CZ DESIGN / YOUR INFORMATION
Confidentiality
The publisher's identity, contacts, hosting and retention arrangements must be provided and verified before accounts and sales are opened to the public. This document does not constitute an attestation of compliance.
Who is responsible for your data?
To be completed before commissioning — Address to be completed. Contact for personal data: To be completed before commissioning.
What data and for what uses?
| Usage | Data concerned | Planned base |
|---|---|---|
| Create and use your account | First name, email, verified address, hashed password, account dates and sessions. | Performance of the service requested by the user. |
| Find your basket and your loyalty | References, sizes, colours, quantities, points, vouchers and order/refund confirmations. | Performance of the requested service and, for the relevant supporting documents, legal obligations. |
| Secure the site | IP address, browser information, sessions and attempt counters; any server logs. | Legitimate interest in preventing abusive access, to a proportionate extent. |
| Show recently viewed items | Item identifiers kept on your device, resolved against the catalogue for display. | Your optional choice, which can be withdrawn from the cookies page. |
| Respond to your requests concerning your data | Account concerned, nature, reference, date and status of the request. | Compliance with obligations relating to the rights of individuals. |
Only the email address is required to create an account; a login code is sent to it. Without this address, this service cannot be provided. Browsing the showcase remains possible without an account. No marketing subscription is associated with registration.
Recipients and service providers
The people authorised to administer the shop access the data necessary for their roles. The hosting provider and the email sending provider process the data required for these services.
The complete list of providers, their roles and their processing locations remains to be completed. The sending of emails depends on the provider configured by the shop.
When test payment is enabled, Stripe hosts the form and keeps the trials in its test environment. The site sends it the selection, the amounts and a pseudonymous visit reference. The fictitious details requested are entered directly with Stripe; no card number passes through the site's server. No real payment is taken and no usable loyalty voucher is created by these trials.
Retention
The retention periods for inactive accounts, saved baskets, loyalty data, rights requests, technical logs and backups remain to be defined before going live. The automatic deletion of this data is not yet scheduled. Records subject to a legal obligation will need to be separated from ordinary data.
Sessions expire no later than seven days after their last renewal. The storage periods for data stored in the browser are detailed in the cookies and preferences page.
Location and transfers
The hosting country, any transfers outside the European Economic Area and the applicable safeguards remain to be documented when choosing providers. No exclusively European hosting is presumed.
Your rights
Under the conditions provided for by the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability. You may withdraw your consent for the optional history without affecting processing carried out before that withdrawal.
Since your account, you can download your data and record a deletion request. Recording a request does not mean that the account has already been deleted. Other requests may be sent to the contact indicated above as soon as it is provided.
A response is in principle due within one month; a reasoned extension may be applicable under the conditions of the GDPR. Certain data may need to be retained to comply with a legal obligation or defend a right.
You can send a complaint to the CNIL. This form does not replace a complaint to the authority.