Privacy policy
Last updated: 27 October 2026
1. Data controller
The controller of the personal data collected on the website www.jiminis.com (hereinafter the “Site”) is ENTOMA, a French simplified joint-stock company (société par actions simplifiée) with a share capital of 22,812.62 euros, registered with the Paris Trade and Companies Register under number 788 416 709, whose registered office is located at 61 avenue de Saxe, 75007 Paris, France (VAT number: FR05788416709), publisher of the JIMINI’S brand (hereinafter “ENTOMA” or “we”).
For any question about your personal data: dpo@jiminis.com, or by post to the address above.
2. Purpose
This Privacy Policy explains how ENTOMA collects and processes your personal data when you use the Site, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”) and the amended French Data Protection Act no. 78-17 of 6 January 1978 (“loi Informatique et Libertés”). It forms an integral part of our General Terms and Conditions of Sale.
3. Data we process
Depending on how you use the Site, we may process the following data:
- Identification and contact data: surname, first name, email address, postal address, telephone number and, where applicable, title and date of birth if you enter them in your customer account;
- Order data: products ordered, amount, delivery and billing addresses, delivery method, tracking number, purchase history, exchanges with customer service;
- Payment data: payment method used and payment status. Your bank card details are entered and processed directly by our payment service providers: ENTOMA has no access to them and does not store them;
- Connection and browsing data: IP address, pages viewed, products added to the cart, information about your device and browser, cookie choices;
- Data you send us: messages sent via our contact or withdrawal forms, the online chat or by email.
4. Purposes, legal bases and retention periods
| Purpose | Legal basis | Retention period |
|---|---|---|
| Management of orders, payments, deliveries, returns and after-sales service | Performance of the contract | Duration of the commercial relationship, then archiving for the legal limitation periods (5 years) |
| Invoicing and accounting | Legal obligation | 10 years from the end of the financial year |
| Creation and management of your customer account | Performance of the contract | Until the account is deleted, or 3 years after your last login |
| Answering your requests (forms, chat, email) and handling complaints | Legitimate interest / performance of the contract | 3 years from your last contact |
| Sending the newsletter and commercial offers | Consent (or legitimate interest for customers, regarding similar products) | Until you unsubscribe, or 3 years after your last contact |
| Audience measurement and statistics | Consent | 13 months maximum for cookies; 25 months maximum for the data collected |
| Personalised advertising and measurement of the effectiveness of our campaigns | Consent | 13 months maximum for cookies |
| Security of the Site and prevention of fraud and spam | Legitimate interest | 13 months |
| Handling of requests to exercise your rights | Legal obligation | Time needed to process the request, then 5 years as evidence |
At the end of these periods, data is deleted or anonymised. Anonymised data may be used for statistical purposes.
5. Recipients of the data
Your data is intended for authorised ENTOMA staff. It may also be transferred to service providers (processors) who process it on our behalf, solely for the purposes of their assignment:
- Hosting and maintenance of the Site: 772424.com (France);
- Payment: Payplug SAS (France), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg), Klarna Bank AB (publ) (Sweden);
- Delivery and parcel tracking: La Poste – Colissimo (France), Mondial Relay (France), Shipup (France);
- Customer service: Tawk.to (online chat);
- Sending of emails and the newsletter: Mailjet (France);
- Cookie consent management: Axeptio (France);
- Security and spam prevention: Google Ireland Limited (reCAPTCHA), Automattic Inc. (Akismet);
- Audience measurement and advertising, only with your consent: Google Ireland Limited (Google Analytics, Google Ads, Google Tag Manager), Meta Platforms Ireland Limited (Facebook, Instagram), LinkedIn Ireland Unlimited Company.
We require our processors to provide sufficient guarantees regarding the security and confidentiality of your data.
Finally, your data may be disclosed to public authorities where required by law. In the event of the transfer of all or part of ENTOMA’s business, it may be transferred to the acquirer, who will be bound to comply with this Privacy Policy.
6. Transfers outside the European Union
Some of our service providers (in particular Google, Meta, LinkedIn, Automattic and Tawk.to) may process data outside the European Union, in particular in the United States. These transfers are governed by the safeguards provided for by the GDPR: an adequacy decision (in particular the EU–US Data Privacy Framework, for certified companies) or standard contractual clauses adopted by the European Commission.
7. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
- right of access to your data;
- right to rectification of inaccurate or incomplete data;
- right to erasure, except where retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims;
- right to restriction of processing;
- right to object, at any time and without justification to direct marketing, and on grounds relating to your particular situation to processing based on our legitimate interest;
- right to data portability for the data you have provided to us, where processing is based on your consent or on the performance of the contract;
- right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
- right to give instructions regarding the fate of your data after your death.
To exercise these rights, write to us at dpo@jiminis.com or to ENTOMA – 61 avenue de Saxe, 75007 Paris, France. If we have reasonable doubts about your identity, we may ask you for proof of identity. We will reply within one month, which may be extended by two months if the request is complex.
You can unsubscribe from the newsletter at any time using the link included in each email.
If you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr), or with the data protection authority of your country of residence.
8. Security
We implement appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access. Exchanges between your browser and the Site are encrypted (HTTPS protocol).
9. Cookies and trackers
When you browse the Site, cookies and other trackers may be placed on your device:
- Cookies necessary for the Site to function (cart, login to your account, security, storage of your cookie choices): they do not require your consent;
- Audience measurement cookies (Google Analytics): they help us understand how the Site is used in order to improve it;
- Advertising cookies (Google Ads, Meta, LinkedIn): they measure the effectiveness of our campaigns and allow us to show you advertising tailored to your interests;
- Third-party services (Tawk.to chat, videos, social networks): they may place their own cookies.
Non-essential cookies are only placed with your consent, collected via our cookie banner. You can change your choices at any time by clicking on the cookie management link on the Site. Your choice is kept for a maximum of 6 months if you refuse and 13 months if you accept, after which you will be asked again.
You can also configure your browser to refuse or delete cookies (in the “Privacy” section of the Chrome, Firefox, Safari or Edge settings). Refusing certain cookies may limit access to some features of the Site.
10. Changes to the Privacy Policy
We may amend this Privacy Policy, in particular to take account of changes to our services or to regulations. The version in force is the one published on the Site, with its date of update. In the event of a substantial change, you will be informed by appropriate means.