1. DATA CONTROLLER

 

The data controller is HISTOIRE DE PROVENCE SAS, 7 avenue Michel Chevalier, 06130 Grasse, France, Grasse Trade Register 907 699 219. Contact for any personal data question: contact@histoire-de-provence.com.

​

2. DATA COLLECTED

​

Histoire de Provence collects the data you provide: identity, contact details, delivery and billing addresses, order history, exchanges with customer service and on social media, name on a certificate. Bank card data are processed directly by the payment provider. Browsing data (pages viewed, referral source, device, IP address) are collected through trackers, according to your choices.

​

3. PURPOSES, LEGAL BASES AND RETENTION PERIODS

​

• Order management, delivery, customer service
   Legal basis: Contract
   Retention: Relationship, then 5 years

​

• Numbered edition register and certificates
   Legal basis: Contract
   Retention: Life of the edition

​

• Invoices and accounting records
   Legal basis: Legal obligation
   Retention: 10 years

​

• Customer account
   Legal basis: Contract
   Retention: Until deletion, or 3 years of inactivity

​

• Newsletter and offers
   Legal basis: Consent
   Retention: 3 years after last contact

​

• Similar offers to existing customers
   Legal basis: Legitimate interest
   Retention: 3 years after last purchase

​

• Social media exchanges and payment links
   Legal basis: Contract
   Retention: Exchange, then 1 year

​

• Fraud prevention
   Legal basis: Legitimate interest
   Retention: As long as needed

​

• Audience statistics
   Legal basis: Consent
   Retention: 25 months maximum

​

• Social media advertising
   Legal basis: Consent
   Retention: 13 months maximum

​

4. RECIPIENTS

​

Your data are intended for authorised Histoire de Provence staff and its processors, within the limits of their tasks: Wix.com (Site hosting, shop, emails), the payment provider, carriers (including Colissimo, FEDEX and UPS), Metricool (statistics), Meta Platforms (social media and advertising, subject to your consent). They may be disclosed to authorities upon legal request. They are never sold.

​

5. TRANSFERS OUTSIDE THE EUROPEAN UNION

​

Some providers, notably Wix.com and Meta Platforms, may process data outside the European Union, in particular in Israel and the United States. These transfers are governed by a European Commission adequacy decision (including the EU–US Data Privacy Framework for certified companies) or by standard contractual clauses.

​

6. COOKIES AND TRACKERS

​

On your first visit, a banner lets you accept or refuse, just as easily, non-essential trackers (audience measurement, social media, advertising). Trackers essential to the Site's operation (cart, security) do not require consent. You may change your choices at any time via the Site's cookie settings link. Your choice is kept for 6 months.

​

7. YOUR RIGHTS

​

You have the right of access, rectification, erasure, restriction, objection (including, at any time and without reason, to direct marketing), portability, and the right to withdraw your consent at any time. You may set instructions regarding your data after your death. To exercise your rights, write to [EMAIL] or to the postal address above. You will receive a reply within one month. Proof of identity may only be requested in case of reasonable doubt about your identity.

​

You may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – www.cnil.fr.

​

8. SECURITY

​

Histoire de Provence implements appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure. Only authorised persons have access to them.