Data controller

To be completed: legal identity and contact details of the data controller.

Data that may be collected

Depending on the features actually enabled, the website may process data voluntarily supplied through an enquiry or order, together with technical data required for operation and security.

To be confirmed after audit: form fields, customer accounts, orders, payments, analytics and server logs.

Purposes and legal bases

To be completed for every processing activity: precise purpose, legal basis, whether the information is mandatory and the consequences of not providing it.

Recipients and processors

To be completed: categories of recipients, contractual hosting provider, payment, delivery, email and maintenance providers, and any transfers outside the EEA.

Retention periods

To be completed for every processing activity on the basis of actual operational needs and legal obligations.

Your rights

Depending on the processing involved, individuals may have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent where consent is the legal basis. A complaint may be lodged with the French data protection authority, the CNIL.

To be completed: verified contact channel for exercising these rights.

Cookies and other trackers

Strictly necessary trackers may be used without consent within the limits set by law. Non-essential trackers require clear information and, depending on their purpose, prior consent that can be withdrawn as easily as it was given.

To be completed after inventory: cookies, providers, purposes, durations and an effective consent-management tool.

Official references

CNIL — first steps under the GDPR · CNIL — cookie rules.