This page explains what personal data is collected on this site, why, and what your rights are.
Data controller
Arlette Balloni — Griffon d’art, 12 rue du Huit Mai 1945, 31780 Castelginest, France. Contact: griffondart31@gmail.com.
Data collected and purposes
- Order : last name, first name, postal address, email, phone number (optional), details of the order and of the customization. Necessary for the performance of the sales contract, for shipping, and for invoicing.
- Customer account (optional): login details and order history, so you don’t have to re-enter your information.
- Contact form : name, email, message and any attachments, to respond to your request.
- Customer reviews : first name and content of the review, published with your consent.
- Browsing : technical data strictly necessary for the site to function (session, cart).
Legal bases
Performance of the contract for orders and deliveries; legitimate interest for responding to your messages and preventing fraud; legal obligation for the retention of invoices; consent for any commercial communication and for the publication of a review.
Recipients
Your data is neither sold nor rented. It is passed on only to those involved in fulfilling your order: the site host, the carriers (La Poste, Mondial Relay), the payment provider, and, where applicable, the chartered accountant for accounting obligations.
Retention periods
- Order data and invoices: 10 years (accounting obligation)
- Customer account: until it is deleted at your request, then 3 years of inactivity
- Contact messages: 3 years after the last exchange
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability. To exercise them, write to griffondart31@gmail.com: you will receive a reply within one month. You may also lodge a complaint with the CNIL (www.cnil.fr).
Cookies
This site only uses the technical cookies necessary for it to function: session, cart, language preference. No advertising cookies or third-party trackers are set. [To be updated if audience measurement or a social network pixel is added: a consent banner would then become mandatory.]
Security
The site is fully encrypted (HTTPS). Payment card data never passes through the site: it is processed directly by the payment provider.