Cart (0)
You'll also love:
Bath mat - the peach
Changing mat - the vichy
Shower mat - the terrazzo
Your cart is empty
Access and use of the website www.tapilou.com (hereinafter referred to as “ Site ") is likely to involve on your part the provision of a certain amount of personal data (hereinafter referred to as " Personal data ) concerning you.
To preserve your trust, We, the company TAPILOU, We invite you to read our policy on this subject, which describes the data collected, the use made of it, and the rights you have regarding it.
« Client » designates the customer user of the Site.
" Customer account " designates the account that you have created as a Customer and user and which is accessible using your Identifiers.
“Geolocation data” means data that identifies your location in a reasonably specific manner, for example using latitude and longitude coordinates obtained by GPS, Wi-Fi or mobile triangulation.
“Personal Data” designates any information relating to an identified or identifiable natural person; is deemed to be a “identifiable natural person» a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements of their own to their physical, physiological, genetic, psychological, economic, cultural or social identity.
“Credentials” designate your email address as well as your password.
“Computer and Liberties Law” designates Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms (amended by Law No. 2018-493 of June 20, 2018).
« Product(s) » designates the play mat(s) for babies and toddlers 100% made in France marketed by the Company on the Site.
“EU Regulation 2016/679” means Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
« Services » designate all the functionalities made available to you through the use of the Site.
« Site » designates the TAPILOU website which is exclusively intended for you as a user and non-professional customer (individual) and accessible at the URL www.tapilou.com.
« Terminal » means the smartphone, tablet or other hardware with an operating system compatible with the Site and from which you access the Content and Services.
The website www.tapilou.com is published by the company TAPILOU, a simplified joint stock company with capital of 1,000 euros registered in the Marseille trade and companies register under number 882 014 095 whose head office is located at 58, montere de Saint-Menet, 13011 Marseille – France, represented by Madame Déborah Goldberg, in her capacity as president.
As part of the use of the Site, we collect and process a certain amount of Personal Data concerning you.
We are therefore responsible for processing within the meaning of the Data Protection Act and EU Regulation 2016/679.
We only collect, via the Site, your Personal Data which is strictly necessary for the proper execution of the services offered, namely:
You undertake to communicate complete and accurate information in order to enable the proper execution of the Site Services.
The Personal Data that we collect for the creation of your account are: your name, your first name, your email address and your password.
This data is collected to allow you to create a Customer Account and have access to the Services.
We collect the data strictly necessary for payment of your order, namely, depending on the payment method chosen:
IT IS STRONGLY RECOMMENDED TO READ THE CONFIDENTIALITY POLICIES OF OUR PAYMENT SOLUTION PROVIDERS BEFORE ANY ORDER VALIDATION[1].
We guarantee to take all appropriate organizational and technical measures to preserve the security, integrity and confidentiality of your banking data against any unauthorized access, use, misappropriation, communication or modification by using secure payment systems that comply with the state of the art and applicable regulations. This data is notably encrypted using an algorithm deemed “strong”.
The Personal Data that we collect for the management of your orders are: your name, your first name, your email address, your delivery address, your telephone number, your billing address, and possibly the first and last name of the person to whom you wish to offer a Product or a gift card.
This data is collected to enable us to manage your order and deliver the Products to the person concerned.
Via the contact form, we collect data relating to your last name, first name, email address as well as the subject and content of the message you wish to send us.
The contact form allows you to contact us to find out more about our Products, make a comment about them or ask us a general information question. The data is thus collected so that we can contact you in return with a view to responding to your message.
The Personal Data that we collect to subscribe to our Newsletter is limited to your email address.
This allows us to send you our Newsletter.
We also collect your geolocation data if you authorize us to receive it by activating access to geolocation data through the settings of your smartphone, tablet or any other device with an operating system compatible with the Site.
We collect your data:
The data will be collected and processed in a fair and lawful manner, and will be used to provide the services offered on the Site.
As part of the orders you place on the Site, the legal basis for collection and processing is the execution of the sales contract concluded between TAPILOU and the Customer.
Concerning other processing, we only collect your Personal Data to the extent that you have expressly expressed your consent.
You can withdraw your consent at any time by sending a request to this effect to the following contact details:
The withdrawal of your consent only applies for the future and does not call into question the lawfulness of the processing carried out prior to the withdrawal of your consent.
You can consent or object to the use of your email address when you communicate your data, so that we send you our newsletter or commercial offers electronically.
You can object to this prospecting at any time via the link provided for this purpose in all the emails you receive.
TAPILOU is the sole recipient of all data collected and processed. Only duly authorized TAPILOU personnel may read it.
Our service providers responsible for delivering your Products also have access to only the data necessary for the successful completion of their delivery service, namely: your name, first name, email address, telephone number and your delivery address.
Our payment solution providers also have access to only the data necessary for the proper performance of their service as specified in article 3.2 hereof.
Finally, our subcontractor IT service providers may possibly have access to the data during their maintenance operations, but cannot under any circumstances carry out any other data processing operation, such as modification or use of the data.
Your personal information will never be sold, exchanged, transferred or given to any other company for any reason, without your consent, other than as necessary to respond to a request from you.
No data is transferred outside the European Union or a country that does not ensure a sufficient and appropriate level of data protection in accordance with European Union regulations on Personal Data. .
Anonymized data, however, may be provided to other parties for marketing, advertising or other uses.
As part of the data processing carried out, we use the company SHOPIFY, a company incorporated under Canadian law, whose premises are located at 151, rue O’Connor - Ottawa, Ontario K2P 2L8 – Canada, which ensures:
We guarantee that our subcontractors host the data within the European Union or in a country ensuring a sufficient and appropriate level of data protection and provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures in a manner that the processing meets the requirements of EU Regulation 2016/679 and the Data Protection Act.
In any case, any subcontracting carried out is done in strict compliance with this document. Consequently, we guarantee that our subcontractors do not under any circumstances exceed the processing methods defined in this document.
The subcontractor may itself be authorized to subcontract all or part of its operations subject to strict compliance with the provisions of Article 28 of EU Regulation 2016/679 and this document.
However, as data controllers, we remain your sole contact.
In accordance with current regulations, you have rights over your Personal Data.
To exercise these rights, you must write to us specifying the subject of your request and providing proof of receipt of your request.
Any request for information about your rights or any request to exercise one of your rights should be sent to the following contact details:
Any request to exercise your rights will be accompanied by a copy of your identity document in order to avoid any fraud and/or illicit access to your data.
However, some personal information may be exempt from such requests in certain circumstances, for example if it infringes the rights and freedoms of third parties. If an exception applies, we will let you know by responding to your request.
In accordance with current regulations, you have the right:
You have the right to portability of your data, which must be returned to you by us in a structured, commonly used and machine-readable format, if you wish.
You can only exercise this right to portability with regard to data that you have actively and consciously declared or that you have generated by your activity, in particular in the context of the use of the contact form, excluding any other data that is calculated, derived or inferred from the data you provide.
Furthermore, only data processed automatically and collected on the basis of your consent or the execution of a contract are affected by this right.
We reserve the right not to comply with your request to the extent that the data concerned by your request does not meet the aforementioned conditions.
For all data that does not meet the aforementioned criteria, you can only exercise the rights mentioned in the previous clause.
We will not prevent the transmission of data concerned by the right to portability to another data controller, either through you or directly when this proves technically possible. In the event that direct transmission of data to another data controller is not technically possible, we will inform you and offer you an alternative solution.
We are not responsible for the processing you carry out on the data resulting from the right to portability once you have recovered it. We are also not responsible for the processing carried out by the company which recovered your data following a request you made to this effect.
In accordance with the regulations in force, you can formulate advance directives on the use of your data after your death (for example: conservation, deletion, disclosure).
You can change or withdraw your instructions at any time.
You are informed of your right to contact the CNIL in the event of non-compliance with legal and regulatory provisions on our part in the management of your Personal Data.
To do this, you can contact the CNIL using the following link: https://www.cnil.fr/fr/plaintes
Notwithstanding the above, as data controller, we remain your sole contact.
9.1 We keep your Personal Data in an identifiable format only for a period strictly necessary for the management of our commercial relationship and compliance with our legal and/or regulatory obligations.
To the extent that you are a Customer and hold a Customer Account, some of the data collected about you are kept for a period of five (5) years following the current year when the end of the contract between us occurs (deletion of the Customer Account) in intermediate archives[2] and this, to be able to respond to you in the event of a conflict.
9.2 The data collected from the contact form is kept for the duration necessary for us to respond to you and, possibly, for the duration of successive exchanges which take place between you and us. We subsequently archive this data for a period not exceeding one (1) year from their collection or the last message you sent to us.
9.3 The banking data collected on the Site as part of the payment of the Products are kept until the last payment due date. The banking data is then kept in intermediate archives[3] for thirteen (13) months following the debit date or fifteen (15) months in the case of deferred debit payment cards, and can only be used in the event of dispute of the transaction by the Customer, for purposes of proof , in accordance with article L.133-24 of the Monetary and Financial Code.
9.4 In the event that you have not objected to commercial prospecting, the Personal Data concerning you are kept for a period of three (3) years from their collection or the last contact from you (for example, a request documentation or a click on a hypertext link contained in an email constitutes a contact from you. On the other hand, opening an email cannot be considered as a contact from you). At the end of this three (3) year period, we may contact you to find out if you wish to continue to receive commercial solicitations. In the absence of a positive and explicit response from you, the data will be deleted.
9.5 In the event of exercising the right of access or rectification, data relating to identity documents are kept for the period provided for in Article 9 of the Code of Criminal Procedure, i.e. one (1) year.
In the event of exercising the right of opposition, data relating to identity documents may be archived during the limitation period provided for in Article 8 of the Code of Criminal Procedure, i.e. three (3) years.
In the event of exercising the right to object to receiving commercial prospecting, the data necessary to take into account the exercise of your right, such as your email address, are kept for three (3) years from the date of receipt. exercise your right and cannot be used for any other purpose.
9.6 Furthermore, we may retain anonymous or anonymized data using an irreversible process for an unlimited period for statistical reprocessing purposes. Given the anonymous nature of this data, they are not considered personal data within the meaning of EU Regulation 2016/679.
Browsing the Site may cause cookies to be installed on your Terminal.
A cookie is a small file, which does not allow your personal identification, but which nevertheless records information relating to the navigation of a Terminal on a website.
These cookies improve access to our website and identify repeat visitors. Additionally, our cookies improve your experience by tracking and targeting your interests.
The cookies used on the Site are placed by us or by third parties.
We place on the Site cookies that are strictly essential for browsing the Site, cookies whose sole purpose is to enable or facilitate communication by electronic means and audience measurement cookies whose purpose is limited to measuring audience of the content viewed in order to allow an evaluation of the published content and the ergonomics of the Site.
Google Analytics and Hotiar cookies for the purpose of audience measurement are placed by third parties.
We automatically receive and record information from your Device and browser, including your IP address, software and hardware, and the page you request.
Collecting the IP address is essential to allow you to communicate on the Internet, but does not provide more precise information than the city, and the IP address is anonymized once the geolocation is done.
Cookies used in addition to cookies strictly necessary for browsing the Site are used for the following purposes:
Cookies that are not strictly necessary can be disabled by following the instructions given in the “ How to configure cookies? " below.
Cookies strictly necessary for the provision of a service on the Site expressly requested by you do not require your consent.
However, cookies that are not strictly necessary for browsing the Site require your consent. As long as you have not given your consent, these cookies cannot be placed or read on your Terminal. You are informed of this by the appearance of a banner.
You can withdraw your consent to storing or reading certain cookies on your Terminal at any time.
The validity period of this consent is thirteen (13) months. At the end of this period, your consent will be collected again.
Cookies are kept for a maximum period of thirteen (13) months on your Terminal. Beyond this period, cookies are permanently deleted from said terminals. This duration is in no case extended in the event of a new visit to the Site.
The data collected via cookies is not combined with any other data processing.
You have the right to object to cookies through an opposition mechanism by sending a request to this effect to the following address: contact@tapilou.com.
If you exercise such a right, no data concerning you is collected.
You are informed that refusing to install a cookie may result in it being impossible to access certain services on the Site.
In order to refuse the installation of cookies that are not essential for browsing the Site, you can configure the settings of your internet browser as follows:
Please note, however, that taking your consent into account relies on a cookie. Therefore, if you delete all the cookies stored in your Terminal via your internet browser, we will be unable to know that you have chosen this option.
Attention : if you systematically refuse the installation of all cookies on your Terminal, including those strictly necessary for navigation, via the “ block all cookies », your navigation on the Site may be limited, and access to certain services may prove impossible.
For more information, you can consult the CNIL website via the following link:
https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
You can contact us if you have general questions or concerns about this privacy policy or how we process your Personal Data at the following address: contact@tapilou.com or via the contact form.
We may update this privacy policy at any time in the event of changes to our practices and in particular to the functionality of the Site.
In the event of a change to our privacy policy, we will necessarily update the “ update date » hereof. We will not fail to inform you of any substantial modification relating to the processing of your data by placing a visible notice on the Site.
[1] Hyperlinks:
https://www.paypal.com/fr/webapps/mpp/ua/privacy-full
[2] By intermediate archiving, we mean data which still presents an administrative interest for the services concerned (in the event of litigation for example), and whose retention periods are fixed by the legal rules of limitation.