Privacy Policy

The data controller is DA COSTA Marco, 3 rue de l'Ouest, 67490 Friedolsheim — 948 308 184 R.C.S. Strasbourg. Email: contact@plaisirspralines.com.

Customer account: email address, full name, avatar (optional).

Orders: reference, date, amounts (subtotal, shipping, total), currency, delivery method, delivery address (name, postal address, phone), order and payment statuses.

Order lines: ordered products, variants, quantities, unit and total prices.

Saved addresses: label, name, postal address, postal code, city, country, phone.

Preferences: newsletter subscription, order notifications, preferred language, request to limit processing.

Public forms (contact, appointment, stock alert): name, email, message or chosen slot, related product.

Banking data: processed only by the approved payment provider. It is neither collected nor stored by the site.

Creation and management of the customer account: performance of the sales contract (Art. 6.1.b GDPR).

Order processing and delivery: performance of the contract (Art. 6.1.b).

Order status notifications: performance of the contract (Art. 6.1.b).

Newsletter sending: explicit consent (Art. 6.1.a), revocable at any time.

Responses to contact and appointment requests: consent (Art. 6.1.a) and/or handling of a request.

Retention of orders and invoices: legal accounting obligation (Art. 6.1.c).

Account data, addresses and preferences: kept until account deletion (right to erasure).

Orders and related data (including delivery address): kept for 5 years under the accounting obligation and the limitation period for contractual civil liability. Upon account deletion, directly identifying personal data (name, email) is erased or anonymised; orders are kept in anonymised form for legal obligations.

Contact messages, appointments and stock alerts: kept for 1 year after processing.

The Seller (DA COSTA Marco) and their team, for order and account management.

The approved payment provider, to secure transactions (without site access to banking data).

The carrier (Colissimo / La Poste), for delivery, receives the name and delivery address.

The site host, for technical data storage.

No data is sold or transferred to third parties for commercial purposes.

Data is hosted within the European Union. Where applicable, any transfer outside the EU is governed by appropriate safeguards (standard contractual clauses) in accordance with the GDPR.

The site uses two categories of trackers:

Essential cookies: a technical session cookie necessary for customer account authentication and the cart, as well as preferences (cart, wishlist, theme, language) stored locally in your browser. They do not require consent and cannot be disabled.

Marketing cookies (optional): Meta Pixel (Facebook), operated by Meta Platforms, Inc., measures our audience and the effectiveness of our communications. It sends a PageView event and is only set after your explicit consent. Meta cookie policy: https://www.facebook.com/policies/cookies/.

Consent: a banner is displayed on your first visit. You can accept or refuse marketing cookies with a single click. Your choice is stored locally (localStorage) and can be changed at any time from the "Manage my cookies" page.

You can withdraw your consent at any time by visiting the cookie management page.

In accordance with the GDPR, you have the following rights: access, rectification, erasure, limitation of processing, opposition, portability of your data, and the right to withdraw your consent at any time.

Right of access and portability: from your customer account ("Settings" tab), you can export all your data in JSON format.

Right to limitation: you can request the limitation of the processing of your data from your customer account ("Preferences" tab). During limitation, the site suspends non-essential processing (in particular the newsletter).

Right to erasure: you can delete your account from your customer account ("Settings" tab). Your personal data is erased or anonymised, subject to legal obligations to retain orders.

Exercising rights: by email at contact@plaisirspralines.com or by mail to DA COSTA Marco, 3 rue de l'Ouest, 67490 Friedolsheim. A reasoned response is provided within a maximum of one month.

Complaint: you may file a complaint with the CNIL (3 place de Fontenoy, 75007 PARIS — www.cnil.fr).

The site implements appropriate technical and organisational measures to protect your data: encrypted exchanges (HTTPS), secure authentication, strict access rules limiting each user to their own data, and logging without exposing personal data in logs.