Privacy Policy

Data Controller

Data Collected

We collect and process the following data:

• Contact data: email (for newsletter)
• Technical data: anonymized IP address, browser type, device
• Preferences: cookie consent (chosen categories)
• Audience data: anonymized data via Google Analytics (if consent)

Purposes & Legal Basis

Data Recipients

Your data may be transmitted to:

• Technical providers: Netlify (hosting), Google (analytics), Apps Script/Sheets (newsletter)
• Competent authorities: if legal obligation

We do not sell your personal data.

Retention Period

• Newsletter: until unsubscription
• Analytics data: 14 months
• Cookies: 6 to 13 months depending on type
• Technical logs: 1 year

Your Rights

In accordance with GDPR, you have the following rights:

• Access: right to know the data concerning you
• Rectification: right to correct inaccurate data
• Erasure: right to be forgotten under certain conditions
• Portability: right to retrieve your data in a structured format
• Restriction: right to restrict processing in certain cases
• Objection: right to object to processing for legitimate reasons

To exercise these rights: contact.ecomshopfrance@gmail.com

Cookies

We use different types of cookies:

You can modify your preferences at any time via our cookie banner.

Transfers Outside EU

Some of our subcontractors (notably Google) may transfer data outside the European Union. In this case:

• We prioritize countries with adequacy decision from the European Commission
• Otherwise, we use the European Commission's Standard Contractual Clauses
• We verify additional guarantees implemented by providers

DPO Contact

For any questions regarding data protection:

In case of complaint, you can contact the CNIL.