Data controller

The data controller for personal data collected on this site is [Nom complet de Guillaume], operating L'Atelier de Coghaven as a French micro-entreprise (SIRET [numéro SIRET]), contactable at [adresse email de contact].

Data collected and purposes

Depending on how you use the site, the following personal data may be collected:

• Account creation: first name, last name, email, password (stored hashed, never in plain text), mobile and landline phone numbers — to create and manage your customer account.
• Address book: delivery/billing addresses — to ship your orders.
• Orders: order history, amounts, products purchased — for order fulfilment and legal accounting obligations.
• Newsletter: email address, subscription status — only if you explicitly opt in (double opt-in: a confirmation link is required before any email is sent), with an unsubscribe link in every email.
• Guestbook: your message, linked to your account — to publish it (after moderation) with your first name and last initial only.
• Payment: no bank card data is stored on our servers — payment is handled directly by PayPal and Stripe, our payment providers.

Legal basis and retention period

Processing is based on the performance of the sales contract (orders, account, addresses), your consent (newsletter, guestbook), and our legal obligations (accounting records kept for [durée légale, ex. 10 ans]). Account and order data is kept for the duration of the business relationship plus applicable legal retention periods. You may request deletion of your account at any time (subject to legal accounting retention of order records).

Recipients of the data

Your data is only accessible to [Nom complet de Guillaume] and, where strictly necessary to provide the service, our technical providers: hosting (O2Switch, France), email delivery, and payment processors (PayPal, Stripe). No data is sold or shared with third parties for advertising purposes.

Your rights

In accordance with the GDPR and the French Data Protection Act, you have the right to access, rectify, delete, and port your data, as well as the right to restrict or object to processing. You may exercise these rights by writing to [adresse email de contact]. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

Cookies

This site uses cookies. Strictly necessary cookies (session, security) are placed automatically as they are required for the site to function and do not require consent. Other cookies (e.g. audience measurement, if added in the future) are only placed after you give your consent via the cookie banner shown on your first visit. You can change your choice at any time from the banner ("Customize"), or by clearing your browser's cookies. No cookie is used to sell your data to third parties.