Introduction
France Commerces ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website france-commerces.com or purchase our authentic French products.
This policy applies to all visitors, customers, and users of our services within the European Economic Area (EEA), the United Kingdom, and worldwide. We process personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the French Data Protection Act (Loi Informatique et Libertés), the ePrivacy Directive, and other applicable data protection laws.
We process personal data lawfully, fairly, and transparently. We collect data only for specified, explicit, and legitimate purposes. We minimize data collection to what is necessary. We ensure accuracy and limit storage periods. We maintain integrity and confidentiality through robust security measures.
| Topic | Key Information | Reference |
|---|---|---|
| Data Controller | France Commerces, Paris, France | Section 2 |
| Data Types Collected | Identity, contact, financial, technical, usage data | Section 3 |
| Legal Basis | Consent, contract, legal obligation, legitimate interest | Section 6 |
| Data Retention | Typically 3-10 years depending on data type | Section 9 |
| Your Rights | Access, rectification, erasure, portability, objection | Section 11 |
Data Controller
The data controller responsible for your personal data is:
- Company Name: France Commerces
- Registered Address: 15 Rue du Commerce, 75015 Paris, France
- Registration Number: RCS Paris B 123 456 789
- VAT Number: FR12 34567890123
- Data Protection Officer (DPO): [email protected]
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer using the email address above or the contact form on our contact page.
Personal Data We Collect
We collect several types of personal data to provide and improve our services. The specific data we collect depends on how you interact with France Commerces. Below is a comprehensive overview of the categories of personal data we process.
Identity Data
First name, last name, username, title, date of birth, and other identifiers used to verify your identity.
Contact Data
Billing address, delivery address, email address, phone number, and preferred communication channels.
Financial Data
Payment card details (processed securely via Stripe/PayPal), bank account information, and transaction history.
Transaction Data
Details about products you purchase, order history, amounts paid, and preferences for French products.
Technical Data
IP address, browser type and version, time zone, operating system, device identifiers, and cookie data.
Usage Data
Information about how you use our website, products viewed, pages visited, and browsing patterns.
Communication Data
Your preferences in receiving marketing, communications history, customer service records, and feedback.
Profile Data
Your account preferences, wishlist items, product reviews, and personalized recommendations.
We do not intentionally collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data). If you contact us about specific dietary requirements or allergies related to our gourmet food products, this information is processed solely to fulfill your order safely.
How We Collect Your Data
We collect personal data through multiple channels to serve you better. The data collection methods are transparent and limited to what is necessary for each purpose.
Direct Interactions
You may provide personal data directly when you:
- Create an account on our website
- Place an order for French products
- Subscribe to our newsletter or marketing communications
- Request customer support or make an inquiry
- Enter a competition, promotion, or survey
- Leave product reviews or feedback
- Request to be contacted by our team
Automated Technologies
As you interact with our website, we automatically collect Technical Data and Usage Data through:
- Cookies and similar technologies: See our Cookie Policy for full details
- Server logs: Recording IP addresses, browser information, and access times
- Analytics tools: Google Analytics and similar services to understand user behavior
- Pixel tags and web beacons: For tracking email campaign effectiveness
Third Parties
We may receive personal data about you from third parties including:
- Payment processors: Stripe, PayPal for transaction verification
- Shipping carriers: Delivery status and address confirmation data
- Social media platforms: If you choose to log in via social accounts
- Analytics providers: Google and other analytics services
How We Use Your Personal Data
We use your personal data only for specific, legitimate purposes. Below is a detailed breakdown of how each type of data is used and the corresponding legal basis.
| Purpose | Data Types Used | Legal Basis |
|---|---|---|
| Order Processing & Delivery | Identity, Contact, Financial, Transaction | Contract |
| Customer Support | Identity, Contact, Transaction, Communication | Contract |
| Account Management | Identity, Contact, Profile | Contract |
| Marketing Communications | Identity, Contact, Profile, Usage | Consent |
| Website Improvement | Technical, Usage, Profile | Legitimate Interest |
| Fraud Prevention & Security | Identity, Contact, Technical, Transaction | Legitimate Interest |
| Legal Compliance | All data types as necessary | Legal Obligation |
| Product Recommendations | Usage, Transaction, Profile | Consent |
| Payment Processing | Financial, Identity, Transaction | Contract |
| Tax & Accounting | Identity, Contact, Financial, Transaction | Legal Obligation |
Where we rely on legitimate interest as the legal basis for processing, that interest is typically to operate our e-commerce business effectively, improve our services, prevent fraud, and ensure the security of our network and information systems. We have conducted balancing tests to ensure your rights are not overridden by our interests.
Legal Basis for Processing (GDPR)
Under the GDPR, we must have a valid legal basis to process your personal data. We rely on the following legal bases depending on the specific processing activity:
1. Contractual Necessity
Processing is necessary for the performance of a contract with you, such as when we process your order, arrange delivery, or provide customer service for products you have purchased.
2. Consent
You have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing emails or allowing personalized recommendations. You can withdraw consent at any time.
3. Legal Obligation
Processing is necessary for compliance with a legal obligation, such as retaining transaction records for tax purposes or responding to lawful requests from public authorities.
4. Legitimate Interests
Processing is necessary for our legitimate interests (or those of a third party), provided your fundamental rights and freedoms are not overridden. Examples include fraud prevention, network security, and business improvement.
You have the right to object to processing based on legitimate interests at any time. You can also withdraw consent for consent-based processing. To exercise these rights, please contact our DPO at [email protected].
International Data Transfers
France Commerces is based in France, and your data is primarily processed within the European Economic Area (EEA). However, some of our third-party service providers may be located outside the EEA, including in countries that the European Commission has not deemed to provide an adequate level of data protection.
Safeguards for International Transfers
When we transfer your data outside the EEA, we implement appropriate safeguards including:
- Standard Contractual Clauses (SCCs): EU-approved contractual safeguards for data transfers
- Adequacy Decisions: Transfers only to countries with EU-recognized adequacy decisions
- Binding Corporate Rules: Where applicable, for intra-group transfers
- Data Processing Agreements: Including specific international transfer clauses
- EU-US Data Privacy Framework: For transfers to certified US companies where applicable
You may request a copy of the safeguards we have in place by contacting our DPO.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. After the retention period, data is securely deleted or anonymized.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Data | Duration of account + 3 years | Service provision & legal claims |
| Transaction Records | 10 years | French tax & commercial law |
| Order Details | 5 years | Warranty & legal guarantee periods |
| Marketing Preferences | Until consent withdrawn + 3 years | Proof of consent & legal claims |
| Customer Service Records | 3 years from last contact | Service quality & dispute resolution |
| Website Analytics Data | 26 months | French CNIL recommendation |
| Cookie Data | 13 months max | ePrivacy Directive compliance |
| Server Logs | 12 months | Security & legal obligation |
| Correspondence | 3 years | Legal claims limitation period |
When determining retention periods, we consider: the amount, nature, and sensitivity of the data; the potential risk of harm from unauthorized use; the purposes for which we process the data; whether we can achieve those purposes through other means; and applicable legal requirements.
Security Measures
We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it against accidental loss, unauthorized access, alteration, or disclosure.
Technical Security Measures
- SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using 256-bit SSL/TLS
- Secure Payment Processing: Payment data is processed directly by PCI-DSS Level 1 certified providers (Stripe, PayPal) — we never store full card details
- Password Security: User passwords are hashed using industry-standard bcrypt algorithms
- Firewalls & Intrusion Detection: Multi-layered network security systems protect our infrastructure
- Regular Security Audits: Penetration testing and vulnerability assessments conducted quarterly
- Access Controls: Strict role-based access controls limit employee access to personal data
- Two-Factor Authentication: Available and recommended for all user accounts
Organizational Security Measures
- Comprehensive data protection training for all employees
- Strict confidentiality agreements and NDAs
- Data Protection Impact Assessments (DPIAs) for high-risk processing
- Incident response plan with 72-hour breach notification procedures
- Regular reviews and updates of security policies
While we implement robust security measures, you also play a role in protecting your data. Please use strong, unique passwords, enable two-factor authentication where available, and never share your login credentials. If you suspect any unauthorized access to your account, contact us immediately.
Your Data Protection Rights
Under the GDPR and applicable data protection laws, you have several important rights regarding your personal data. France Commerces is committed to facilitating the exercise of these rights.
Right of Access
Request a copy of the personal data we hold about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data ("right to be forgotten") in certain circumstances.
Right to Restrict Processing
Request that we limit the processing of your personal data in specific situations.
Right to Data Portability
Request a copy of your data in a structured, machine-readable format for transfer to another controller.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes at any time.
Right to Withdraw Consent
Withdraw your consent at any time when processing is based on consent, without affecting prior processing.
Right to Lodge a Complaint
File a complaint with the French supervisory authority (CNIL) if you believe your rights have been violated.
How to Exercise Your Rights
To exercise any of these rights, please contact our Data Protection Officer:
- Email: [email protected]
- Postal Mail: France Commerces - DPO, 15 Rue du Commerce, 75015 Paris, France
- Online Form: Through our contact page
We will respond to your request within 30 days. In complex cases, this period may be extended by up to two months, in which case we will inform you of the extension and the reasons for it.
You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
If you are not satisfied with our response, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Children's Privacy
France Commerces is not directed to children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at [email protected]. We will take prompt steps to delete such data from our records.
For the purchase of wines, champagnes, and other alcoholic beverages, customers must be of legal drinking age in their country of residence. We may require age verification at the time of delivery. By placing an order for alcoholic products, you confirm that you meet the legal age requirement.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
- Update the "Last Updated" date at the top of this page
- For material changes, provide prominent notice on our website at least 30 days before the changes take effect
- Notify registered users by email where required by applicable law
- Request renewed consent where processing purposes change substantially
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes acceptance of the updated policy.
Previous versions of this Privacy Policy are available upon request. The version in effect at the time you provided your data governs the processing of that data, unless you have consented to subsequent changes.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. Our dedicated privacy team is here to help.
Email: [email protected]
Postal Address: France Commerces - DPO, 15 Rue du Commerce, 75015 Paris, France
For all privacy-related inquiries, data subject requests, and GDPR matters.
Email: [email protected]
Phone: +33 1 XX XX XX XX (Monday - Friday, 9:00 - 18:00 CET)
Live Chat: Available on our website during business hours
Website: www.cnil.fr
Address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Phone: +33 1 53 73 22 22
To lodge a complaint if you believe your data protection rights have been violated.
Questions About Your Privacy?
Our Data Protection Officer and customer service team are here to help you understand and exercise your rights.