Privacy Policy

1. Data Controller

The data controller for personal data collected on the Rue des Livres website is:

2. Data Collected

In connection with the use of the site and placing orders, we collect the following categories of data:

• Account data: name, first name, email address, password (stored as a cryptographic hash)
• Order data: delivery address, phone number, order history
• Browsing data: search queries, cart contents
• Technical data: IP address, browser type, operating system

3. Purposes of Processing

Your personal data is collected and processed for the following purposes:

• Processing and tracking your orders
• Managing your customer account
• Customer service and support
• Organising delivery
• Sending commercial communications (with your consent)
• Statistical analysis and site improvement
• Fraud prevention

4. Legal Basis for Processing

The processing of your data is based on the following legal bases:

• Performance of a contract: order processing, delivery, customer account management
• Legitimate interest: statistical analysis, service improvement, fraud prevention
• Consent: sending commercial communications and newsletters

5. Data Retention

Your personal data is retained for the following periods:

• Active accounts: for the duration of the business relationship, then 3 years after the last contact
• Order data: 10 years from the date of order (legal accounting and tax obligation)
• Analytics data: 13 months maximum

6. Data Recipients

Your data may be shared with the following service providers, strictly for the purposes described above:

• Stripe — Stripe — payment processing
• Mailgun — Mailgun — transactional email delivery
• Colissimo / La Poste — Colissimo / La Poste — order shipping
• Meilisearch — Meilisearch — catalogue search engine

Your data is never sold to third parties.

7. Transfers Outside the European Union

Your data is hosted and processed primarily in France (Scaleway).

Some service providers (Stripe, Mailgun) are based in the United States. These transfers are governed by the EU-US Data Privacy Framework, ensuring an adequate level of protection for your personal data.

8. Your Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain confirmation that your data is being processed and receive a copy
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to data portability: receive your data in a structured and commonly used format
• Right to restriction: request the limitation of processing of your data
• Right to object: object to the processing of your data

To exercise these rights, contact us at: contact@ruedeslivres.com

You also have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr

9. Cookies

The Rue des Livres website only uses technical cookies necessary for its proper functioning:

• Session cookie (authentication)
• Shopping cart cookie

No advertising or tracking cookies are used. As these technical cookies are strictly necessary for the operation of the service, they do not require your prior consent in accordance with Article 82 of the French Data Protection Act.