Privacy Policy

1. Data controller

The Cœur de Collection website, available at coeurdecollection.fr, is published by:

SAS La Collectionnerie
12 rue du Jura
03300 Cusset
France

SAS La Collectionnerie is the controller responsible for processing the personal data collected through the Cœur de Collection website.

For any questions concerning your personal data, you may contact us at the following address: contact@coeurdecollection.fr.

2. Personal data collected

We collect only the data required to operate the website, manage enquiries and fulfil orders.

a) Browsing the website

When you browse the website, certain technical information may be processed by our Matomo audience measurement tool:

  • pages viewed;
  • date, time and duration of the visit;
  • type of device, operating system and browser used;
  • website or page visited immediately before our website;
  • traffic data and anonymised IP address.

Matomo is configured without audience measurement cookies, with IP address anonymisation and without cross-referencing browsing data with your customer account.

b) Creating an account and placing an order

When you create an account or place an order, the following data may be collected:

  • title, surname and first name;
  • billing address and delivery address;
  • email address;
  • telephone number;
  • login details and information relating to your customer account;
  • the content, value and history of your orders;
  • information required for delivery and installation;
  • communications relating to your order or after-sales service.

Information marked as mandatory is required to create the account, process and deliver the order and, where applicable, install the product. If this information is not provided, we shall be unable to fulfil your order.

c) Payment

Payments are processed by secure payment service providers, including Stripe and PayPal.

Your complete bank card details, including the full card number and security code, are processed directly by the payment service provider and are not retained by Cœur de Collection.

We may nevertheless receive information required to monitor the transaction, such as the payment method used, payment status, a transaction reference or the final digits of the payment method.

d) Contact form and communications

When you contact us, we may process your name, email address, telephone number, the content of your message and any attachments you send to us.

3. Purposes and legal bases of processing

Your data is processed for the following purposes:

  • Creating and managing the customer account: processing necessary for the performance of a contract or for taking pre-contractual steps at your request.
  • Processing, payment and monitoring of orders: processing necessary for the performance of the contract.
  • Manufacturing, preparing, delivering, installing and, where applicable, collecting products: processing necessary for the performance of the contract.
  • Managing enquiries, complaints, returns and after-sales service: performance of the contract and Cœur de Collection’s legitimate interest in assisting its customers and protecting its rights.
  • Preparing and retaining invoices and accounting documents: compliance with our legal, accounting and tax obligations.
  • Securing the website and preventing fraud: Cœur de Collection’s legitimate interest in protecting its website, transactions and users.
  • Measuring website traffic and improving the website: Cœur de Collection’s legitimate interest in understanding how its website is used and improving its operation, in accordance with the conditions applicable to audience measurement tools exempt from consent requirements.

Where certain processing activities are based on your consent, particularly in the event that optional tracking technologies or optional marketing communications are introduced in the future, you may withdraw your consent at any time.

4. Recipients of the data

Your personal data may be accessed, within the scope of their respective duties, by authorised members of SAS La Collectionnerie.

It may also be disclosed to the following categories of recipients, but only where necessary:

  • website hosting, maintenance and security service providers;
  • payment service providers, including Stripe and PayPal;
  • the craftsperson responsible for manufacturing or preparing your order;
  • carriers and service providers responsible for delivering, installing or collecting the product;
  • accounting, legal or administrative service providers acting on behalf of the company;
  • administrative or judicial authorities where required by law.

Each recipient receives only the information necessary to carry out its duties.

Your personal data is neither sold nor disclosed to third parties for their own direct marketing purposes.

5. Transfers of data outside the European Economic Area

Some of our service providers, particularly payment service providers, may process personal data from countries located outside the European Economic Area.

Where such a transfer takes place, it shall be governed in accordance with the applicable regulations, including through an adequacy decision issued by the European Commission or appropriate safeguards such as the standard contractual clauses adopted by the European Commission.

You may contact us at contact@coeurdecollection.fr to obtain further information about the applicable safeguards.

6. Data retention periods

Your data is retained only for as long as necessary for the purposes for which it was collected, subject to applicable statutory retention obligations.

  • Customer account data: for as long as the account remains in use, and then for a maximum period of three years from the last activity or the end of the commercial relationship.
  • Data relating to enquiries and commercial communications: for as long as necessary to handle the enquiry, and then for a maximum period of three years from the last contact.
  • Orders, invoices and accounting records: for ten years from the end of the relevant financial year, in accordance with applicable legal obligations.
  • Data required for managing a dispute: for the duration of the proceedings and the applicable statutory limitation periods.
  • Raw browsing data collected by Matomo: for a maximum period of 365 days.

Statistics that have been permanently anonymised and can no longer be used to identify an individual may be retained indefinitely for statistical purposes.

7. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction.

Access to the data is limited to the individuals and service providers who need it to carry out their duties.

8. Your rights

In accordance with the applicable regulations and subject to the conditions laid down by law, you have the following rights:

  • the right to access your personal data;
  • the right to request its rectification;
  • the right to request its erasure;
  • the right to request restriction of its processing;
  • the right to object to certain processing activities;
  • the right to data portability in relation to data you have provided to us;
  • the right to withdraw your consent at any time where processing is based on consent.

You may also provide instructions concerning the retention, erasure and disclosure of your personal data after your death.

To exercise your rights, you may write to us at: contact@coeurdecollection.fr.

Your request must specify its purpose and enable us to identify you. Where there is reasonable doubt concerning your identity, you may be asked to provide proof of identity.

You also have the right to lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL).

9. Cookies and audience measurement

The website uses cookies that are strictly necessary for its operation, particularly to enable browsing, basket management, customer account login, website security and the placement of orders.

These necessary cookies cannot be disabled through the website, as removing them may prevent certain functions from operating correctly.

The website also uses Matomo to produce anonymised traffic statistics. This tool is configured without audience measurement cookies, with IP address anonymisation, without cross-site tracking and without cross-referencing data with customer account information.

If optional cookies or tracking technologies are added in the future, they shall only be placed after obtaining your consent where such consent is required.

10. Changes to this Privacy Policy

This Privacy Policy may be amended to reflect legal, regulatory or technical developments, or changes to the services offered through the website.

The date of the latest update is shown at the top of this page.