Privacy Policy

La Boutique du Débarquement, a company registered under number 102 795 846 00017 at the Caen Trade Register, is committed to protecting the privacy of its users. This privacy policy describes the personal data we collect, why we collect it and how we use it.

1. Personal data collected

We collect the following data:

• Identification data : name, first name, email address, phone number
• Delivery data : postal address, zip code, city, country
• Transaction data : order history, amounts. Banking data is processed directly by Stripe and is never stored on our servers.
• Browsing data : technical cookies necessary for the operation of the site
• Account data : language preferences, currency, wishlist

2. Purpose of processing

• Processing and tracking your orders
• Managing your customer account
• Communication regarding your orders (confirmation, shipping, tracking)
• Sending newsletters (only with your consent)
• Improving our services and your user experience
• Compliance with our legal and tax obligations

3. Legal basis for processing

• Contract performance : order processing and deliveries
• Consent : newsletter subscription, account creation
• Legal obligation : retention of invoices and accounting data
• Legitimate interest : site improvement, fraud prevention

4. Data retention period

• Customer data : 3 years after the last activity on the account
• Order data : 10 years (accounting obligation)
• Cookies : 13 months maximum

5. Data sharing

Your personal data may be shared with the following service providers, strictly within the framework of the execution of our services:

• Stripe : payment processing (PCI DSS certified)
• La Poste / Colissimo : shipping and package tracking
• Google : authentication via Google Sign-In (if used)
• Hetzner Online GmbH : site hosting and data storage (datacenter located in Nuremberg, Germany — European Union)
• OVH : transactional email delivery via SMTP (datacenter located in France — European Union)

All personal data we collect is hosted and processed within the European Union (datacenters in Germany and France). Data processed by Stripe and Google may transit through their non-EU infrastructure; these transfers are governed by the European Commission's Standard Contractual Clauses (SCCs), ensuring a level of protection equivalent to GDPR.

No data is sold or transmitted to third parties for commercial purposes.

6. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access : obtain a copy of your personal data
• Right of rectification : correct inaccurate or incomplete data
• Right to erasure : request the deletion of your data
• Right to portability : receive your data in a structured format
• Right to object : object to the processing of your data (e.g. newsletter)
• Right to withdraw consent : withdraw your consent at any time

To exercise your rights, contact us at: contact@laboutiquedudebarquement.com

You can also file a complaint with the CNIL (www.cnil.fr).

7. Cookies

Our site uses only technical cookies strictly necessary for the operation of the site:

• Session cookie : authentication and maintaining your login
• Cart : saving the contents of your cart (localStorage)
• Preferences : selected language and currency

No advertising or third-party tracking cookies are used.

8. Data security

We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, hashed passwords (bcrypt), restricted data access, secure hosting in France (OVH). Payments are processed by Stripe, PCI DSS Level 1 certified.

9. Modifications to this policy

We reserve the right to modify this privacy policy at any time. Any changes will be published on this page with the update date.