Privacy Policy

AVENOR PARIS is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the amended Data Protection Act n°78-17.

1. Data Controller

AVENOR PARIS
Email: sav@avenorparis.com

2. Data Collected

Identification Data

  • First name and last name
  • Email address
  • Phone number
  • Shipping and billing postal address

Transaction Data

  • Orders placed, amounts, products purchased
  • Payment information (managed exclusively by our payment providers – not stored by AVENOR PARIS)

Browsing Data

  • IP address
  • Cookies and tracking beacon data
  • Pages viewed, visit duration
  • Browser and device type used

3. Purposes and Legal Basis of Processing

Purpose: 

  • Order processing, deliveries, invoicing
  • Customer service, management of returns and complaints
  • Sending newsletters and promotional offers
  • Statistical analysis and site improvement
  • Invoice retention, tax compliance
  • Fraud prevention

Legal Basis: 

  • Contract execution
  • Contract execution / Legitimate interest
  • Consent
  • Legitimate interest
  • Legal obligation
  • Legitimate interest

4. Retention Periods

  • Active customer data: duration of the commercial relationship + 3 years
  • Billing and accounting data: 10 years (legal obligation)
  • Browsing data / cookies: 13 months maximum
  • Prospecting data (after end of relationship): 3 years

5. Data Recipients

Your data may be shared with:

  • Shopify Inc.: e-commerce platform hosting
  • Logistics and transport providers: order delivery
  • Payment providers (e.g., Stripe, PayPal): transaction security
  • Emailing tools (e.g., Klaviyo, Mailchimp): marketing communications
  • Analytics tools (e.g., Google Analytics): audience measurement
  • Competent authorities: in case of legal obligation

AVENOR PARIS ensures that its subcontractors provide sufficient guarantees of GDPR compliance.

6. Transfers Outside the European Union

Some of our providers (notably Shopify and Google) are established outside the European Union. In such cases, AVENOR PARIS ensures that appropriate safeguards frame these transfers (standard contractual clauses of the European Commission or equivalent mechanisms).

7. Your Rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw your consent at any time

To exercise these rights, send your request by email to sav@avenorparis.com, attaching a copy of proof of identity.

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

8. Data Security

AVENOR PARIS implements appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure, or alteration. The Shopify platform benefits from PCI DSS certification for payment security.