GDPR Privacy Policy

1. Data controller

The data controller is DORIIMU, SIREN 837910488, located at 10 Rue de la Chaussee d’Antin, 75009 Paris. For any request about your personal data, contact: info@doriimuparis.com.

2. Data collected

Depending on the features used, DORIIMU may process: member number, name, email, phone number, country code, birth year, sex, postal code, invitation code, email subscription preference, sign-in history, IP address, device type, approximate location, points, coupons, membership level, event registrations and proof of Terms/GDPR consent.

3. Purposes and legal bases

Data is used to create and manage the member account, provide points, coupons and benefits, secure the service, prevent abuse, respond to requests, manage event registrations and send necessary service communications.

Legal bases may include performance of the member service, DORIIMU legitimate interest in security and program management, compliance with legal obligations, or your consent for certain communications and options.

4. Recipients

Data may be accessible to authorized DORIIMU staff, store administrators according to their permissions, technical providers needed for the website, hosting, email, SMS, security and member platform, and authorities where required by law.

5. Retention

Member account data is retained permanently unless the customer requests account deletion, subject to legal obligations or data that must be kept to defend DORIIMU rights.

6. Your rights

Under the GDPR, you may request access, rectification, erasure, restriction, objection and, where applicable, portability of your data. You may also withdraw consent you have given.

You may edit certain information directly from your member center. To request an additional change or account deletion, contact: info@doriimuparis.com. You may also lodge a complaint with the CNIL.

7. Security

DORIIMU implements reasonable measures to protect data against unauthorized access, loss, alteration or disclosure. No system can guarantee absolute security.

8. Cookies, reCAPTCHA and third-party services

The website may use session and security cookies, as well as Google reCAPTCHA to limit automated abuse. These services may process technical data necessary for their operation.

9. Updates

This policy may be updated to reflect changes in the service, regulations or internal organization.