Legal · GDPR
Privacy policy
Montres Outlet attaches the utmost importance to the protection of your personal data. This policy explains what data we collect, why, how we use it and what your rights are. It applies in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the Swiss Federal Act on Data Protection (FADP).
Data controller
Montres Outlet
Aeschengraben 29, 4051 Basel, Switzerland
Email: contact@montres-outlet.com
Data collected
We only collect the data needed for our services:
- Identity data: surname, first name
- Contact details: email address, postal address, phone number
- Order data: items purchased, amounts, references, history
- Connection data: IP address, browser, pages visited, session duration (via analytics cookies)
- Newsletter data: email address if you subscribe voluntarily
We do not collect sensitive data (health, origin, beliefs). Card details are processed exclusively by our certified payment providers (Stripe) and never pass through our servers.
Purposes of processing
Your data is used to:
- Process and ship your orders (basis: performance of the contract)
- Manage your customer account and your history (basis: performance of the contract)
- Send you transactional emails: order confirmation, tracking, warranty (basis: performance of the contract)
- Send you our newsletter if you have consented to it (basis: consent, withdrawable at any time)
- Offer to register the warranty of your purchase with Authentifia, after the end of the withdrawal period (basis: legitimate interest, with the option to object)
- Prevent fraud and secure transactions (basis: legitimate interest)
- Improve our services and analyse browsing (basis: legitimate interest, with the option to object)
- Comply with our accounting and tax obligations (basis: legal obligation)
Data sharing
Your data is never sold or transferred to third parties for commercial purposes. It may be shared with:
- Carriers (name, address, phone number) for delivering your order
- Payment providers (Stripe) for secure transaction processing
- Cloud host (ISO 27001 certified datacentres in the European Union, distribution via Cloudflare) for the technical infrastructure
- Emailing service (Resend) for sending transactional emails
- Authentifia (name, email address, order reference and date, product designation) for registering the warranty of your purchase and issuing the corresponding certificate
Authentifia is a body independent of Montres Outlet, specialising in traceability and warranty registration. Data is passed to it for that sole purpose, from the end of the withdrawal period, and never for commercial purposes. Registering your warranty remains optional: it is a condition neither of the legal guarantee of conformity nor of the seller's commercial warranty, which apply as of right. You may object by writing to contact@montres-outlet.com.
With the exception of Authentifia, these providers act as processors and are contractually bound to comply with the GDPR. Some are established outside the EU (United States); transfers are governed by the European Commission's standard contractual clauses.
Authentifia is not a processor: it keeps its warranty register on its own behalf and issues certificates in its own name. It is therefore a separate data controller, and you exercise your rights directly with it for the data it holds, at the address given on its website.
Data retention
- Order data: 10 years (accounting obligation)
- Customer account: for as long as the account is active + 3 years after the last interaction
- Newsletter: until you unsubscribe
- Browsing data (cookies): 13 months maximum
Your rights
In accordance with the GDPR and the Swiss FADP, you have the following rights:
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: request the deletion of your data
- Restriction: restrict certain processing
- Portability: receive your data in a structured format
- Objection: object to certain processing (newsletter, analytics)
- Withdrawal of consent: at any time for processing based on consent
To exercise these rights, write to us at contact@montres-outlet.com stating your name and the email address used for your order. We respond within one month.
If you believe your rights are not being respected, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the data protection authority of your country of residence in the EU.
Security
We implement appropriate technical and organisational measures: TLS encryption, restricted data access, access monitoring, regular backups. Our providers are chosen for their high level of security. In the event of a data breach likely to affect your rights, you will be informed without undue delay, in accordance with legal obligations.
Changes
We may update this policy. The update date is shown at the top of the page. In the event of a substantial change, you will be informed by email if you have an account. The version in force on the site prevails.