Data controller
The controller of the data collected on desbougiespournagel.fr is Hugo Payet, sole trader (Des Bougies pour Nagel), 8 rue de la Rotonde, 67200 Strasbourg, France, contact@desbougiespournagel.fr.
He processes your data in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the amended French Data Protection Act of 6 January 1978.
Data collected
We only collect the data that is strictly necessary:
- When you order: surname, first name, email address, phone number, delivery and billing addresses, order contents.
- When you contact us (email, phone): your contact details and the content of your message.
- When you browse: audience measurement data, only with your consent (see Cookies).
Your bank details are entered directly with our payment providers (SystemPay by Caisse d’Épargne, PayPal): we never have access to them.
Recipients
Your data is processed by Hugo Payet only. It is passed on, insofar as it concerns them, to the providers essential to our services:
- hosting: O2switch, in France;
- payment: Caisse d’Épargne (SystemPay), PayPal;
- delivery: Mondial Relay, La Poste (Colissimo);
- audience measurement: Google Analytics, if you accept it.
Your data is never sold or rented.
Transfers outside the European Union
Some providers (Google, PayPal) may process data outside the European Union, particularly in the United States. These transfers are covered by the safeguards provided by the GDPR: an adequacy decision (Data Privacy Framework) or the European Commission’s standard contractual clauses.
Retention periods
- Customer data: for the duration of the business relationship, then 3 years after your last order.
- Contact requests: 3 years after the last exchange.
- Invoices and accounting records: 10 years, in accordance with article L123-22 of the French Commercial Code.
- Audience measurement cookies: 13 months maximum.
At the end of these periods, the data is deleted or anonymised.
Security
We implement appropriate technical and organisational measures (encrypted connection, restricted access, recognised providers) to protect your data against loss, alteration and any unauthorised access. People authorised to access it are bound by confidentiality.
Your rights
You have the right to access, rectify and erase your data, to object to and restrict its processing, and to data portability. You can withdraw your consent at any time and set out instructions on what happens to your data after your death.
To exercise these rights, write to contact@desbougiespournagel.fr. We reply within one month at most.
If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Cookies
Some cookies are essential for the website to work, for example to keep the contents of your cart: they do not require your consent.
With your consent, we use Google Analytics to measure website traffic and improve it. You can accept or refuse these cookies via the banner shown on your first visit, and change your choice at any time. Refusing has no effect on your browsing or your orders.