Privacy Policy

Protection and management of personal data:


General :

MAHALO SURF is concerned about the protection of personal data. It is committed to ensuring the best level of protection for your personal data in accordance with the Data Protection Act.

This Data Protection Charter describes how MAHALO SURF, as well as all the entities belonging to the same group, process your personal data when you use our website and our mobile applications made available to you.

Our charter also covers the other channels for collecting your personal data, in particular by telephone when you contact our customer service or directly at our agency.

Each solution or service processing your personal data may, in its own general conditions of use, have additional confidentiality rules to this charter.

For any information on the protection of personal data, you can also consult the website of the Commission Informatique et Liberté

User: Internet user connecting, using the aforementioned site:

The Data we collect :

In France, personal data is notably protected by law n° 78-87 of January 6, 1978, law n° 2004-801 of August 6, 2004, article L. 226-13 of the Penal Code and the European Directive of October 24, 1995.

On the site, the owner of the site collects personal information relating to the user only for the need of certain services offered by the site The user provides this information with full knowledge of the facts, in particular when he enters it himself. It is then specified to the user of this website whether he must provide this information or not.

The site collects your personal data when:

When browsing the site,
• When submitting a contact form. The data collected may be the surname, first name, address, email, telephone.
• When subscribing to the newsletter.

Special case of the newsletter :

The e-mail addresses collected as part of the mailing list are only used to send our newsletters. You can unsubscribe at any time by simply clicking on the unsubscribe link in each mail sent.


Use and transmission of your personal data :

No personal information of the user of the site is published without the knowledge of the user, exchanged, transferred, assigned or sold on any medium whatsoever to third parties. Only the assumption of redemption of the site would allow the transmission of such information to the prospective purchaser who would in turn be bound by the same obligation to store and modify data with respect to the user of the site.

These data will be processed automatically or not by MAHALO SURF, data controller, and are intended for MAHALO SURF and its service providers (suppliers, deliverers, partners).

The purpose of the automated processing of your personal data is the processing of your subscriptions to our Newsletters, the creation and management of your account, and more generally the management of customer and commercial relations.


The retention period of your data :

Your personal data is kept for the time necessary to achieve the objective pursued when it was collected. For example, when you purchase a product online or in-store, we retain the data related to your purchase, enabling us to perform the specific contract you have agreed to and we then retain the personal data for a period enabling us to process or to respond to complaints, requests for information regarding the purchase.

Your data may also be retained so that we can continue to improve your Customer experience with us.

The data collected about you will be kept for the duration necessary to fulfill the purposes described above, namely 3 years from the date of the end of the commercial relationship, i.e. the date of the last contact from the Customer.
The personal data concerning you may also be kept for longer under specific legal obligations or with regard to the applicable legal limitation periods, for example:

13 months for cookies from their deposit on your computer or terminal,
• 3 years for customer identification data (surname, first name, e-mail address, telephone number, etc.) after the end of commercial relations.
• 6 years for tax documents,
• 10 years for accounting documents,
• If applicable, for the entire duration of the litigation and until all remedies have been exhausted.


Exercise your rights :

In accordance with the law “Informatique et Liberté” of January 6, 1978, you have the permanent rights indicated below:

You have the right to request access to and rectification of your Data.
• You have the right to request the limitation of the processing of your Data.
• You have the right to request the deletion of your Data.
• You have the right to the portability of your Data (possibility of recovering part of your data in an open and machine-readable format).
In general, to exercise your rights, please send your request (indicating your email address, surname, first name, postal address and a copy of your identity document by email sent to and/or by post to the following address :

53 rue de la Barre
85800 Saint-Gilles-Croix-de-Vie

All requests must be accompanied by proof of identity. Note that you can directly consult, modify or even delete your personal data on our site by accessing your personal space, if necessary.

For any additional information on your rights, you can consult the CNIL website.
We will send you a response within a maximum of 2 months following the date of receipt of your request.

Procedure in case of loss of personal data :

In the event of a personal data leak, MAHALO SURF undertakes to notify the breach to the CNIL as well as to any user whose personal data has been corrupted as soon as possible, and then be able to try to remedy the breach. and mitigate any consequences.


Unless you object, you may receive, by post, commercial information from MAHALO SURF or third-party partner companies. Furthermore, if you have ticked the box provided for this purpose, you may also receive information electronically from these partners.

MAHALO SURF may also send you offers or emails electronically in connection with your previous purchases, unless you object.

The data collected by MAHALO SURF from its customers as part of an order may be communicated to a partner for purely statistical analysis purposes. This has no impact on the completion of the transaction. The data is communicated in strict compliance with the provisions of the law of January 6, 1978 amended in August 2004.