Privacy Policy (GDPR) – cristalandcie.com 

The purpose of this Privacy Policy is to inform users of the website cristalandcie.com about how their personal data is collected, processed, and protected within the framework of website management and online sales. 

1. Data Controller 

The person responsible for processing the personal data collected on this website is: 
    • Identity: Marine Doussaud 
    • Website Name: cristalandcie.com (Cristal & Cie Antiquités) 
    • Postal Address: 9 avenue de la Libération, 63310 Randan, France 
    • Email Address: contact@cristalandcie.com 
    • Phone: +336 79 05 10 34 

2. Personal Data Collected 

We collect and process personal data that you voluntarily provide when browsing and making purchases on the website: 
    • Order Management and Deliveries: Last name, first name, billing and delivery postal addresses, email address, phone number. 
    • Customer Account Creation: Username, password (encrypted). 
    • Payment: Payment information (this data is processed directly and securely by our payment service providers; we do not store your bank or credit card details). 
    • Contact Form: Last name, first name, email address, and the content of your message. 
    • Browsing (Cookies): IP address, connection data, browser type via analytics tools (subject to your consent). 

3. Purposes of Processing 

Your data is collected for strict and legitimate purposes: 
    • Processing, payment, and delivery of your orders. 
    • Customer relationship management (order tracking, after-sales service). 
    • Responding to requests submitted via the contact form or by email. 
    • Improving the user experience on our website. 
    • Compliance with our legal and accounting obligations (invoicing). 

4. Legal Basis for Processing 

In accordance with Article 6 of the GDPR, the processing of your data is based on: 
    • Performance of a contract: Necessary to process and deliver your purchases of tableware and antique pieces. 
    • Your consent: Particularly for the use of non-functional cookies or sending newsletters. 
    • A legal obligation: For the retention of our accounting documents and invoices. 

5. Data Recipients 

The personal data collected is intended solely for the use of Cristal & Cie Antiquités (Marine Doussaud). Under no circumstances will it be sold, shared, or transferred to third parties for commercial purposes. However, it may be transmitted to our subcontractors for the proper execution of services: 
    • Carriers and delivery services (for shipping your packages). 
    • Secure payment solution providers. 
    • Our website hosting provider. 

6. Data Retention Period 

We store your data only for as long as necessary for the purposes for which it was collected: 
    • Customer Data (Purchases): Kept for the duration of the commercial relationship, then archived for 10 years to comply with French accounting and tax obligations. 
    • Customer Account Data: Deleted after 2 consecutive years of inactivity by the customer. 
    • Contact Data: Kept for the time necessary to process your request, up to a maximum of 2 years. 
    • Cookies: Retained for a maximum period of 13 months. 

7. Your Rights Regarding Your Data 

In accordance with European regulations, you have the following rights regarding your personal data: 
    • Right of Access: You can request to know what data we hold about you. 
    • Right to Rectification: You can request the correction of inaccurate or incomplete data. 
    • Right to Erasure ("Right to be Forgotten"): You can request the deletion of your data, unless there is a legal obligation to retain it (e.g., invoices). 
    • Right to Object: You can object at any time to the processing of your data for legitimate reasons. 
To exercise any of these rights, you can contact us directly by email at: contact@cristalandcie.com or by mail at the address provided in Article 1. 
If you feel, after contacting us, that your rights are not being respected, you have the right to lodge a complaint with the CNIL (French National Commission for Information Technology and Civil Liberties) on their website (cnil.fr). 

8. Data Security 

We implement all appropriate technical and organizational measures (including the use of the secure HTTPS protocol) to ensure a level of security adapted to the risks and to protect your data against unauthorized access, loss, alteration, or disclosure. 

9. Changes to the Privacy Policy 

We reserve the right to modify this Privacy Policy to comply with legal or technical developments. We invite you to consult it regularly.