atelier may communicate some of your personal data to its transport provider, solely for the needs of the delivery and within the limits of our instructions.

1.2. Transfer of your personal data outside the European Union

If you are in Europe, the United Kingdom or Switzerland, the personal data that you provide to us is not, in principle, the subject of transfers outside the European Union.

Nevertheless, our service provider, Shopify International, may have to transfer some of your personal data outside the European Union.

Whenever such a transfer of personal data outside the European Union takes place, our service provider, Shopify International, agrees to do so in compliance with the applicable European regulations and, in particular, Article 45 of the GDPR:

  • Shopify International, based in the Republic of Ireland, reserves the right to transfer some of your data to its parent company, Shopify Inc., based in Canada. In the event of such a transfer, your personal data will be protected by Canadian law, which the European Commission has determined to provide an adequate level of protection in its Decision 2002/2/EC of 20 December 2001.

You can find more information about the processing of personal data by the Shopify group on this page: https://www.shopify.com/legal/privacy#information-sharing.

1.3. Retention period of personal data sent to Xilam

Your personal data is kept by Xilam and/or its service providers only for the time necessary to carry out the operation for which it was collected and/or for the period imposed by law.

More specifically, Xilam will retain your personal data for the following retention periods:

 
Personal data concerned
Retention periods
For processing of your order

Customer identification data (title, gender, last name, first name, billing address, delivery address, mobile phone number, email address, customer number, if applicable)

This personal data is kept for the duration of our business relationship, i.e. until expiry of the guarantees due by Xilam.

 

As an exception, invoices are kept for a period of 10 years in accordance with accounting obligations.

The Customer's order data (order number, order details, prices, invoices, payments, exercise of the right of retraction, delivery, guarantee, complaints)
For payment for your order

Customer bank details

For bank cards, these are: the number of the card, the expiry date and the visual cryptogram.

For the payment of your order: until expiry of the right of retraction as provided for in the General Terms.

 

Handling of complaints: 13 months following the debit or 15 months in the case of deferred debit payment cards. The data thus kept for evidentiary purposes shall be kept in an intermediate archive and shall be used only in the event of a dispute involving the transaction.
For receiving newsletters
(or "information email" in French)

Email address

For the duration of your newsletter subscription.
For the contact form

Last name (and/or first name) of the Customer

Email address of the Customer

For the time necessary to respond to your message and/or the processing of your request sent via the contact form.
1.4. The right to withdraw your consent for the processing of your personal data
When the legal basis for the processing of your personal data is your consent, that is to say for the receipt of newsletters or for the contact form, you can freely change your mind and ask us not to use your personal data in the future.
To withdraw your consent to receive newsletters, you can click on the unsubscribe hyperlink at the end of each newsletter.
In other cases, you can send us a request email to shop@xilam.com.
In general, you have a right to object to the processing of data when such processing is based on the legitimate interest of the controller.
In the specific case of the Shop, we do not carry out this type of processing.
There is therefore no need to exercise this right.
1.5. The right to limit processing of your personal data
You have the right to ask us to no longer use your personal data but to keep it for the time your request is under consideration.
This is the case, for example, if you feel that your personal data is no longer necessary or that it is being processed unlawfully.
In this case, you can send us a request email to shop@xilam.com.
Your personal data will then be temporarily isolated and will no longer be used, subject to Xilam's legal obligations and/or the exercise of Xilam's legal rights.

 

Part 2 – The use of cookies by the Shop

2.1. General definition of a cookie

A cookie is a small text file that is placed or stored on your device (e.g. your computer, tablet or smartphone) when you visit a website. It can be used by the website to make the user experience more efficient or to analyse your browsing, viewing or consumption habits to allow the display of targeted advertising.

2.2. Cookies on the Shop
The cookies present on the Shop are of 2 types: strictly necessary cookies and optional cookies.
2.2.1. Strictly necessary cookies
Strictly necessary cookies are essential for proper functioning of the Shop. Here is the complete list of strictly necessary cookies present on the Shop:
Name
Supplier
Purpose
Expiration
Type

_shopify_d

xilam.shop

This cookie is necessary for the secure checkout and payment function on the Shop. This function is provided by shopify.com.

End of session

HTTP

_tracking_consent_

xilam.shop

This cookie stores the user's cookie consent state for the current domain.

1 year

HTTP

art_ver

xilam.shop

This cookie is necessary for the shopping cart functionality on the website.

13 days

HTTP

cart

xilam.shop

This cookie is necessary for the shopping cart functionality on the website.

13 days

HTTP

cart_currency

xilam.shop

This cookie is necessary for the secure checkout and payment function on the Shop. This function is provided by shopify.com.

13 days

HTTP

cart_sig

xilam.shop

This cookie is necessary for the secure checkout and payment function on the Shop. This function is provided by shopify.com.

13 days

HTTP

cart_ts

xilam.shop

This cookie is necessary for the secure checkout and payment function on the Shop. This function is provided by shopify.com.

13 days

HTTP

CONSENT

google.com

This cookie is used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the Shop

2 years

HTTP

CONSENT

youtube.com

This cookie is used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the Shop

2 years

HTTP

CookieConsent

xilam.shop

This cookie stores the user's cookie consent state for the current domain.

1 year

HTTP

cookietest

xilam.shop

This cookie is used to determine if the visitor has accepted the cookie consent box.

End of session

HTTP

laravel-session

display.popt.in

This cookie is used internally by the Shop’s owners, when uploading or renewing website content.

1 day

HTTP

secure_customer_sig

xilam.shop

This cookie is used to store customer credentials securely when processing a purchase on the Shop. This cookie is essential in making a secure online transaction.

1 year

HTTP

XSRF-TOKEN

display.popt.in

This cookie ensures visitor browsing-security by preventing cross-site request forgery. This cookie is essential for the security of the Shop and visitor.

1 day

HTTP
2.2.2. Optional cookies

Optional cookies are used to improve your experience on the Shop. The following is an exhaustive list of optional cookies on the Shop:

Cookies for preferences
Name
Supplier
Purpose
Expiration
Type

a/n (40)

display.popt.in

This cookie detects how many times a user has visited the Shop in order to determine whether an on-page notification should be displayed.

1 day

HTTP

keep_alive

xilam.shop

This cookie saves the user's current geographical location based on the user's IP address.

1 day

HTTP

localization

xilam.shop

This cookie holds the users timezone.

1 year

HTTP

poptin_previous_url

xilam.shop

This cookie determines whether the user has made any subscriptions on the Shop. It enables the Shop to show to the user no subscription forms which already have been filled out.

1 day

HTTP

theme:recently-viewed-product

xilam.shop

This cookie enables to list the Products recently seen by the user on the Shop.

Persistent

HTML

 

Cookies for statistics
Name
Supplier
Purpose
Expiration
Type

_dd_s

xilam.shop

This cookie registers the Shop's speed and performance. This function can be used in context with statistics and load-balancing.

1 day

HTTP

dd_cookie_test_#

xilam.shop

This cookie registers data on visitors' website-behaviour. This is used for internal analysis and website optimization.

1 day

HTTP

 

Cookies for marketing
Name
Supplier
Purpose
Expiration
Type

_landing_page

xilam.shop

This cookie stores visitors' navigation by registering landing pages. This allows the Shop to present relevant Products and/or measure their advertisement efficiency on other websites.

13 days

HTTP

_orig_referrer

xilam.shop

This cookie is used to collect information on a visitor. This information will become an ID string with information on a specific visitor – ID information strings can be used to target groups with similar preferences, or can be used by third-party domains or ad-exchanges.

13 days

HTTP

_s

xilam.shop

This cookie collects data on user behaviour and interaction in order to optimize the Shop and make advertisement on the Shop more relevant.

1 day

HTTP

_shopify_s

xilam.shop

This cookie ollects data on user behaviour and interaction in order to optimize the Shop and make advertisement on the Shop more relevant.

1 day

HTTP

_shopify_sa_p

xilam.shop

This cookie collects data on visitors' behaviour and interaction. This is used to make advertisement on the Shop more relevant. The cookie also allows the Shop to detect any referrals from other websites.

1 day

HTTP

_shopify_sa_t

xilam.shop

This cookie collects data on visitors' behaviour and interaction. This is used to make advertisement on the Shop more relevant. The cookie also allows the Shop to detect any referrals from other websites.

1 day

HTTP

_shopify_y

xilam.shop

This cookie collects data on user behaviour and interaction in order to optimize the Shop and make advertisement on the Shop more relevant.

1 year

HTTP

_y

xilam.shop

This cookie collects data on user behaviour and interaction in order to optimize the Shop and make advertisement on the Shop more relevant.

1 year

HTTP

poptin_c_visitor

xilam.shop

This cookie used in context with pop-up advertisement-content on the Shop. The cookie determines which ads the visitor should be shown, as well as ensuring that the same ads does not get shown more than intended.

29 days

HTTP

poptin_client_id

xilam.shop

This cookie used in context with pop-up advertisement-content on the Shop. The cookie determines which ads the visitor should be shown, as well as ensuring that the same ads does not get shown more than intended.

End of session

HTML

poptin_every_visit_session

xilam.shop

This cookie implements pop-up advertisement on the Shop.

End of session

HTML

poptin_new_user

xilam.shop

This cookie implements pop-up advertisement on the Shop.

End of session

HTML

poptin_old_user

xilam.shop

This cookie sed in context with pop-up advertisement-content on the website. The cookie determines which ads the visitor should be shown, as well as ensuring that the same ads does not get shown more than intended.

1 day

HTTP

poptin_origin_landing_page

xilam.shop

This cookie implements pop-up advertisement on the website.

End of session

HTML

poptin_previous_visited_pages

xilam.shop

This cookie collects data on user behaviour and interaction in order to optimize the Shop and make advertisement on the Shop more relevant.

Persistent

HTML

poptin_referrer

xilam.shop

This cookie is used in context with pop-up advertisement-content on the Shop. The cookie determines which ads the visitor should be shown, as well as ensuring that the same ads does not get shown more than intended.

1 day

HTTP

poptin_session

xilam.shop

This cookie implements pop-up advertisement on the Shop/

1 day

HTTP

poptin_user_id

xilam.shop

 

 

HTTP

VISITOR_INFO1_LIVE

youtube.com

This cookie tries to estimate the users' bandwidth on pages with integrated YouTube videos.

179 days

HTTP

YSC

youtube.com

This cookie registers a unique ID to keep statistics of what videos from YouTube the user has seen.

End of session

HTTP

ytidb::LAST_RESULT_ENTRY_KEY

youtube.com

This cookie stores the user's video player preferences using embedded YouTube video.

Persistent

HTML

yt-remote-cast-available

youtube.com

This cookie stores the user's video player preferences using embedded YouTube video.

End of session

HTML

yt-remote-cast-installed

youtube.com

This cookie stores the user's video player preferences using embedded YouTube video.

End of session

HTML

yt--remote-connected-devices

youtube.com

This cookie stores the user's video player preferences using embedded YouTube video.

Persistent

HTML

yt-remote-device-id

youtube.com

This cookie stores the user's video player preferences using embedded YouTube video.

Persistent

HTML

yt-remote-fast-check-period

youtube.com

This cookie stores the user's video player preferences using embedded YouTube video.

End of session

HTML

yt--remote-session-app

youtube.com

This cookie stores the user's video player preferences using embedded YouTube video.

Persistent

HTML

yt-remote-session-name

youtube.com

This cookie stores the user's video player preferences using embedded YouTube video.

End of session

HTML

 

2.3. Management of cookies
2.3.1. Accepting and/or refusing cookies
In accordance with applicable law, we may store cookies on your device only if they are strictly necessary for operation of the Shop.
These strictly necessary cookies are exhaustively listed in paragraph 2.2.1 above.
Disabling the necessary cookies will cause difficulties with using the Shop and prevent access to certain features.
That is why, in the event that you refuse the necessary cookies, you must absolutely refrain from accessing, viewing and/or using the Shop, whether as a User and/or Customer, in any way whatsoever.
For optional cookies, as exhaustively listed in paragraph 2.2.2 above, we need your prior permission.
To get your permission, we use the interactive CookieBot tool, which will allow you to accept all or part of the cookies, or even refuse all optional cookies if you wish. 
You are free at any time to change your choices regarding optional cookies.
To do this, simply click on the corresponding icon in the Shop located on the left bottom side.
2.3.2. Deleting cookies
You can delete the cookies stored on your device at any time.
To do this, simply select the appropriate settings in your Internet browser.
In case of difficulty or for any other question, you can contact us on this subject at the address shop@xilam.com, by communicating to us, if possible, the identifier and the date of your consent as indicated by the Cookiebot interactive tool.

Part 3 – How to exercise your rights

3.1. Responsible for processing your personal data

The data controller for this processing is Xilam Animation, public limited company with capital of 491,130 €, registered with the Commerce and Business Registry of Paris under number 423 784 610 and whose registered office is located at 57 boulevard de la Villette, 75010 Paris, France.

This means that Xilam is your preferred contact for any questions relating to the management of your personal data or the exercise of your rights.

In general, we have an obligation of security and confidentiality towards you.

You can contact us:

  • By email: shop@xilam.com
  • Or by post: at the postal address Xilam Animation, To the attention of Xilam Shop – Protection des données personnelles, 57 boulevard de la Villette, 75010 Paris, France

To respond to your requests in the context of the exercise of your rights, you will be asked for proof of identity to ensure your identity, and thus allow us to respect our obligation of privacy.

This proof will only be kept for the time required to process your request.

3.2. The right to access and portability of your personal data

Upon request, you may obtain from Xilam, in electronic format, a list of the personal data that we hold about you, as well as a copy of the personal data that you have provided for transfer to another data controller.

3.3. The right to correct your personal data

You may request rectification of your personal data when it is inaccurate, outdated, or incomplete.

3.4. Right to erasure ("right to be forgotten")

You may request the deletion of all or part of the personal data concerning you under certain conditions (in particular if you believe that the data is no longer necessary, if you have withdrawn your consent or if you believe that your data is being unlawfully processed).

Therefore, you can exercise this right, subject however to the legal obligations imposed on Xilam and which obliges it to keep certain data to meet its legal obligations (retention of invoices for example) or to enforce its rights in court.

3.5. The right to set post-mortem directives

You can tell us how you would like us to process your personal data in the event of your death by writing to us at shop@xilam.com.

Part 4 – Your remedies in case of disagreement

We are available at the following address to answer any questions you may have regarding the processing of your data and to help you resolve any difficulties you may encounter: shop@xilam.com

In the event of a persistent disagreement with the way in which we process your personal data, you may refer the matter to the Commission Nationale de l’Informatique et des Libertés (CNIL):

  • By electronic means via its website: https://www.cnil.fr/fr/agir
  • Or by post: at the address CNIL – 3, place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France.

This Privacy Policy was last updated on May 30th, 2023