Personal data

PERSONAL DATA

Date of last update : 13/04/2023

SUMMARY :

1. Definitions

2. Who is the Controller ?

3. Where do we collect your Personal Data ?

4. What categories of Personal Data do we process?

5. What Personal Data do we process and for what purposes?

6. Will you receive commercial offers?

7. Do we collect Personal Data from minors under the age of 16?

8. Who are the recipients of your Personal Data?

9. Is your Personal Data transferred outside the European Union?

10. How long do we keep your Personal Data ?

11. What security measures are applied to your Personal Data ?

12. What are your rights regarding your Personal Data ?

13. How can you exercise your rights regarding your Personal Data?

14. How to contact our Data Protection Officer?

15. Update of our Privacy Policy ?

Definitions

What is a « Personal Data » ?	It is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, geolocation data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
What is a « Personal Data Processing » ?	This is any operation or set of operations that may or may not be carried out by automated means on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction
What is a « Controller » ?	It is the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of processing.
What is a « Processor » ?	It is the natural or legal person who processes personal data on behalf of the controller.
What is a « Consent » ?	It is any free, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or a clear positive act, that personal data concerning him/her be processed.

Who is the Controller ?

OKAIDI simplified joint stock company with a capital of 6 483 008 euros, registered at the trade and company register under the n°398 110 445, whose head office is located at 162 boulevard de Fourmies 59100 ROUBAIX represented by Grégoire DUFOREST in its capacity as general manager.

And

HI LITTLE KID LIMITED, a company incorporated under the laws of Nigeria, with a capital of 10,000,000 Naira

with registered office at 5 Club Road - Ikoyi - Lagos State - Nigeria, registered with the

Trade Register under number 1986068,

Represented by Mrs. Clarice BOUCHE, duly authorized,

Hereinafter referred to as "the Franchisee".

Both companies are joint Controllers (“the Joint Controllers”) they determine together the purposes and means of the processing operations defined below.

Where do we collect your Personal Data ?

Your Personal Data may be collected through multiple channels, such as, our network of stores, our websites, our mobile applications, or by phone or social networks.

4. What categories of Personal Data do we process?

The table below identifies the main categories of Personal Data that we may process about you :

Personal data categories	Description of the categories
Prospecting Data	This is the data we use to send you messages about our brands. This data includes: name, first name, e-mail address, telephone number.
Contest Participation Data	This is the data that you provide to us to participate in the contests that we organize. This data includes: name, first name, e-mail address, answers to the contest.
Customer Experience Data	This is data that you provide to us as feedback on our products and services.

Among the Personal Data collected, some are mentioned with an asterisk in order to specify the mandatory nature of the collection.

5. What Personal Data do we process and for what purposes?

Why do we collect your Personal Information?	What are the categories of data concerned by this processing?	What is the legal basis for processing your Personal Data?
Manage your subscriptions and send you brand news electronically. Allow us to set up and send you electronically advertising adapted to your needs.	Prospection Data	Consent In accordance with article L. 34-5 of the French Post and Electronic Communications Code, if the canvassing messages we send you concern products similar to those you have already purchased and if you have not objected to the sending of such messages.
To improve our products and our website based on your experience	Customer Experience Data	Legitimate interest of the data controller
Fight against Fraud	Prospection Data, Contest Participation Data	Legitimate interest of the data controller

Will you receive commercial offers?

We may use your Personal Data in the context of a commercial approach towards you, by e-mail and/or by SMS.

We respect the rules relating to the prior and express collection of the customer's consent for the sending of commercial prospecting.

When you create your account on the site, you are expressly asked to give your consent to receive promotional offers and news from us. Therefore, you will not receive any commercial prospecting if you have not consented to it.

More information on your rights in section n°12 "What are your rights on your Personal Data?”.

Do we collect Personal Data from minors under the age of 16?

We may collect Personal Data relating to children under 16 years of age. As such, the member agrees to be the holder of parental authority of the latter.

Who are the recipients of your Personal Data?

The Joint Controllers OKAIDI SAS and HI LITTLE KID LIMITED will only transmit your Personal Data to third parties for canvassing purposes if you have given your consent in this respect.

Internal recipient	Commercial Partners : “IDKIDS’ community” brand marks : Okaidi, Obaibi, Oxybul éveil et jeux, Idkids, Jacadi, N’Joy, Rigolo Comme La Vie, Bubblemag, Idtroc
External recipient	Authorized personnel of : Service Providers Subcontractors, within the framework of the following missions: management of the customer service, management of the online chat, processing and delivery of the order on the e-commerce site, routing of SMS and commercial emails, detection and prevention of fraud. The subcontractors act only on our behalf and on our instructions.

Are your Personal Data transferred outside the European Union?

Personal Data could be transferred outside the European Union, especially in the case of social networks exploitation.

How long do we keep your Personal Data ?

Find below the Data retention Period of the Processings :

Data's categories	Data retention Period
Prospection Data	3 years from the last contact we had with you
Contest Participation Data	Period of the Contest and 1 year in active base, then 4 years in archive
Geolocation Data	1 month after the Data’s registration

What security measures are applied to your Personal Data ?

The Joint Controllers OKAIDI SAS and HI LITTLE KID LIMITED take the necessary measures to ensure the security and the confidentiality of the Personal Data given, respecting the legal regulations in force.

What are your rights regarding your Personal Data ?

In accordance with the European Regulation 2016/679 of 27 April 2016 on the protection of Personal Data, you have the following rights :

Right of Access	You have the right to access your Personal Data. A copy of your Personal Data would be sent to you.
Right to request the rectification	You have the right to request the rectification of your Personal Data, if these need an update
Right to Object	You have the right to Object, anytime, to a process of your Personal Data, unless it is a legal obligation.
Right to erasure	You have the right to erase your personal data.
Right to Consult	You have the right to consult your personal Data in a structured format, frequently used and readable by machine.You can require the transmission of your Personal Data directly to the Controller when it is technically possible.
Right to limitation	You can obtain the limitation of a process, Vous avez le droit d’obtenir la limitation du traitement, including when your Personal Data are not correct.
Right to make advance directives	You can communicate your directives concerning your Personal Data after your death. You just have to address your wishes.

13. How can you exercise your rights regarding your Personal Data?

You can exercise your rights :

By mail, writing to : OKAIDI FRANCE 162 boulevard de Fourmies 59100 ROUBAIX FRANCE

Please note, in the exercise of rights by applicants, our Customer service could check your identity by asking for a valid identity card copy, if and only if there was reasonable doubt as to the identity of the applicant.

To facilitate the process of your request, it is easier to communicate your name, surname, email address and, if you have one, your fidelity account number.

The Joint Controllers commit to answer your request within a month from the date of the exercise of your right.

Finally, we remind you that you have the possibility of seizing at any time the Commission Nationale Informatiques & Libertés (CNIL) : https://www.cnil.fr/fr/agir

14. How to contact our Data Protection Officer ?

The company OKAIDI has names a DPO, that you can contact anytime by :

- Mail at the address : OKAIDI 162 boulevard de Fourmies 59100 ROUBAIX,

- or by using the "contact form" by choosing the section (Personal Data Protection)

15. Update of our Personal Data policy

The Joint Controllers could have to amend her Personal Data Policy. This modification is specified on the top of the section by writing the last date of update.