Personal Data Protection — Au fil de l’émotion (aufildelemotion.fr)
INFORMATION ABOUT THE DATA CONTROLLER
• Business Name: Au fil de l’émotion
• Website: https://aufildelemotion.fr
• Data Controller: LABOUBEE Carine
• Contact Email Address: aufildelemotion@gmail.com
Effective Date: October 2026
Article 1: Collection of Personal Data
When using the website and placing an order, the Seller collects and processes the following personal data:
• Identity and contact data: Last name, first name, email address, postal address (shipping and billing), phone number.
• Order-related data: Details of products purchased (physical crochet creations, digital PDF patterns), transaction amounts, purchase history.
• Technical and navigation data: IP address, connection data, cookie identifiers necessary for cart management and secure browsing.
Article 2: Purpose of Data Processing
The personal data collected is strictly necessary for our business operations and serves the following purposes:
1. Order management and tracking: Processing purchases, preparing and shipping physical items, providing immediate download links for PDF patterns, issuing invoices.
2. Customer service & Commercial relations: Processing information requests via the contact form or email, managing after-sales service (SAV), returns, and complaints.
3. Compliance with legal and accounting obligations: Retaining invoices and sales receipts in accordance with legal obligations under French law (Article L. 123-22 of the Commercial Code).
4. Commercial communications (subject to consent): Sending newsletters, news, or promotional offers only if the User has expressly consented (opt-in).
Article 3: Data Recipients and Sharing
The personal data collected is confidential. It is NEVER sold, rented, exchanged, or transferred to third parties for commercial or marketing purposes.
It is only transmitted to technical service providers (subcontractors) strictly necessary for order fulfillment:
• Secure payment providers: Stripe, PayPal (secure management of bank transactions).
• Carriers and delivery services: La Poste / Colissimo, Mondial Relay (delivery of physical packages).
• Website host: O2Switch (hosting and technical infrastructure).
Article 4: Data Retention Period
The Seller undertakes not to retain personal data beyond the period strictly necessary for the purposes for which it was collected:
• Order-related data and accounting records: Retained for 10 years in accordance with legal accounting and tax obligations.
• Customer account data: Retained as long as the account is active. It will be deleted upon simple request from the Buyer or after 3 years of continuous inactivity.
• Prospecting/Newsletter data: Retained for a maximum period of 3 years from the last contact from the User or until they unsubscribe.
Article 5: Your Rights (GDPR Compliance)
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (“Informatique et
Libertés”), each User has the following rights:
• Right of access and rectification: To consult or modify their personal information at any time.
• Right to erasure (“Right to be forgotten”): To request the permanent deletion of their personal data (excluding accounting data whose retention is legally mandatory).
• Right to restriction and objection: To object to the processing of their data or request the restriction of its processing.
• Right to withdraw consent: To unsubscribe at any time from communications or the newsletter via the unsubscribe link at the bottom of each email.
• Right to data portability: To receive a copy of their personal data in a structured, commonly used format.
To exercise any of these rights, simply contact the Seller by email at: contact@aufildelemotion.fr.
Article 6: Cookie Management
The aufildelemotion.fr website uses technical and functional cookies essential for the proper functioning of the online store (keeping items in the shopping cart, secure access to the customer account).
The User can configure their internet browser at any time to be informed of the presence of cookies, refuse them, or delete them.
Article 7: Data Security
The Seller implements all appropriate technical and organizational measures (HTTPS protocol, SSL certificate, secure passwords) to ensure an adequate level of security and to protect personal data against any destruction, loss, alteration, or unauthorized access.