Privacy and Cookie Policy – Online Sales

Privacy and Cookie Policy – Aqualung Website

 

At Aqualung Group, as data controller, we are extremely cautious and concerned by the privacy of our clients and users. We are proud to work hard to ensure that our processing operations comply with all regulations applicable to protect your privacy.

It is important that you understand how we look after your Personal Data (as defined in section 2 below) and how we make sure that we meet our legal obligations to you under the applicable data protection laws (including associated guidance) (the "Data Protection Laws") which include the Data Protection Act 2018, the General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act (“CCPA”) for resident of California.

The present document applies to the processing activity carried out by us on your Personal Data when you navigate or share Personal Data with us on the Apeks website www.aqualung.com (hereinafter, the "Website") and describe the conditions under which your Personal Data is collected and processed by our company on the Website.

 

  1. Identity of the controller

In this privacy policy, the terms "we", "our", and "us" are used to refer to:

Aqualung Corporate

300 Rue du Vallon, Les Vaisseaux – Bâtiment C

06560 Valbonne – Sophia Antipolis (France)

Hereinafter "Aqualung".

 

We are a controller of your information, which means that we are responsible for looking after it.  We will use your Personal Data fairly, lawfully and in a transparent manner, and in accordance with the Data Protection Laws.

  1. The Personal Data collected on the Website

By using our Website, you will transmit data to us, some of which are likely to identify you ("Personal Data").

This is particularly the case when you fill in forms to contact us.

This information shall contain in particular the following data:

The mandatory or optional nature of the Personal Data requested from you, and the consequences if any of a failure to answer, are specified at the time of data collection with an asterisk (*).

Each time you visit our website, we may also automatically collect information and Personal Data about your computer for system administration including, where available, your IP address, your operating system and browser type and navigation data, as described in the next section below.  Please see our cookies policy in sections 8 and 9 of this privacy policy for further information about what information may be automatically collected when you visit our websites.

  1. Purposes of the processing activity operated on your Personal Data on the Websites

We process your Personal Data through our Websites for the following purposes:

1) to be able to answer your queries;

2) to manage and track your orders;

3) to allow you to participate in interactive features on our websites, our apps, and in relation to our services, when you choose to do so;

4) to administer our websites and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

5) to analyse how you use the Website (including behaviour patterns and the tracking of visits across multiple devices) to improve our own goods and services;

6) to establish more about our website users; and

7) to create and assist us in managing your account, improve your Website experience and ensuring that the Website content is presented in the most effective manner for you and for your computer;

8) to measure, understand or monitor the effectiveness of advertising, promotions, marketing material and content and any joint initiatives with our affiliates, suppliers, partners, subcontractors and other selected third parties;

9) to make suggestions and recommendations to you and other users of our Website or services about goods or services that may interest you or them; and

10) to comply with our legal and regulatory obligations and for the purposes of assisting with the prevention and detection of crime;

11) to answer your queries related to you rights as described in Section7.

Data Protection Laws require that we meet certain conditions before we are allowed to use your data in the manner described in this privacy policy.

To use your Personal Data, we will rely on the following conditions, depending on the activities we are carrying out:

Purpose of the processing

Type of data collected

Legal basis

Responses to information requests

Identification Data*

The legal basis is the performance of the contract or pre-contractual measures or our legitimate interest.

Product registration and warranty

Identification Data*

The legal basis is your consent or the performance of the contract or pre-contractual measures.

Product release alert

Identification Data*

The legal basis is your consent

User manual communication

Identification Data*

The legal basis is your consent

Participation in marketing operations (promotion, etc.)

Identification Data*

Consent of the data subject

The legal basis is your consent.

Giveaway product shipping

Identification Data*

Mailing address

The legal basis is your consent and the performance of the contract

Subscription to the newsletter

Identification Data*

Consent of the data subject

The legal basis is your consent.

Creation and administration of customer account

Identification Data*

Customer account data**

The legal basis is the performance of the contract

Store finder

IP address via cookie storage

The legal basis for this processing may be either your consent or our legitimate interest.

Data profiling related to personal preferences, interests, behaviour ****

Identification Data*

Customer account data**

The legal basis is your consent (if you are a test team member, if you have an account or if you filled in our forms at a specific event.)

Site administration (troubleshooting, statistics, etc.)

IP address via cookie storage

The legal basis is our legitimate interest.

On-site user tracking for service improvement and user knowledge

IP address via cookie storage

The legal basis for this processing may be either your consent or our legitimate interest.

Measure, understand or monitor the effectiveness of advertising, promotions

IP address via cookie storage

The legal basis of this processing is your consent.

Suggestions or recommendations regarding services/items that may interest you

Identification Data*

The legal basis of this processing is your consent.

Management of the exercise of individual rights

Identification Data*

 

Type of request

The legal basis for this processing is compliance with our legal obligations

Where applicable, a copy of the identity documents

The legal basis for this processing is compliance with our legal obligations

 

  1. Recipients of your Personal Data

Under this policy, "Aqualung Affiliates" means all the companies controlled directly or indirectly, by Aqualung Corporate (300 rue du Vallon, Les Vaisseaux – Batiment C, 06560 Valbonne – Sophia Antipolis, France).

We may share your information with the other members within Aqualung and Aqualung Affiliates but only for the purposes specified in this privacy policy. 

We may disclose your personal information:

We do not share your information with third parties for marketing purposes.

 

  1. Where we store your Personal Data

All information you provide to us is stored on our secure servers, or those of our group.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our websites and apps, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot fully guarantee the security of the Internet during the transmission of your data to our websites; such transmission is at your own risk.

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, including keeping security patches up to date wherever possible, and by constantly investigating new ways to keep data secure.

 

  1. Retention of your Personal Data

We will use and/or store your data as long as it is necessary for the purposes listed above.

More precisely:

We will keep your personal data for as long as we need it to provide you with your requested service(s) or to meet our commercial or legal obligations. To determine the retention period of your personal data, we consider several criteria to make sure that we do not keep your personal data for long than is necessary or appropriate. These criteria include:

 

When we no longer need to retain your personal data, it will be deleted or be anonymised so that you can no longer be identified from it.

 

  1. Exercising your rights in relation to your Personal Data

You have the right to access, to rectify, to restrict and, where applicable, to delete your Personal Data. You also hold the right to data portability.

You may also be entitled, on legitimate grounds, to object to the processing of any Personal Data relating to you.

You have the right to request access to your Personal Data

You have the right to request confirmation that your Personal Data is being processed, access to your Personal Data (through us providing a copy) and other information about how we process your Personal Data.

You have the right to ask us to rectify your Personal Data

You have the right to request that we rectify your Personal Data if it is not accurate or not complete.

You have the right to ask us to erase your Personal Data

You have the right to ask us to erase or delete your Personal Data where there is no reason for us to continue to process your Personal Data.

This right would apply if the processed Personal Data are no longer necessary regarding the purposes for which we collected them, where you withdraw your consent for us to process special categories of your Personal Data, or where you object to the way we process your Personal Data (see the section " You have the right to object…" within this table below).

You have the right to ask us to restrict or block the processing of your Personal Data

You have the right to ask us to restrict or block the processing of your Personal Data that we hold about you.  This right applies where you believe the Personal Data is not accurate, you would rather we block the processing of your Personal Data rather than erase your Personal Data, where we don need to use your Personal Data for the purpose we collected it for but you may require it to establish, exercise or defend legal claims.

You have the right to port your Personal Data

You have the right to obtain and reuse your Personal Data from us to reuse (in a structured, commonly used and machine readable format) for your own purposes across different services.  This allows you to move Personal Data easily to another organisation, or to request us to do this for you.

 

You have the right to object to our processing of your Personal Data

You have the right to object to our processing of your Personal Data on the basis of our legitimate business interests, unless we are able to demonstrate that, on balance, our legitimate interests override your rights or we need to continue processing your Personal Data for the establishment, exercise or defence of legal claims.  However, you also have the absolute right to object to our processing of your Personal Data for direct marketing purposes.

You have the right not to be subject to automated decisions

You have the right to object to any automated decision making, including profiling, where the decision has a legal or significant impact on you.

You have the right to withdraw your consent

You have the right to withdraw your consent to our processing of your Personal Data.

Privacy Rights of California Residents

As a resident of California, you have rights under the California Consumer Privacy Act, California Civil Code § 1798.100 et seq., (with any implementing regulations and as may be amended from time to time, “CCPA”) relevant to your Personal Data (as defined under the CCPA), as well as other laws. The rights described herein are subject to exemptions under the CCPA and other limitations under applicable law.

California Consumer Rights under the CCPA: If your Personal Data

is subject to the CCPA, you may have certain privacy rights with regard to that information. You may have right to:

California residents also have the right not to receive discriminatory treatment for the exercise of any of the privacy rights conferred by the CCPA, as described in this section. Aqua Lung will not discriminate against you because you have exercised any of your rights under the CCPA.

 

How to exercise your rights?

If you wish to exercise your rights, you may submit a request by emailing GDPR@aqualung.com or by mail at :

Aqualung Corporate

300 Rue du Vallon, Les Vaisseaux – Bâtiment C

06560 Valbonne – Sophia Antipolis (France)

We will respond to any request received from you within one month from the date of the request.  If your request is not sufficiently precise or does not include all elements enabling us to answer your request, Aqualung may ask you to provide additional elements.

 

CCPA exercise of rights

If you are resident in California and you wish to exercise your rights, you may submit a request by emailing GDPR@aqualung.com. If you choose to submit your request via email and if you are resident in California, you must include “CCPA Request” in the subject line and clearly provide us with the following information: what type of request you are making, your full name, email address, and shipping address. You may only make one request per email. Aqua Lung is required to provide you with access to your Personal Data or delete your Personal Data only in response to verifiable consumer requests. We will compare the information you provide by telephone or via email with any information we may have in our possession in order to verify your request. We may also contact you to request additional information in relation to your request. The information you provide must match the information we have in our possession. This measure is in place to help ensure that Personal Data is not disclosed to any person who does not have the right to receive it. The information collected through this process will be used for verification purposes only. Please note that you may authorize an agent to exercise any of these rights on your behalf by contacting us by email at GDPR@aqualung.com. If you use an agent, we will take measures to verify your agent’s authorization similar to the verification described above for fulfilling any access or deletion requests. We may require more information to ensure proper verification of you and your agent’s identity and authorization.

 

California residents may also ask us to provide them with :

In your request, please include a subject line that states “CA Shine the Light Request”, state that you are a California resident, and provide a current California address for our response.

 

  1. Cookies

We use various cookies on the Website for website analysis and improvement. When you visit our Website, cookies may be placed on your computer or smartphone. 

What is a cookie?

A "cookie" is a small text file placed in your browsing software to facilitate your browsing through our Website.

Different types of cookies are placed on the Website:

 

 

Mandatory Cookies

Title

Purpose

Duration

__hs_opt_out

This cookie is used to remember to stop asking to accept cookies.

6 months

__hs_do_not_trackdwsid

This cookie prevents tracking code.

6 months

__hs_initial_opt_in

This cookie is used to prevent the banner from displaying visitors who are browsing in strict mode.

7 days

__hs_cookie_cat_pref

This cookie is used to record categories to which a visitor has consented.

6 months

__hs_gpc_banner_dismiss

This cookie is used when the Global Privacy Control banner is disabled.

180 days

__hs_notify_banner_dismiss

This cookie is used when the website uses a Notify consent banner type.

180 days

hs_ab_test

This cookie is used to systematically offer visitors the same version of an A/B test page they have already seen.

Session

<id>_key

When visiting a password-protected page, this cookie is set so that visitors do not have to log in again if they return to the same page using the same browser.

14 days

hs-messages-is-open

This cookie is used to determine whether the chat widget is open and to save the information for future visits.

30 minutes

hs-messages-hide-welcome-message

This cookie is used to prevent the welcome message from reappearing on the same day after being rejected the first time.

1 day

__hsmem

This cookie is saved when visitors log on.

7 days

hs-membership-csrf

This cookie is used to ensure that content members' connections cannot be falsified.

Session

hs_langswitcher_choice

This cookie is used to record the language chosen by the visitor when viewing pages in multiple languages.

2 years

__cfruid

This cookie is set by the provider of the broadcast network, due to its flow limitation policies.

Session

__cfuvid

This cookie is set by the provider of the broadcast network because of its flow limitation policies.

Session

__cf_bm

This cookie is set by the provider of the broadcast network and is necessary to protect bots.

30 minutes

Analysis cookies

Title

Purpose

Duration

__hstc

The main visitor tracking cookie.

It contains the domain, hubspotutk, initial timestamp (first visit), last timestamp (last visit), current timestamp (current visit) and session number (increases with each subsequent session).

6 months

hubspotutk

This cookie keeps track of a visitor's identity and is used for contact deduplication.

6 months

__hssc

This cookie tracks sessions.

30 minutes

__hssrc

When the session cookie is modified, this cookie is also set to determine whether the visitor has reset his/her browser.

Session

Google Analytics

Performance & audience measurement cookies: https://policies.google.com/privacy

26 months

Functionality Cookies

Title

Purpose

Duration

messagesUtk

This cookie is used to recognize visitors who chat via the chatflows tool.

6 months

Advertising Cookies

Title

Purpose

Duration

Facebook Ads

Advertising cookies: https://facebook.com/privacy

12 months

Google Ads

Advertising cookies : https://www.google.fr/intl/fr/policies/technologies/ads

13 months

 

  1. Management of the cookies

During your first visit on the Website, a banner informs you of the use of cookies on the Website and invites you to accept such cookies. The cookies will only be deposited if you accept them or continue your browsing on other web pages of the Website or by selecting an element of the Website (i.e. image, link, logo, search button, etc.), which will be understood as your acceptance of the use of cookies.

You can, at all times, configure the cookies used on the Website. Your browser can also be set up to inform you of the cookies placed on your browsing software and to ask you to accept them or not. You can accept or refuse the cookies one by one or refuse them systematically. We remind you that the setting of the cookies is likely to changes the way you access to our contents and services requiring the use of cookies. Please bear in mind that the removal of certain cookies is likely to change the way you access to our services.

Each navigation software has its own cookie management settings. The procedures are described in the Help Menu of the software:

Except for strictly necessary cookies that are required for the operation of our Website, all cookies will expire after a maximum of two years.

  1. Changes to this privacy policy

We will take all measures necessary to communicate any changes to this privacy policy to you and will post any updated privacy policies on this page. This policy was last reviewed and updated in January 2024.