Decision 2015-063 of June 26, 2015 concerning the company Boulanger :

• Failure to comply with the obligation to ensure the adequacy, relevance and non-excessiveness of data
• Failure to comply with the obligation to inform and obtain the prior agreement of the persons concerned before registering information (cookies) on their terminal equipment for electronic communications or accessing them (reading cookies)
• Failure to comply with the obligation to define and respect a data retention period proportionate to the purpose of the processing
• Failure to comply with the obligation to ensure the security and confidentiality of data

We ensure that the data is stored on servers located in Europe however we consider that when the service provider's headquarters is based in the United States data concerning you may be transferred to the United States
As part of the deposit of consumer reviews on product data concerning you are transmitted to the company BazaarVoice whose servers are located in the United States
Transfers to Morocco (access) may be made as part of our customer service (call center)
In order to ensure the security and confidentiality of your personal data that may be transferred outside the European Union Boulanger requires its subcontractors to undertake to comply with the agreements related to this data transfer and in particular with the respect of the Standard Contractual Clauses of the European Commission in force