Privacy Policy
Delphine Choukroun of the sole proprietorship of Performance Outside the Box respects your privacy.
Please read this privacy policy carefully to understand how your personal data is collected, processed, and stored when using the Performance Outside the Box website.
The term “personal data” refers to any information relating to an identified or identifiable natural person, directly or indirectly, from a single piece of data or the combination of a set of data.
All personal data collected on this website is processed under the responsibility of the entrepreneur Delphine Choukroun, registered with the Trade and Companies Register of CAP D’AIL under number 803 789 528, in compliance with the law n° 78-17 of January 6, 1978 relating to data processing, files, and freedoms, in its current version, as well as Regulation (EU) 2016/679 of April 27, 2016, regarding the protection of individuals concerning the processing of personal data and the free movement of such data.
According to the applicable personal data regulations, Delphine Choukroun, who owns the Performance Outside the Box website, is therefore responsible for the processing.
For additional information on personal data protection, you are invited to consult the website of the National Commission for Informatics and Liberties (CNIL): https://www.cnil.fr/en.
I – Information and Purposes of Personal Data Collection
The collected personal data includes:
- First and last Name
- Company Name
- Email Address
- Phone Number
- Financial data: in the context of payment for services offered on the website, financial data related to the user’s credit card is recorded.
In accordance with the provisions of the modified law n° 78-17 of January 6, 1978, relating to data processing, files, and freedoms, the user is informed that the firm collects and processes personal data when connecting to the site.
The collected data primarily serves to enable the provision, optimization, and security of the website to offer users the highest quality service possible.
Additional data may be collected by the firm “Performance outside the box” to ensure the proper execution of commercial contracts concluded through the website with the user.
Recipients of Personal Data
The primary recipient of your personal data collected on the site is, first and foremost, Delphine’s firm for processing your orders and managing customer relations.
Other recipients of your personal data may include our payment service providers, payment security providers, and email service providers.
The collected information may potentially be shared with third parties in the following cases:
(1) When the user publishes a customer testimonial or writes a comment on a blog article, which are publicly accessible information;
(2) When the user expressly consents, such as by filling out the contact form on the website;
(3) In accordance with the law or to cooperate in a judicial investigation at the explicit request of a public authority;
(4) When the user uses payment services, for the implementation of these services, Performance outside the Box firm is in contact with third-party banking and financial companies with which it has contracts;
These service providers have limited access to user data, within the scope of performing these services, and are contractually obligated to use them in compliance with the provisions of applicable data protection regulations.
When certain information is mandatory to access specific features of the site, the firm will indicate this mandatory nature at the time of data entry.
Internally collected personal data will be only retained for the time necessary to enable the proper use of the site, prevent fraud and abuse, and comply with the firm’s legal and regulatory obligations regarding site management.
In cases where required by law, your consent will be obtained, or an option to refuse will be provided before any data transmission.
The user is informed that they have the right to access, inquire about, modify, and delete the information concerning them, which can be exercised at any time with the firm, either directly on the site or by email at contact@performanceoutsidethebox.com.
II – Data Collection Method
A) Cookies
The website uses “cookies” as defined by the CNIL in the following manner:
“A cookie is a small file stored by a server on the user’s terminal (computer, phone, etc.) and associated with a web domain (i.e., in most cases, all pages of the same website). This file is automatically sent during subsequent contacts with the same domain.
Cookies have multiple uses: they can be used to remember your customer ID on an e-commerce site, the current content of your shopping cart, the language of the web page display, an identifier to track your navigation for statistical or advertising purposes, etc.”
Information sourced from the official CNIL website.
These cookies aim to facilitate user navigation and improve the quality of the service offered by collecting statistical information and traffic-related data.
The user is informed of the use of these cookies during their first visit to the website of performance outside the box, through an explanatory banner on the use of “cookies.”
Before continuing navigation, the user must either accept or refuse the use of these “cookies.”
The consent given is valid for a period of thirteen months.
The user has the option to disable cookies at any time.
If the user does not consent to the use of cookies, an optimal experience on the site cannot be guaranteed.
The following cookies are used on the site:
Google Cookies:
- Google Analytics: used to measure the site’s audience;
- Google Tag Manager: facilitates tag implementation and manages Google tags.
You can find their privacy policy here.
Meta Facebook Cookies:
- Facebook: used for our “Like” feature on blog articles.
You can find their privacy policy here.
X Cookies:
- X: enables easy sharing and display of X content.
You can find their privacy policy here.
Brevo Cookies:
The Brevo platform is used for the newsletter service available in the footer and blog.
The cookies used on the site of Performance outside the box allow you to access the following services:
- Identify yourself with your personal details during a new visit,
- View all video and audio content in addition to text,
- Write comments on the blog, subscribe to the newsletter for free,
- Place an order, save your cart, know your purchase history,
- Avoid unpaid and potential disputes to comply with legal obligations…
You can express your consent or object to the use of cookies by adjusting your connection device appropriately. Refer to your browser’s user guide for more information.
B) Newsletter Subscription
By providing your first name and email, you can subscribe for free to the newsletter and receive email notifications for each blog article release, as well as benefit from new commercial offers.
If you no longer wish to receive the newsletter via email, you can inform Delphine at any time through one of the following methods:
• Clicking on the unsubscribe link in each email.
• Sending an email via the contact form.
C) Recording of Banking Data
With each banking transaction, you create your account in the “membership access” on the website.
From your member account, you can read and manage your service orders.
You can also download your invoices and view the customer relationship follow-up.
To enhance your shopping experience, your banking data may be stored if you wish, so you don’t have to enter them with each new order.
Your banking data (card number, expiration date, cardholder name) are only stored if you have given your prior consent.
We will never store the visual cryptogram on the back of your credit card.
In any case, you can delete your billing data in your “account” at any time or send a message to Delphine to erase them.
When you voluntarily provide personal data, the collection of your personal data is based on the following legitimate interest: better responding to your information and transaction requests.
The processing of your personal data to send you the newsletter is, however, based solely on your consent to receive it, which you can withdraw at any time.
If you do not consent to receiving the newsletter anymore, please note that it will not prevent you from creating your customer account and placing orders on the website.
III. Sharing of Personal Data
Within the firm Performance Outside the Box, and in relation to each processing purpose, your personal data is collected, processed, and stored internally only.
Delphine does not share personal data with other companies, organizations, and individuals unless one of the following circumstances applies:
(1) Sharing with prior consent: After obtaining your consent, Delphine may share the information you have authorized with third parties or specific categories of third parties specified when obtaining your consent.
(2) Sharing with service providers: Delphine may also disclose your information to companies that provide services for her business or on her behalf.
These service providers include companies that offer IT services such as hosting or email delivery, services for organizing appointments, or those providing activities on her behalf. These service providers may only use your information for the purpose of providing services within the firm Performance Outside the Box.
(3) Compliance with legal obligations of sharing according to laws and regulations: Delphine may share your information as stipulated by laws and regulations, to resolve legal disputes, or as required by judicial or administrative authorities under the law.
Delphine will ensure the legality of any sharing of personal data through data processing agreements with the companies with which your personal data is shared, obliging them to comply with this privacy policy and to take appropriate security and confidentiality measures when processing personal data.
IV. Personal Data Security
Delphine places great importance on the security of your personal data and has adopted industry standard practices to safeguard your personal information and prevent unauthorized access, disclosure, use, alteration, damage, or loss of this information.
She has also taken necessary precautions, through her hosting provider, to maintain the security and confidentiality of data, specifically preventing it from being distorted, damaged, or disclosed to unauthorized individuals.
Delphine also implements the following organizational measures:
(1) She takes reasonable and feasible measures to ensure that collected personal data is minimal and relevant.
(2) She retains your personal data for the duration strictly necessary for the purpose of processing unless data retention is required or permitted by law.
(3) Access control mechanisms are in place to ensure that only authorized personnel within the Performance outside the Box firm can access your personal data.
(4) She diligently adheres to the General Data Protection Regulation (GDPR), officially known as Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, concerning the protection of individuals regarding the processing of personal data and the free movement of such data, repealing Directive 95/46/EC.
This European Union regulation, serving as the reference text for the protection of personal data, strengthens and unifies data protection for individuals within the European Union.
This regulation, replacing the 1995 Directive on the protection of personal data (Directive 95/46/EC), is carefully applied within Delphine’s firm, Performance outside the Box.
Therefore, Delphine is committed to both protecting individuals affected by the processing of their personal data and holding the actors of this processing accountable.
In the event of a personal data breach, Delphine will adhere to the legal and regulatory requirements applicable to notifying competent supervisory authorities and/or affected individuals.
As the Data Protection Officer (DPO), Delphine Choukroun is at your disposal for any questions regarding the protection of your personal data: contact@performanceoutsidethebox.com.
V. Hosting and Transfer of Personal Data
Your personal data is hosted within the hosting infrastructure of the French hosting provider, o2switch, located in France.
When services available for sale on the website are delivered by resources located in countries outside the European Union, we may transfer your personal data to these countries. It may also happen that service providers access your data on our behalf to provide us with a specific service and are located in countries outside the European Union, such as the USA.
When such transfers exist, Delphine ensures that these transfers of personal data are framed in accordance with applicable regulations to ensure an adequate level of data protection, either through a decision of adequacy from the European Commission or through legal instruments such as data transfer contracts incorporating the Standard Contractual Clauses of the European Commission.
For any inquiries regarding the recipients and transfers of data that Delphine carries out outside the European Union, please contact her at the addresses indicated in the section “How to contact Delphine“.
VI. User Rights
You have the right of access, rectification, erasure, limitation, opposition to the processing of your personal data, as well as the right to define directives regarding the fate of your data after your death and the right to data portability.
The National Commission for Information Technology and Liberties (CNIL) defines personal data as “any information relating to an identified or identifiable natural person. But because they concern individuals, these must retain control over them.”
You also have the right to appeal to the CNIL for France and to a competent supervisory authority for any other Member State according to your habitual residence, place of work, or the place where the violation of your rights occurred if you believe that the processing of your data does not comply with applicable laws. This appeal can be made without prejudice to any other remedy before an administrative or judicial authority, which is also a right you have.
You can contact Delphine at any time at the addresses indicated in the below section “How to contact Delphine” to exercise your rights regarding personal data under the conditions set by applicable regulations. You must specify which right you intend to exercise and provide all necessary details for her to respond to your request.
These rights are exercised under the conditions set by French law:
- The right of access means that you can ask Delphine at any time to inform you whether she processes personal data concerning you and, if so, to advise you of the personal data concerned and the characteristics of the processing.
- The right of rectification means that you can ask her to rectify your personal data when they are inaccurate. You can also request that your personal data, if incomplete, be completed as far as relevant to the purpose of the processing in question.
- The right to erasure means that you can request the erasure of your personal data when:
(i) Their retention is no longer necessary for the purposes for which they were collected;
(ii) Your personal data are processed based on your consent, and you wish to withdraw this consent, and there is no other legal basis justifying the processing;
(iii) You have objected to the processing of your personal data and therefore want them to be erased;
(iv) Your personal data have been unlawfully processed;
(v) Your personal data must be erased to comply with a legal obligation provided by either EU law or French law.
- The right to limitation means that you can ask Delphine to limit the processing of your personal data, in accordance with the cases provided for by the GDPR:
- When you dispute the accuracy of your personal data for a period allowing her to verify their accuracy;
- (ii) When, following processing established as non-compliant, you prefer the limitation of processing to the complete erasure of your personal data;
- (iii) When she no longer needs your personal data for the purposes of processing, but you still need them for the establishment, exercise, or defense of legal claims;
- (iv) When you have objected to the processing of your personal data and you want a limitation of processing for a period allowing her to verify if the legitimate grounds you invoke justify it. Limitation of processing means that the processing of your corresponding personal data will then be limited to storage only. No further operations will be carried out on the considered personal data.
- The right of opposition means that you can object to the processing of your personal data when this processing is based on the legitimate interests pursued by Delphine. The right of opposition is exercised subject to justifying a legitimate reason related to your particular situation. She will then cease the processing in question unless there are compelling legitimate grounds for the continuation in accordance with the applicable regulations regarding the GDPR.
- The right to define directives regarding the fate of your data after your death allows you to express your instructions concerning the storage, erasure, and communication of your personal data after your death. Indeed, since the law n°2016-1321 of October 7, 2016, individuals who wish to do so have the option of organizing the fate of their data after their death. For more information on the subject, you can consult the CNIL website.
- The right to data portability means that you can ask Delphine, under the conditions set by applicable regulations, to receive your personal data in a structured, commonly used, and machine-readable format, and to have them transmitted to you, or to request her to transmit them directly to a third party of your choice when it is legally and technically possible.
When Delphine processes your personal data based on your consent, you also have the option to withdraw your consent at any time by contacting her in the section “How to contact Delphine” or by clicking on the unsubscribe link in each of her communications. However, the withdrawal of your consent does not affect the validity of the processing carried out before such withdrawal.
Any request must be accompanied by a photocopy of a valid signed identity document and must indicate the address at which Delphine Choukroun can contact the requester. The response will be sent from France within the month following receipt of the request. This period of one month may be extended by two months if the complexity of the request and/or the number of requests so require.
VII. Updates to this Privacy Policy
Delphine Choukroun, from the firm Performance Outside the Box, reserves the right to modify or update, in whole or in part, this privacy policy at any time, due to changes in the applicable regulations regarding the protection of personal data or the data processing carried out.
Any substantial modification to the privacy policy will be notified to you by email if you have provided a valid email address and will be published on the website.
Delphine recommends that you regularly review this privacy policy to have a perfect understanding of her commitments regarding the security and protection of your personal data.
VIII. How to Contact Delphine?
If you have questions, comments, or suggestions, please contact her by visiting the “Contact” page or by submitting an email to contact@performanceoutsidethebox.com.
If you are not satisfied with the response provided by Delphine Choukroun to a request to exercise your rights in accordance with an article above, or if you wish to report a breach of the applicable data protection regulations, you have the right to file a complaint with the CNIL or with the data protection authority of the country in which you usually reside or work.
In any case of issue, only the French text is valid with the application of French law.
Last Update: August 2024