Privacy policy

This policy describes the processing of personal data carried out by L'atelier Joyeuse in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.

1. Data controller

L'atelier Joyeuse, 8 square de joppet, 73000 Chambery, France. Contact: latelierjoyeuse@gmail.com — 07 87 60 54 30.

2. Data collected

• Identity: first name, last name
• Contact details: email, phone, postal address
• Order data: products, amounts, history
• Payment data: processed directly by our providers (we store no banking data)
• Browsing and audience measurement data (with consent)

3. Purposes and legal bases

• Performance of the contract (Art. 6.1.b): order management, delivery, invoicing
• Legal obligation (Art. 6.1.c): retention of invoices for 10 years
• Consent (Art. 6.1.a): non-essential cookies, newsletter
• Legitimate interest (Art. 6.1.f): fraud prevention, security

4. Retention periods

Customer data: 3 years after the last purchase. Accounting documents: 10 years. Cookies: 6 months maximum.

5. Recipients

Payment providers, carriers, hosting provider, email service providers. No data is sold to third parties.

6. Your rights

You have the right to access, rectify, erase, restrict, object and port your data. To exercise these rights: latelierjoyeuse@gmail.com. You may lodge a complaint with the CNIL (cnil.fr).

7. Transfers outside the EU

Any transfer outside the European Union is governed by the European Commission's standard contractual clauses.

8. Security

Encryption in transit (HTTPS), encryption of API keys, access control, logging.