Privacy Policy
Last updated: [DD/MM/YYYY]. This policy describes how your personal data is collected and processed on judesign3d.fr, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. This English version is provided for convenience; the French version prevails and French / EU law applies.
1. Data controller
The data controller is:
- Judicaël MAGERY, sole trader, trading under the commercial name "Judesign3d"
- La Naulière, 85640 Mouchamps, France
- SIRET: 790 620 892 00014
- Contact: [contact@judesign3d.fr]
2. Data collected
Depending on your use of the website, the following may be collected:
- Identity and contact data: surname, first name, postal address, e-mail, phone.
- Order data: products ordered, personalisation options, files/visuals provided, purchase history, invoices.
- Payment data: processed directly by the payment provider; the seller does not store your full bank details.
- Browsing data: IP address, browser type, pages viewed, via cookies (see section 7).
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Order management and performance, delivery, after-sales | Performance of the contract (Art. 6.1.b) |
| Invoicing and accounting/tax obligations | Legal obligation (Art. 6.1.c) |
| Customer account management | Performance of the contract (Art. 6.1.b) |
| Responding to contact requests | Legitimate interest (Art. 6.1.f) |
| Sending marketing communications / newsletter | Consent (Art. 6.1.a) |
| Audience measurement and non-essential cookies | Consent (Art. 6.1.a) |
| Security and fraud prevention | Legitimate interest (Art. 6.1.f) |
4. Data recipients
Your data is never sold. It is shared only with the recipients necessary to deliver the service:
- Payment provider: [name — e.g. Stripe / PayPal / bank].
- Carriers / delivery: Mondial Relay – InPost and [other carriers used].
- Hosting provider: o2switch SAS (storage of website data).
- Technical / e-mail tools: [if applicable — newsletter module, audience-measurement tool].
- Authorities where required by law.
5. Retention period
- Customer account data: for the duration of the business relationship, then archived.
- Order data and invoices: 10 years under accounting obligations.
- Personalisation files/visuals: for the time needed to fulfil the order, then deleted within a reasonable period.
- Prospects / newsletter: until consent is withdrawn, then a maximum of 3 years after the last contact.
- Cookies: 13 months maximum.
6. Your rights
Under the GDPR, you have the following rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time. You may also set instructions on the fate of your data after your death.
To exercise them, write to [contact@judesign3d.fr] (proof of identity may be requested). Response within one month maximum. In the event of a disagreement, you may refer the matter to the CNIL: www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
7. Cookies
The website uses cookies necessary for its operation (basket, session) which do not require consent, and where applicable audience-measurement or personalisation cookies subject to your consent via the dedicated banner. You may withdraw your consent at any time or set your browser to refuse cookies.
8. Security
The seller implements appropriate technical and organisational measures (secure HTTPS connection, restricted access, hosting in France) to protect your data against unauthorised access, loss or disclosure.
9. Transfer outside the EU
Data is hosted within the European Union (o2switch, France). Should a provider process data outside the EU, appropriate safeguards (standard contractual clauses) would be put in place.
10. Changes
This policy may be updated. The applicable version is the one published on the website on the date you consult it.