Privacy preferences

About cookies

Cookies are small text files saved by your browser. You can change your preferences at any time on this page. For more information, please consult our policy.

Details of the services used

The cookies placed on your browser fall into the three categories above. Here we list the providers actually used, the purpose pursued and the retention period.

Essential (always active)

• csrf_token: protection against CSRF attacks (duration: session).
• auth_token: keeps your session active while you are logged in (duration: 7 days).
• cookie_consent / consent_analytics / consent_marketing: storage of your consent choices (duration: 13 months, in accordance with the CNIL recommendation of 17 September 2020).

Analytics — Google Analytics 4

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
• Purpose: audience measurement, analysis of browsing behaviour, improvement of usability and content.
• Cookies placed: _ga, _ga_* (duration: 13 months maximum).
• Transfers: data may be transferred to the United States. Google LLC is Data Privacy Framework certified (European Commission adequacy decision of 10 July 2023).

Advertising & personalisation — Google Ads

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
• Purpose: measurement of conversions from advertising campaigns, remarketing, ad personalisation.
• Cookies placed: _gcl_*, IDE, NID, AID (duration: from 30 days to 24 months depending on the cookie).
• Transfers: data may be transferred to the United States under the same conditions as above (Data Privacy Framework).

Legal basis for processing

Analytics and advertising cookies are placed on the basis of your consent (article 82 of the loi Informatique et Libertés (French Data Protection Act) of 6 January 1978 as amended, and article 6, § 1, a) of the General Data Protection Regulation). Cookies strictly necessary for the operation of the site do not require your consent (article 82, paragraph 2 of the same law).

Consent Mode v2

We use Google's "Consent Mode v2" mechanism. Until you have expressed a choice, the advertising signals (ad_storage, ad_user_data, ad_personalization) and analytics signals (analytics_storage) are set to "denied". They only switch to "granted" after acceptance of the corresponding categories above.

Withdrawal of consent

You may withdraw your consent at any time by changing your preferences on this page or by clicking "Review the consent banner" above. Withdrawal applies only for the future and does not affect the lawfulness of processing carried out previously.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability of your data. You may exercise these rights at any time by writing to contact@oliviabalm.com. You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL, the French data protection authority, 3 place de Fontenoy, 75007 Paris, www.cnil.fr).