Data controller
The data controller is TASSEL Joan (10 Rue Haute de Bellevue, 61250 Héloup, France). For any question about your data:contact@aifedespaix.com.
Data processed
We only process the data required to create an account (optional), to place and track orders, to take payment, to deliver and to provide after-sales support: identity, delivery address, email address and order contents.
Third-party services
The store relies on the following technical services. Each one only processes the data strictly necessary for its purpose, in compliance with the GDPR:
- Stripe
- Secure payment processing; card data does not pass through our servers.
- Medusa (self-hosted back end)
- Account, catalogue and order management, on our own infrastructure.
- Cloudflare
- Site delivery (CDN / Pages) and network tunnel to the back end.
- Resend
- Sending of transactional emails (order confirmation, shipping).
- Optional authentication: used only if you choose to sign in with Google.
- Printful
- Manufacturing and delivery; receives the name and delivery address needed for shipping.
- Umami
- Aggregated, anonymous audience measurement, without cookies and without storing raw IP addresses.
Cookies and audience measurement
The site uses no advertising or tracking cookies. Audience measurement (Umami) is performed without cookies and anonymously: it falls under the consent exemption and therefore requires no banner.
Retention
Order data is kept for the time needed to perform the contract and to meet legal obligations (in particular accounting). Account data is kept for as long as the account is active.
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data.
Two of these rights can be exercised directly from your account, without writing to us: from your profile, you can download all your data in JSON format (portability) and delete your account (erasure).
Deletion erases your account, your name, your phone number and your addresses. It is permanent. Your invoices, however, are kept for ten years: the law requires it (article L123-22 of the French Commercial Code). The name, delivery address and email address shown on your past orders are kept along with them: the law requires an invoice to be kept exactly as it was issued.
For any other rights, write tocontact@aifedespaix.com. You also have the right to lodge a complaint with the French data protection authority (CNIL).