Article 1. Introduction

This privacy policy informs users of laguiole.store about how their personal data is collected and processed, the rights they have, the identity of the data controller and the recipients of their data.

It supplements our legal notice, our terms and conditions of sale and our cookies and personal data page.

Article 2. Data controller

For any question about the processing of your personal data, please contact us through our contact form or by post at the address above.

Article 3. Data collected and purposes

We collect and process the following personal data, each for a specific purpose and on a defined legal basis:

Purpose	Data collected	Legal basis	Retention
Order processing	Surname, first name, address, email, telephone, order details	Contract (Art. 6.1.b GDPR)	3 years from the last contact, then archived
Personalized engraving	Engraving text and symbols (name, initials, message)	Contract (Art. 6.1.b GDPR)	3 years from the last contact, then archived
Delivery	Surname, address, email, telephone	Contract (Art. 6.1.b GDPR)	3 years from the last contact, then archived
Invoices and accounting records	Billing details, order details	Legal obligation (Art. 6.1.c GDPR)	10 years
Contact form and live chat	Name, email, content of the message	Legitimate interest (Art. 6.1.f GDPR)	3 years from the last contact
Online withdrawal request	Order number, email, date, time and IP address of the request	Legitimate interest (Art. 6.1.f GDPR)	3 years
Cookie consent	Consent identifier, choices made	Legal obligation (Art. 6.1.c GDPR)	13 months

Laguiole Export may retain certain data beyond the periods stated above in order to meet its legal or regulatory obligations, or to establish, exercise or defend legal claims.

We do not use audience measurement or advertising tools on this website, and we do not send newsletters.

Article 4. Recipients of the data

We never sell or rent your data. It may be shared with the following service providers and partners, strictly to the extent necessary for the purposes described above:

Service provider	Purpose	Location
Kinsta Inc.	Website hosting	United States (Google Cloud)
Payplug	Card payments	France / EU
PayPal (Europe)	PayPal payments	Luxembourg / EU
DHL Express	International delivery and tracking	Germany / EU
Colissimo (La Poste)	Delivery to France and tracking	France

If you use the live chat on our website, the messages you send are processed by our chat tool provider, solely to answer your questions.

Your data may also be disclosed to administrative or judicial authorities where required by law.

Article 5. Transfers outside the European Union

Some of our service providers are located outside the European Union, in particular in the United States (Kinsta). These transfers are governed by:

• the EU-US Data Privacy Framework, for certified entities;
• standard contractual clauses adopted by the European Commission, where applicable.

You can obtain a copy of the safeguards in place by contacting us through our contact form.

Article 6. Your rights

In accordance with the European General Data Protection Regulation 2016/679 (GDPR) and the amended French Data Protection Act of 6 January 1978, you have the following rights:

• Right of access (Article 15 GDPR): to obtain confirmation that your data is being processed and to receive a copy of it
• Right to rectification (Article 16): to correct inaccurate or incomplete data
• Right to erasure (Article 17): to request the deletion of your data, subject to legal retention obligations
• Right to data portability (Article 20): to receive your data in a structured, commonly used format
• Right to restriction of processing (Article 18): to request that processing be suspended in certain cases
• Right to object (Article 21): to object to processing based on legitimate interest
• Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal
• Right to set instructions regarding what happens to your data after your death

To exercise these rights, please contact us through our contact form or by post: Laguiole Export, 1B rue Mornay, 75004 Paris, France. We will reply within one month. If there is any doubt about your identity, we may ask you for proof of identity.

If you believe, after contacting us, that your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.

Article 7. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access: SSL/TLS encryption of transmissions, access restrictions and regular updates of our systems.

Article 8. Cookies

The cookies used on this website and the way your consent is collected are described on our Cookies and personal data page.

Article 9. Changes to this policy

Laguiole Export reserves the right to amend this policy at any time to keep it in line with the law in force. Changes do not affect processing carried out before they were made. Users are invited to consult this policy regularly.