Data controller
The data controller is Carole Chessa, sole trader, 330 route des Collines, 26350 Le Chalon, France. Personal data contact: privacy@opaleia.fr.
Privacy policy.
Processing of personal data, retention periods and Opaléia customers’ rights.
Controller & data processed.
Personal data and payment
Opaléia processes the data needed to manage accounts, baskets, orders, payments, delivery, customer service and security: identity, contact details, addresses, commercial history and transaction information. Card details are sent directly to the payment provider and are not stored in plain text by Opaléia.
Purposes, legal bases & recipients.
Legal bases
Depending on the circumstances, processing is based on performance of the contract, compliance with legal obligations, the legitimate interest in securing the service and, where required, consent.
Service providers and recipients
Only providers needed for hosting, payment, messaging, delivery and maintenance may receive the data required for their tasks. They must not use it for their own commercial purposes.
Audience measurement and consent
With your consent, Google Analytics (Google Ireland Limited) receives browsing data to measure visits to public pages. The site does not send URL parameters or account, basket or payment pages to this tool. You can withdraw this consent at any time in “ Manage my cookies ”. Advertising tracking and Google signals are disabled.
Retention & rights.
Retention periods
Data is kept for the period necessary for the commercial relationship, then archived in accordance with applicable legal obligations. Accounting documents are kept for ten years. Marketing data is kept for no more than three years after the end of the commercial relationship or the last contact.
Exercising your rights
You may request access, rectification, erasure, restriction or portability, or object to processing where permitted by law, by writing to privacy@opaleia.fr. You may also lodge a complaint with the CNIL.