Français
English
DeutschPrivacy policy
This is a translation provided for convenience. The French version is the binding one.
Who processes your data
The data controller is Laurent Lévy, sole trader operating under the name Greffeur d'agrumes, whose full details appear in the legal notice.
For any question about your data, write to laurent@greffeurdagrumes.com.
What we collect, why, and for how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, postal addresses, email, telephone | Processing and delivering your order, keeping you informed of its progress | Performance of the contract | 3 years after last contact |
| Order details, invoices | Customer follow-up, guarantees, accounting obligations | Legal obligation | 10 years (article L123-22 of the French Commercial Code) |
| Customer account credentials | Letting you find your orders and addresses again | Performance of the contract | Until the account is deleted, then 3 years of inactivity |
| Email address alone | Newsletter, if you signed up for it | Consent | Until you unsubscribe |
| Messages sent through the contact form | Answering your enquiry | Legitimate interest | 1 year |
| Technical browsing data (server logs) | Site security, incident diagnosis | Legitimate interest | 12 months |
We collect no special category data within the meaning of article 9 GDPR, and we carry out neither profiling nor automated decision-making.
Your card details
Payment is processed by Stripe, which acts as data controller for that operation. We never have access to your card number: it does not pass through our servers and we do not store it.
Who your data is shared with
Your data is neither sold, rented nor exchanged. It is passed only to those who need it to fulfil your order:
- Host — OVH SAS, France, which hosts the website and its database.
- Carrier — DPD, which receives your name, delivery address and, where applicable, your telephone number or email for delivery notifications.
- Payment provider — Stripe, for processing the card transaction.
- Email provider, for transactional messages and the newsletter where applicable.
We make no transfer of data outside the European Union. Should one of our providers do so, it would be covered by the safeguards set out in chapter V GDPR.
Cookies
This website uses only cookies that are strictly necessary for it to work: keeping your session, remembering the basket, your choice of language and form security. They are used neither for advertising nor for tracking you across other websites.
Because those cookies are essential to the service you are requesting, they do not require your prior consent. You may nonetheless delete or block them in your browser settings, on the understanding that ordering online will then no longer work.
We use no audience measurement tool and no advertising tracker. Should that change, this page would be updated and a consent mechanism put in place beforehand.
Your rights
You have, at any time, the rights of access, rectification, erasure, restriction, objection and portability set out in articles 15 to 22 GDPR. Where processing is based on your consent, you may withdraw it at any time without affecting what was done beforehand.
To exercise them, write to laurent@greffeurdagrumes.com or use your customer account. We reply within one month. Proof of identity may be requested where there is serious doubt about who is making the request.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
Security
The website is served over HTTPS and traffic is encrypted. Access to the administration area is restricted and password-protected. Since no measure can guarantee absolute security, we undertake to apply reasonable means to protect your data and, in the event of a breach likely to result in a high risk to your rights, to inform you in accordance with article 34 GDPR.
Changes
This policy may change, in particular if we change provider or add a service.