Privacy policy

PRIVACY POLICY

At Françoise PAVIOT SARL, we attach particular importance to protecting privacy and complying with our obligations in this regard.

This Privacy Policy (hereinafter referred to as the “Policy”) aims to inform you, as a user of the website www.francoise-paviot.com (hereinafter referred to as the “Website”), of the measures implemented by Françoise PAVIOT SARL, the owner and publisher of the Website (hereinafter referred to as the “Publisher”), to collect and process your “Personal Data”, in accordance with French Law No. 78-17 of 6 January 1978, as amended, relating to information technology, files and civil liberties, and Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) (hereinafter collectively referred to as the “Regulations”).

This Policy may be amended at any time, particularly to comply with changes in legislation, case law, editorial practices or technology. We recommend consulting the latest version before browsing the Website.

We undertake to comply with the essential principles of the Regulations, including fairness and transparency, data minimisation (collecting only necessary data), respect for your rights, and data security and confidentiality.

1. Definitions

  • Personal Data / Data: Any information relating to an identified or identifiable natural person, directly or indirectly (name, order number, address, IP address, purchasing habits, etc.).

  • Processing: Any operation performed on Data, including collection, access, recording, copying, transfer, storage, disclosure and destruction.

  • Data Controller: The entity that determines the purposes and means of processing Personal Data.

  • Data Processor: The entity that processes Personal Data on behalf of and under the instructions of the Data Controller.

2. Who Does This Policy Apply To?

This Policy applies to all individuals browsing the Website, including customers and prospective customers (the “Visitors” or “you”).

3. Who Is Responsible for Data Processing?

The Data Controller is Françoise PAVIOT SARL, registered with the Lyon Trade and Companies Register under number B 388 658 247, whose registered office is located at 2 bis rue d’Italie, ZAC des Pierres Blanches, 69780 Mions, France.

Telephone: +33 (0)4 78 20 28 12

Email: info@francoisepaviot.fr

4. What Data Is Processed by the Website?

In accordance with the principles of proportionality and data minimisation, we only process the Data necessary for the purposes described below.

When collecting Data, mandatory fields are identified by an asterisk (*). Failure to provide this information may prevent us from processing your order or request.

Depending on the circumstances, we process the following categories of Data:

  • Identification and contact details: Last name, first name, postal address, email address and telephone number.

  • Account information: Login credentials and communication history.

  • Order and billing information: Products ordered and transaction amounts.

  • Payment information: Securely processed by Shopify. Banking details are not stored by the Publisher.

  • Browsing and technical information: IP address, connection data and cookies (see Section 9).

5. What Are the Legal Bases for Processing Your Data?

Purpose Legal Basis Examples
Management of orders, deliveries, invoicing and customer accounts Performance of a contract Processing and tracking orders, delivery, invoicing and account management
Management of enquiries submitted through the Website contact form Legitimate interests Responding to enquiries from Website users
Customer service and management of complaints and withdrawals Performance of a contract Responding to requests and processing returns
Compliance with legal and accounting obligations Legal obligation Retention of invoices and fraud prevention
Website security and traffic statistics Legitimate interests Incident prevention and audience measurement
Commercial prospecting and newsletters, including newsletter personalisation based on email opens and clicks Consent and legitimate interests, as applicable (Article 6(1)(a) and (f) GDPR) Sending offers and newsletters, with the option to unsubscribe at any time
Non-essential cookies and tracking technologies, including Meta Conversion API, Facebook Conversion API, Google Maps API and Brevo cookies, as well as marketing preferences Consent (Article 82 of French Law No. 78-17) Audience measurement, advertising personalisation and recording consent preferences

The legal bases listed above are proposed in light of the Website's activities and must be validated on a case-by-case basis.

6. How Long Is Your Data Retained?

Your Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected.

Once these retention periods have expired, the Data is archived and subsequently deleted in accordance with applicable legislation.

The applicable retention periods are as follows:

  • Customer Data: For the duration of the commercial relationship, followed by archiving in accordance with applicable statutory limitation periods.

  • Prospecting Data: Three years from the last contact with prospective customers.

  • Accounting records and invoices: Ten years.

  • Cookie Data: A maximum of 13 months for tracking technologies and 25 months for information collected. The retention period for tracking data processed by Brevo is governed by Brevo's own data retention policy.

7. Who Receives Your Data?

Some of your Personal Data may be shared, strictly within the scope of their responsibilities, with service providers (Data Processors) engaged by the Publisher, including:

  • Website hosting provider: TIZY, 4 rue du Pensionnat Notre-Dame de France, 43000 Le Puy-en-Velay, France. Contact: hello@tizy.fr – +33 4 15 46 01 26.

  • Delivery providers: Colissimo (La Poste) and Mondial Relay.

  • Payment service provider: Shopify.

  • Newsletter service provider: Brevo (SENDINBLUE), 17 rue de Salneuve, 75017 Paris, France.

  • CRM: 2028 E Ben White Blvd #240-6555, Austin, TX 78741, United States.

Your Personal Data will not be disclosed to third parties for other purposes, except where required by law or pursuant to a request from competent authorities.

Where your Data is transferred outside the European Economic Area (EEA), we undertake to ensure an appropriate level of protection through adequacy decisions, standard contractual clauses approved by the European Commission, or binding corporate rules.

8. What Security Measures Are in Place?

Your Personal Data is treated as strictly confidential.

The Publisher takes all appropriate precautions and implements suitable organisational and technical measures to protect the security, integrity and confidentiality of your Data.

These measures are intended, in particular, to prevent Data from being altered, damaged or accessed by unauthorised third parties.

The Publisher has implemented procedures for managing personal data breaches and, in accordance with the Regulations, will notify the French Data Protection Authority (CNIL) and affected individuals where required by law (Articles 33 and 34 of the GDPR).

9. Cookies and Tracking Technologies

The Website uses cookies, pixels and other tracking technologies.

Cookies strictly necessary for the operation of the Website are placed without your consent. Other cookies and tracking technologies, including non-exempt audience measurement, personalisation and social media tracking, are used only after obtaining your consent.

You may withdraw your consent at any time through the cookie management tool available on the Website.

The Publisher also incorporates tracking pixels into its newsletters to monitor recipients' interactions when receiving and reading emails.

The Data processed includes your email address, a tracking identifier, and information relating to email opens and links clicked.

Our email marketing service provider, Brevo, processes this Data on our behalf.

These tracking technologies are used only where you have provided your consent when subscribing to the newsletter.

You may withdraw your consent to personalised newsletters and associated tracking at any time by clicking the unsubscribe link included in each email.

Withdrawal of consent will stop future newsletter communications and associated tracking, without affecting the lawfulness of processing carried out before the withdrawal.

You may also exercise your rights by contacting info@francoisepaviot.fr.

10. What Are Your Rights?

In accordance with the Regulations, you have the following rights:

  • Right of access: To access your Personal Data and information about how it is processed.

  • Right to rectification: To request the correction of inaccurate or incomplete Data.

  • Right to erasure: To request the deletion of your Data under the conditions provided by the Regulations.

  • Right to restriction of processing: To request that the processing of your Data be restricted.

  • Right to object: To object to processing on grounds relating to your particular situation, and at any time in relation to direct marketing.

  • Right to data portability: To receive the Personal Data you have provided to us in accordance with applicable requirements.

  • Right to withdraw consent: To withdraw your consent at any time where processing is based on consent.

  • Right to provide post-mortem instructions: To define instructions concerning the storage, deletion and disclosure of your Personal Data after your death.

To exercise these rights, you may contact us:

By email: info@francoisepaviot.fr

By post: Françoise PAVIOT SARL, ZAC des Pierres Blanches, 2 bis rue d’Italie, 69780 Mions, France.

Proof of identity may be requested where there are reasonable doubts about your identity.

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL):

CNIL – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Website: www.cnil.fr

11. Questions?

For any questions regarding the processing of your Personal Data, please contact us at:

info@francoisepaviot.fr