Politique de confidentialité

This Privacy Policy describes how ediktedag.shop collects, uses, discloses, stores, and otherwise processes personal information when you visit our website, make a purchase, create an account, contact us, or otherwise interact with our online store.

This policy is intended to provide transparency for customers and visitors, including individuals located in France and the European Economic Area.

French and EU privacy requirements require online merchants to provide information concerning the identity of the controller, purposes and legal bases of processing, recipients, retention, individual rights, and international transfers where applicable.

1. Data Controller and Contact

For personal information processed in connection with the operation of this store, the store operator is responsible for determining the purposes for which customer information is used, subject to circumstances in which another service provider acts independently as a controller.

Contact regarding privacy matters:

ediktedag.shop
Email: info@ediktedag.shop

2. Personal Information We May Collect

Depending on how you interact with our website, we may collect:

  • Name;
  • Billing address;
  • Shipping address;
  • Email address;
  • Telephone number;
  • Order and transaction information;
  • Products purchased or viewed;
  • Customer account information;
  • Communications with customer support;
  • Device and browser information;
  • IP address;
  • Cookie and similar technology information;
  • Website activity and interaction information;
  • Fraud-prevention and security information;
  • Payment-related information required to complete transactions.

Full payment card details may be processed directly by payment processors rather than being stored directly by us.

3. How We Use Personal Information

We may process personal information to:

  • Process and fulfil orders;
  • Arrange shipping and delivery;
  • Process payments and refunds;
  • Communicate regarding purchases;
  • Operate customer accounts;
  • Provide customer service;
  • Handle returns and withdrawal requests;
  • Detect and prevent fraud or misuse;
  • Protect the security of our website;
  • Maintain transaction and accounting records;
  • Comply with legal obligations;
  • Improve our website and customer experience;
  • Send marketing communications when permitted and where appropriate consent has been obtained;
  • Measure website performance and advertising effectiveness where legally permitted.

4. Legal Bases for Processing

Where GDPR applies, personal information may be processed on one or more of the following bases:

Performance of a contract: processing necessary to accept an order, receive payment, deliver products, provide customer support, or process a return.

Legal obligation: processing necessary to comply with tax, accounting, consumer protection, fraud prevention, or other legal requirements.

Legitimate interests: processing necessary for reasonable commercial interests such as website security, fraud detection, service improvement, and business administration, provided that such interests are not overridden by the rights and freedoms of individuals.

Consent: where consent is required, including for certain marketing activities, advertising technologies, analytics, or non-essential cookies.

French privacy guidance emphasizes informing customers clearly about how their data is used and giving them appropriate control over its use.

5. Shopify

Our online store is powered by Shopify.

Shopify provides the e-commerce infrastructure that allows us to display products, process orders, operate checkout functions, manage customer information, and provide related services.

Personal information may therefore be processed by Shopify and its relevant affiliates or subprocessors to provide the Shopify platform.

Shopify states that personal data relating to customers in the European Economic Area is initially processed by Shopify International Limited in Ireland and may also be processed by Shopify affiliates and subprocessors.

6. Service Providers

We may share personal information with service providers where reasonably necessary to operate our business, including:

  • Shopify;
  • Payment processors;
  • Shipping and logistics companies;
  • Warehousing and fulfilment providers;
  • Fraud-prevention services;
  • Analytics providers;
  • IT and website service providers;
  • Customer service providers;
  • Professional advisers;
  • Authorities where disclosure is legally required.

Service providers receive only the information reasonably necessary for their relevant functions, subject to applicable legal requirements.

7. International Data Transfers

Some service providers may process information outside France or outside the European Economic Area.

Where GDPR applies to an international transfer, appropriate safeguards must be used where legally required.

Shopify notes that GDPR does not prohibit international processing but requires personal data transferred outside Europe to receive protection in accordance with applicable data-transfer rules.

8. Cookies and Tracking Technologies

Our website may use cookies and similar technologies for essential website operation, security, customer preferences, analytics, advertising, and other functions.

Cookies that are strictly necessary for the website may operate without optional consent where permitted by law.

Where French or European rules require consent for non-essential cookies or tracking technologies, those technologies should not be activated until the required consent has been obtained.

CNIL states that prior consent is required for certain cookies and tracking technologies, while certain strictly necessary trackers may be exempt.

You may manage available privacy choices through our cookie banner, browser settings, or other privacy controls provided on our website.

9. Marketing Communications

Where permitted by law, we may send marketing messages about products, promotions, or store updates.

Where consent is legally required, such communications will be sent only after appropriate consent has been obtained.

You may unsubscribe from marketing emails using the unsubscribe mechanism included in the communication.

Unsubscribing from marketing does not prevent us from sending transactional communications relating to orders, payments, deliveries, returns, security, or other service-related matters.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling orders, maintaining legally required records, resolving disputes, preventing fraud, and enforcing contractual rights.

Retention periods may differ depending on the type of information and applicable legal requirements.

The GDPR incorporates a principle of limiting data retention to periods appropriate for the purpose for which data was collected.

11. Your Privacy Rights

Subject to applicable law and relevant exceptions, individuals may have rights including:

  • The right to access personal data;
  • The right to correct inaccurate data;
  • The right to request deletion;
  • The right to restrict certain processing;
  • The right to object to certain processing;
  • The right to data portability where applicable;
  • The right to withdraw consent where processing is based on consent;
  • The right to object to direct marketing;
  • The right to lodge a complaint with a competent supervisory authority.

For individuals in France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).

CNIL guidance states that customers should have a simple means of contacting an online merchant to request access, rectification, or deletion of their data.

To exercise a privacy right, contact:

info@ediktedag.shop

We may request reasonable information to verify your identity before acting on a request.

12. Security

We use reasonable administrative, organisational, and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, destruction, or loss.

No electronic storage or transmission system can be guaranteed to be completely secure.

13. Children's Privacy

Our website is intended for general retail customers and is not designed for children to provide personal information independently where parental or guardian consent would legally be required.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, technology, service providers, or legal obligations change.

The latest version will be published on this website together with an updated revision date.

Shopify also recommends merchants review their privacy policy regularly to ensure that it reflects their actual store settings, applications, and processing activities.

15. Contact

Privacy inquiries and data protection requests may be sent to:

ediktedag.shop
Email: info@ediktedag.shop