Política de privacidad

2. Data we collect

We collect: your email address (order and account), your name (optional), technical connection logs (IP address, timestamp) retained for 12 months as legally required, and messages you send us via the contact form.

We neither collect nor store any banking data: payments are processed entirely by Oxapay. We only retain the transaction identifier and payment status.

3. Purposes and legal bases

Data is processed for: contract performance (provisioning, billing, support), compliance with legal obligations (log retention, invoices) and our legitimate interests (infrastructure security, fraud prevention).

4. Retention periods

Active account: duration of the contractual relationship. Invoices and accounting data: 10 years. Connection logs: 12 months. Contact messages: 3 years. Guest orders never claimed: order data retained 24 months for accounting purposes.

5. Processors and transfers

Our processors are: Oxapay (payments, Estonia) and our email hosting provider (European Union). No data is sold or shared for advertising purposes. No transfer outside the EU occurs without appropriate safeguards (standard contractual clauses).

6. Your rights

You have rights of access, rectification, erasure, restriction, portability and objection. Exercise them at [email protected]; we respond within 30 days. You may lodge a complaint with the CNIL.

7. Cookies

This site only uses strictly necessary cookies (authentication session, language preference). No analytics or advertising cookies are set; no consent banner is therefore required.

8. Security

Hashed passwords (bcrypt), TLS 1.3 encrypted communications, restricted and logged internal access, annual security audits by an independent firm.