Privacy Policy
Privacy Policy – Zornglas Surfboards
1. Data Controller
This privacy policy applies to the processing of personal data carried out by:
Zornglas Surfboards, headquartered in La Forêt Fouesnant, registered under number 94075563000016.
You may contact us with any questions regarding your personal data at the following email address: zornglas.surfboards@gmail.com or by phone at +33 6 18 32 81 02.
2. Data Collected and Purposes
We collect and process the following categories of personal data:
- Identification data: last name, first name, address, email address, phone number.
- Order data: order details, products purchased, purchase history.
- Payment data: banking information transmitted via a third-party payment provider (we do not have access to sensitive credit card data).
- Login/browsing data: IP address, cookies, browsing history, technical data related to your device (computer, mobile) to improve your shopping experience.
- Marketing data (if you consent): history of your preferences, personalized offers.
The purposes of processing are:
- managing your customer account and your orders
- processing payments, invoicing, and delivery
- customer relations (after-sales service, returns, exchanges)
- marketing and sales prospecting (if you have consented)
- improving our website and services, statistical analysis (cookies, browsing).
3. Legal Bases for Data Processing
The processing of your data is based on the following legal bases:
- performance of the contract (account management, orders, delivery)
- compliance with a legal obligation (invoice records, tax obligations)
- your consent (for sending marketing emails, non-essential cookies)
- our legitimate interest (improving our services, ensuring the security of our website), provided that this does not infringe upon your rights and freedoms.
4. Recipients of the Data
Your data is disclosed to the following categories of recipients:
- our internal departments (logistics, accounting, customer service)
- our external service providers (web hosting, website management, CRM, payment processing, shipping carriers)
Where applicable, to the relevant authorities when required by law.
We require our service providers to ensure the confidentiality and security of data, in accordance with the GDPR.
5. Retention Period
Your data is retained for appropriate periods of time:
- Order and billing data: for 5 years (or as required by applicable law).
- Customer account data: for as long as the account is active, then archived for two years.
- Marketing data: until you withdraw your consent or object to the processing.
- Cookies and browsing data: in accordance with the applicable rules of the French Data Protection Authority (CNIL).
6. Cookies and Trackers
We use cookies and other trackers to:
- ensure the proper functioning of the website (technical cookies)
- measure traffic, analyze browsing behavior, and improve our service
- provide personalized content and offers (based on your consent).
You can accept or reject cookies via the dedicated banner. Rejecting non-essential cookies does not block access to the website, but may limit certain features.
7. Your Rights
In accordance with the GDPR, you have the following rights:
- Right of access: to know what data we hold about you
- Right to rectification: to correct inaccurate or incomplete data
- Right to erasure (right to be forgotten): to have your data deleted under the conditions provided by law
- right to restriction of processing
- right to data portability: to receive your data in a structured and reusable format or to have it transferred to another data controller
- right to object: to object to processing based on our legitimate interest or to direct marketing at any time
- Right to withdraw your consent (for example, for marketing emails) without affecting the lawfulness of prior processing.
To exercise your rights, you may contact us at zornglas.surfboards@gmail.com. In the event of a complaint, you also have the right to contact the CNIL.
8. Data Security
We implement appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data, in accordance with Article 32 of the GDPR.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the CNIL as soon as possible and, if required, will also notify you.
9. Transfers Outside the EU
The personal data we collect is generally stored within the European Union. If a transfer to a country outside the EU were to be considered, we would ensure that appropriate safeguards are in place (European Commission model clauses, etc.).
10. Updates to the Policy
We may need to modify this policy; the version posted on the website at the time of your visit is the current version. We encourage you to review it regularly.
11. Contact
If you have any questions about this privacy policy or wish to exercise your rights, you can contact us at:
Email: zornglas.surfboards@gmail.com