Privacy Notice

Privacy Notice

Last Updated: September 2024 

Who we are 

This website is operated by a company within the Dorel Juvenile group of companies (referred to herein as "we" or "us") and in some instances, may be operated in conjunction with one of our distribution partners. The relevant Dorel Juvenile company that is responsible for your personal information will be the Dorel Juvenile company that you provided your personal information to. For more information about the Dorel Juvenile group of companies and brands, or the specific Dorel Juvenile company responsible for your personal information, please see www.doreljuvenile.com or contact us using the contact details listed below.  

We recommend that you read this Privacy Notice in full to ensure you are fully informed.   

 

Our Commitment 

We take your privacy seriously. We are sensitive to privacy issues and believe it is important you know how we treat the information about you that we receive via this website (the "Site"). Please read this Privacy Notice (“Notice”) to learn more about how we collect, use, disclose and store information. We gather various types of information, including information that identifies you as an individual (Personal Data). This is explained below. 

If you wish to contact us with any question about how we process your Personal Data, you can do so via dataprivacy@dorel.eu. You can also contact us by using the contact details listed below.  

 

Information We May Collect 

When you visit the Site, our servers capture the IP addresses, domain names and network identifiers of our users. In some countries, including those in the European Economic Area, this information may be considered personally identifiable information under applicable data protection laws. This information is aggregated so that we can measure the number of visits, average time that you (as a visitor) spend on the Site, the pages viewed, and other similar usage information. We use this information to measure the use of our Site and applications, and to improve the content and functionality of our Site. 

 

Website 

When accessing the website: When you access the Maxi-Cosi website, we process technical data like IP address, product identifiable data (serial numbers and mac addresses), and media authentication data (i.e. Meta (Facebook), Google). For additional information please check our Cookie Notice.

When placing orders: When you place an order with Maxi-Cosi, we process the following data: Email address, first name, last name, username, billing and shipping addresses, other physical address (street, city, post code, country), and phone number Collecting this data allows us to efficiently process your order and provide you with answers to any questions you might have about your order. The data will be kept for a period of 7 years, to comply with our legal obligations. 

When creating an account: When you create an account, we process the following data: Email address, first name, last name, password, and order history. This data helps us make your shopping experience more personalized and answer any questions you might have about your orders. 

You have the right to delete your account at a time of your choosing. To delete your account, please review your Data Protections Rights in this policy and contact us by sending an email to dataprivacy@dorel.eu. 

When contacting us: When you contact us, we process the following data: Email address, first name, last name, and phone number (if you choose to provide it). This data enables us to process your requests and answer any questions you have going forward. After you contact us, the case is created in Salesforce and is stored at least for 90 days.  

Maxi-Cosi SWAP service: When you use our SWAP service, we process the following data: Email address, first name, last name, address (street, city, post code), gender (if you choose to provide it). This data enables you to make use of our SWAP service if you’ve been involved in a road accident and require a replacement car seat. 

 

CRM 

Newsletters and Communications: Maxi-Cosi wants to keep you up to date regarding exclusive promotions, personalized advice and news via our Maxi-Cosi newsletter. 

Consent: We’ll ask for your consent before sending our newsletter to you. Each newsletter contains an opt-out link that leads to an unsubscribe page where you can choose to no longer receive our newsletter emails. 

 

Processing information 

We want our newsletter to be relevant to you, and that’s why we tailor the information you receive from us. In order to do that, we process the following data:  

Contact information: Including your first name, second name, email address, address, gender, language, country, number of registered products, due dates, and date of birth of your children. 

Order information: Including your order history, product preference history, and products in your basket. 

Technical information: Including subscriber key and account type. 

 

In order to provide you with the best use and information about our juvenile products you may also voluntarily provide us with information about the people in your household including your children's picture, its name and age and the names and contacts of other people (emergency contacts), in order to protect the vital interests of another personal individual (namely children). Providing information about due dates and dates of birth of your children may also be provided, and we will ask for your explicit and specific consent to process this sensitive information.  

 

Connected Home 

The personal data collected by Dorel Juvenile APPs will be outlined and managed by the Privacy Policy disclosed in the Connected Home app. 

 

Paid Campaigns 

We’ll show you relevant advertisements on social media and third-party websites about our latest products or offers based on your interests. If you click on an advert for one of our products on a platform like Google or Facebook, the platform records that you’ve clicked on an advert from Maxi-Cosi and on which channel the advert was displayed. 

Your click behavior, IP address, email address, name and orders placed on the Maxi-Cosi website are only shared with an advertising channel if you have given consent for the placement of associated cookies. 

You can revoke your consent for these advertising cookies at any time in the cookie declaration. 

 

Use and Sharing of Information Collected    

Unless otherwise disclosed during its collection, personally identifiable information that may be collected in connection with visitors to this Site is retained by us or our parent, subsidiaries, or sister companies ("Affiliates"). We and our Affiliates do not sell, transfer or otherwise disclose this personally identifiable information outside those companies, except as disclosed below or where disclosure is required by law. 

We may use the personal information you provided for any of the following purposes:  

  1. to contact product owners in response to product recalls; 
  2. to understand the use of our Site and make improvements;  
  3. to fulfill prizes;  
  4. to respond to specific requests from visitors;  
  5. to obtain parental consent from visitors under 16 years of age (or the applicable age of majority if higher in a particular jurisdiction), where necessary;  
  6. to provide any necessary notices to our visitors or their parent or guardians, where necessary;  
  7. to protect the security or integrity of our Site when necessary; 
  8. to protect the vital interests of the data subject or of another natural person; 
  9. to send you notices and solicitations regarding the Site, our products or our Affiliates;  
  10. to share with authorized retailers and distributors of our products to promote our products to you; and, 
  11. in general to promote and market our products and/or products of our Affiliates to you. 

We also may share personal information with third parties for the following purposes: 

  1. to provide us with services in connection with the purposes listed above, such as website hosting, professional services (including information technology services and related infrastructure), customer service, shipping of items you order, operating this Site, auditing and other similar services necessary to the operation of the Site and services you request.  

In such cases, the information will be shared for the purpose stated and not for independent use by the service provider; 

  1. to provide you with the possibility to submit reviews and to comment on or rate products / services provided by us; 
  2. in connection with an actual or potential corporate reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock;  
  3. to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary: 
  4. as a matter of applicable law or regulation,  
  5. to exercise, establish or defend our legal rights, or  
  6. to protect your vital interests or those of any other person; and to any other person with your consent to the disclosure. 

 

Legal basis for processing personal information 

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.  However, we will normally collect personal information from you only: 

  1. where we need the personal information to enter into or perform a contract with you, for example when you purchase our products, 
  2. where the processing is in our legitimate interests and not overridden by your rights, for example to tailor our marketing to you, or  
  3. where we have your consent to do so.   

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person. 

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). 

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), these interests will generally relate to: operating our platform and communicating with you as necessary to provide our services to you, responding to your queries, improving our platform, undertaking marketing, or for the purposes of detecting or preventing illegal activities.  We may have other legitimate interests and if appropriate we will make clear to you at the relevant time what those legitimate interests are. 

In the case of any sensitive information which we collect from you, such as information about your health (including your pregnancy status) we will seek your explicit consent to process this information.  

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided below. 

 

Children 

It is our policy that visitors to our Site who are under the age of 16 (or applicable age of majority if higher in a particular jurisdiction) should not post on or provide information to our Site without the consent of their parents. You should supervise the online activities of your children and consider the use of parental control tools available from online services and software providers that help provide a kid-friendly Internet environment. The Site is not intended for children under the age of 13. We will not knowingly collect any personally identifiable information from children under the age of 13 from the site.  

We currently process personal information about children under the age of 16 when necessary to protect the vital interests of the data subject or of another natural person, or with parental consent and we only retain personal information of children where we have a lawful basis to do so. 

 

Cookies, web beacons, and online advertising  

A technology called "cookies" may be used to provide you with tailored information. A "cookie" is a tiny element of data that a website can send to your browser, which may then be stored in your browser so we can recognize you when you return. Further information about how we use cookies and similar tracking technology can be found in our Cookie Notice. 

 

Social Network Access  

If you sign in or link to the Site through any social networking service, such as Facebook (Meta), Instagram, X (Twitter), You Tube, and other services, any information you supply (or have supplied) to us becomes subject to the Privacy Notice of that social network/service.  We do not control, and are not responsible for, the privacy practices of such networks or services.  You should consult the Privacy Notice of such networks/services.  

 

Security for Privacy  

Dorel Juvenile has technical and organizational security measures in place to protect Personal Data. Some of the measures we use in different circumstances are encryption, secured entry points to our servers, vulnerability scanning, penetration testing and monitoring, and training for our personnel to protect against the loss, misuse, and alteration of the information under our control. However, no system is perfect or can guarantee that unauthorized access or theft of information will not occur.    

Notwithstanding that Dorel Juvenile has security safeguards in place to protect Personal Data, our visitors and customers are always encouraged to take measures to protect themselves against unintended intrusions to their personal privacy (i.e., maintain access pass codes and/or PINs in a confidential manner). 

 

International data transfers – Data Storage 

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident.  These countries may have data protection laws that are different to the laws of your country. 

Specifically, Google Cloud hosts our Site servers, which may be hosted in different countries depending on the Site you use. Our group companies and third-party service providers and partners also operate around the world, including France where our main data center is located.  This means that when we collect your personal information, we may process it in various countries. 

However, we have taken safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. These include implementing the European Commission's Standard Contractual Clauses for transfers of personal information between our group companies.  We have also implemented safeguards with our third-party service providers and partners. Further details and copies of the standard contractual clauses can be provided upon request. 

 

Data retention 

We will keep personal information about you for as long as we have an ongoing legitimate business need to do so, for example while providing service to you, as long as we are addressing a question, a complaint, addressing a concern or request that you have made to us, as applicable to our interactions with you, or for future marketing purposes. 

Regarding Data Subjects Rights Requests, any additional information provided for the purpose of confirming a data subject’s identity is kept only for the time required to handle the data subject request (i.e. submitting a reply to the data subject), after which it is deleted. 

Any other personal data submitted to Dorel Juvenile by the data subject in the context of a data subject rights request is kept for six years from the date of the request, in accordance with applicable data protection law principles (e.g. data minimisation) and approved retention schedules. This retention period does not affect any other retention period that was previously applicable in the context of other processing operations. 

Records may undergo sampling and selection according to records management principles, and provided that the data subject is duly informed, where Dorel Juvenile is required to process such data in case of audits and/or legal action, this six-year retention period can be extended. 

If we have a contract or other agreement with you, we will follow the retention obligations of that agreement. 

If we collected your personal data with your consent, we will keep the data for as long as we have the purpose for the processing. We will delete the data if you remove your consent on the processing or when we don’t have the purpose to do so.  

We may keep data longer if we have a legal obligation to keep it or to maintain necessary records for legal, financial, compliance, or other reporting obligations, and to enforce our rights and agreements. 

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.  

 

Third-Party Sites 

This Site may contain links to other sites of third parties. We are not responsible for the content of those websites or the privacy practices of those other sites or sites that they, in turn, may link to. 

 

Your data protection rights 

If you are in the European Union or in the European Economic Area, and therefore, subject to the General Data Protection Regulation, you have the following data protection rights, which you can exercise by contacting us using the details below: 

  1. the right to access, correct, update or request deletion of your personal information; 
  2. the right to object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information; 
  3. the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing e-mails we send you. Alternatively, you can indicate your marketing preferences for email, phone and postal marketing during registration or at any time by contacting us using the contact details provided below;  
  4. the right, if we have collected and processed your personal information with your consent, to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. 

Dorel Juvenile will make reasonable efforts to provide you reasonable access to any of your personal information we maintain within 30 days of your access request so that you can review, make corrections, or request deletion of your data. If we cannot honor your request within the 30-day period, we will tell you when we will be able to provide access, which will be no later than 90 days after your initial request. In the unlikely event that we are not able to provide you access to this information, we will explain why we cannot do so. 

If you are in the European Union and therefore subject to the General Data Protection Regulation and have an unresolved privacy or personal data collection, use, or disclosure concern that we have not addressed satisfactorily, please be aware you can address your concern to your local Data Protection Authority. 

 

Changes and Updates 

We may revise this Privacy Notice from time to time. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. If you do not agree with the policy, you should cease use of the Site immediately. You can see when this Privacy Notice was last updated by checking the "last updated" date displayed at the top of this Privacy Notice.   

If you have any questions or concerns about our use of your personal information, please contact us by sending an email to dataprivacy@dorel.eu.