Legal Notice

The protection of your personal data is a real priority for us.

Within the framework of the operation of the site www.airsoftoperation.com, we are likely to collect personal data. This data will be processed in accordance with the purposes for which it was collected.

Any processing of personal data concerning you is carried out in compliance with the legal provisions applicable to the matter. The file has been declared to the CNIL in accordance with the legislation in force.

Basic information on data processing and legal bases The competent body (responsible) for data processing is the company AIRSOFT OPERATION, 38 RUE JEAN JAURES 59113 SECLIN, E - Mail: aisoftoperation.contact@gmail.com
This data protection declaration informs you about the manner, scope and purpose of the processing of personal data within the framework of our online offer and the internet pages, functions and contents linked to it (hereinafter referred to under the general term "online offer" or "website"). The data protection declaration applies regardless of the domain, systems, platforms and devices (e.g. desktop or laptop) on which the offer is made.
The terminology used, such as "personal data" or "processing of personal data", refers to the definitions in Article 4 of the Basic Data Protection Regulation (GDPR).
Profile data (gender, last name, first name, delivery and billing address, e-mail address, date of registration, account update, time of login and logout, customer newsletter subscription mode, registration for various Airsoft Operation services such as purchase alerts), contract data (order date, payment information, bank data, credit card data) and usage data (IP address, user behavior on visited pages of our online offer, origin of traffic, sub-ID for retrieval programs, user behavior upon receipt of the newsletter) are part of the personal data processed within the framework of our online offer.
Users" are all persons who use the online offer, including customers. Customers" are all persons who have a customer account with Airsoft Operation. Terminology such as "customers" is understood to be gender-neutral.
We process the personal data of customers and users in compliance with the relevant data protection regulations. This means that customer and user data is only processed if legally permitted. This means in particular that when the processing of data is necessary or even legally required for the fulfilment of our contractual obligations (e.g. for the processing of orders) or online services, or on the basis of our legitimate interests (i.e. the interest of analysis, the optimization of economic operations and the security of our online offer within the meaning of Article 6 paragraph 1 subparagraph f of the GDPR, in particular for the measurement of reach, the creation of profiles for advertising or marketing purposes, as well as the collection of access data or the use of the services of a third-party provider), a consent of the user has been obtained.
We draw your attention to the fact that the legal basis for the consent is Article 6 § 1 paragraph a and Article 7 of the GDPR, the legal basis for the processing of data for the performance of our services and the implementation of contractual measures is Article 6 § 1 paragraph d of the GDPR, the legal basis for the processing of data for the fulfilment of our legal obligations is Article 6 § 1 paragraph c of the GDPR, and the legal basis for the processing of data for the protection of our legitimate interests is Article 6 § 1 paragraph f of the GDPR.

Security measures

We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the legal provisions on data protection are complied with and that the data processed by us is thus protected against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.
The secure transmission of data between your browser and our server in particular is part of the security measures.

Transfer of data to third parties and third-party suppliers

We do not pass on any customer data to third parties.

Contacting us

On the occasion of contacting us (via the contact form, email or a message on a social network) the user's data is evaluated for the processing of the contact request and its implications in accordance with Article 6 § 1 paragraph b of the GDPR.
The user data may be stored in our customer relationship management system ("CRM system") or by a comparable request organization.
On the basis of our legitimate interests (efficient and fast processing of user requests), we use the CRM system "Oasis" of the provider Web et Solutions
Technopôle du Madrillet
705 avenue Isaac Newton
76800 Saint Étienne du Rouvray. We have concluded a contract with Web et Solution including standard contractual clauses called "European" according to which Web et Solution undertakes to process user data only according to our instructions and in compliance with European data protection. In addition, Web et Solution has adhered to the EU-US agreement on the data protection shield and thus offers an additional guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000KzX1AAK&status=Active).

Collection of access and log files

On the basis of our legitimate interests within the meaning of Article 6 § 1 paragraph f of the RGPD, we collect data on each access to the server on which this service is located (so-called server log files). Access data includes the name of the website accessed, the data, the date and time of the access, the amount of data transmitted, the notification of the access made, browser type and version, the referrer URL (previously visited pages), IP address and the access provider
For security reasons, the information contained in the log files is kept for evidentiary purposes (e.g. to clarify cases of abuse or fraud) and is only deleted after a definitive solution has been found to any incident.

Users' rights

Users have the right, upon request, to be informed about the personal data stored by us.
Furthermore, users have the right to have incorrect data corrected, to restrict the use of their data, to have their personal data deleted, if applicable, to assert their right to data portability and, in the event of suspected unlawful use of data, to lodge a complaint with the competent supervisory authority.
Similarly, users may terminate authorizations with express effect for the future.

Deletion of data

Data stored with us will be deleted as soon as their intended use is no longer required and there is no archiving obligation. Insofar as user data cannot be deleted because it is required by third parties and for purposes permitted by law, its use is restricted. This means that the data is blocked and not used for other purposes. This applies, for example, to user data that must be stored for business and tax purposes.
According to the legal regulations, archiving takes place for a period of 6 years in accordance with Art. 257 § 1 of the Commercial Code (accounting books, inventories, opening balance sheets, annual closings, business correspondence, accounting documents, etc.) as well as for a period of 10 years in accordance with Art. 147 § 1 AO (books, documents, management reports, accounting documents, business correspondence, documents relating to the calculation of tax, etc.).

Right to object

Users have the right to object at any time to the future processing of their personal data in accordance with the legal requirements. This objection may relate in particular to processing for the purpose of direct advertising.

Changes to the data protection policy

We reserve the right to amend this data protection policy in order to adapt it to a changed legal situation or in the event of a change in the service or data use. This applies in particular to the data usage policy. Insofar as user approvals are required or parts of the data usage policy contain rules on contractual relations with users, these changes will only be made with the consent of the users.
Users are requested to inform themselves regularly about the content of the data protection policy.