Privacy Policy

This Privacy Policy is intended to inform users of the website operated under the Albertine Atelier brand about how their personal data is collected, used and protected, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable French law.

---

The controller responsible for processing personal data is:

Albertine Atelier
Sole proprietorship – Ms GINDRE
Status: micro-entrepreneur (French micro-enterprise scheme)
Country of establishment: France
The data controller can be contacted via the contact form available on this page.

---

The personal data that may be collected through the website is limited to what is necessary for the operation of the business and the purposes described in this Privacy Policy.

The following data may be collected:

• name or username,
• email address,
• billing address,
• information required for payment (processed by the payment service provider),
• order history,
• data relating to website browsing and usage where the user has given consent.

No sensitive personal data is intentionally collected.

---

Personal data may be processed for the following purposes:

• processing and managing orders,
• providing purchased digital files,
• managing customer relations,
• complying with legal and accounting obligations,
• audience measurement and analysis of website usage, subject to the user’s consent where required.

Personal data is not used for marketing or personalized advertising purposes without the user’s consent where such consent is required.

---

Personal data may be collected when the user:

• places an order on the website,
• creates a customer account,
• contacts the data controller via the website contact form,
• browses the website and, where required, consents to the use of cookies or other audience measurement technologies.

---

Payments made through the website are processed by the payment service provider Stripe.

Banking and payment card details are never stored by Albertine Atelier.

Stripe processes the data necessary to process and secure payments in accordance with its own Privacy Policy.

---

The website uses cookies and other tracking technologies to ensure its proper operation and, subject to the user’s consent where required, to measure its audience.

Cookies and tracking technologies used may include:

• technical WordPress cookies,
• functional WooCommerce cookies required for features such as the shopping cart and checkout,
• cookies or tracking technologies required for security and payment processing,
• audience measurement cookies or tracking technologies associated with Google Analytics 4.

Cookies that are strictly necessary for the operation of the website may be placed without prior consent where permitted by applicable regulations.

Audience measurement cookies and tracking technologies that require consent are only used after the user has given their consent.

Users can accept or refuse the relevant cookies and change their preferences using the consent management options provided on the website.

---

The website uses Google Analytics 4 (GA4), an audience measurement service provided by Google, to better understand website traffic and how visitors use the website.

Google Analytics 4 may collect information relating to website browsing and usage where the user has given consent, in accordance with the consent settings implemented on the website.

Google Tag Manager (GTM) is used to manage the deployment of certain tags on the website, including those associated with Google Analytics 4.

The website also uses Google Search Console to analyze its visibility and performance in search results. The use of Google Search Console by the website publisher does not, in itself, result in audience measurement cookies being placed on visitors’ devices.

---

Personal data is retained:

• for as long as necessary to fulfill the purposes for which it was collected,
• and subsequently, where necessary, archived in accordance with applicable legal and accounting obligations.

Data relating to orders may be retained for up to 10 years for accounting purposes.

Data collected for audience measurement purposes is retained in accordance with the retention periods configured in the relevant tools and applicable regulatory requirements.

---

In accordance with the GDPR, users have the following rights, subject to the conditions provided for by applicable regulations:

• right of access,
• right to rectification,
• right to erasure,
• right to restriction of processing,
• right to object,
• right to data portability where applicable.

These rights may be exercised at any time by submitting a request via the contact form available on this page.

---

The data controller implements reasonable technical and organizational measures to ensure the security and confidentiality of personal data.

---

This Privacy Policy may be amended to reflect changes to the website, the services used or applicable laws and regulations.

The applicable version is the version in force on the date the website is accessed.

---

This Privacy Policy is governed by French law.