1. PRIVACY POLICY (GDPR)

Privacy Policy – Casbalova.com
Last updated: [01/09/2025]

1. Data Controller

Personal data is collected and processed by Isabelle Castellan, sole proprietor (SIRET 792 312 175 00038), owner and operator of casbalova.com.

2. Data Collected

When you visit or make a purchase on our website, we may collect the following data:

  • First and last name

  • Postal address

  • Email address

  • Phone number

  • Payment data (encrypted and processed by secure third parties)

  • IP address, browser type, and browsing data (via cookies)

3. Purposes of Data Processing

Your data is used for the following purposes:

  • Processing and delivering orders

  • Communicating with customers

  • Managing customer service

  • Improving user experience

  • Sending marketing emails (with prior consent)

  • Complying with legal obligations

4. Data Retention Period

Data is retained for:

  • As long as the customer account remains active

  • Or up to 3 years after the last contact for marketing data

  • Or according to accounting obligations (up to 10 years for invoices)

5. User Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access

  • Right of rectification

  • Right to erasure

  • Right to object

  • Right to data portability

To exercise these rights, please contact us at: contact@casbalova.com

6. Data Sharing

Your data may be shared with:

  • Payment providers (Stripe, PayPal, etc.)

  • Shipping companies (La Poste, DHL, etc.)

  • Analytics tools (Google Analytics, Meta Pixel)

No personal data is ever sold or transferred to third parties.

7. Security

Casbalova.com implements appropriate technical and organizational measures to ensure the protection and confidentiality of your personal data.

8. Complaints

If you believe your data protection rights have not been respected, you can file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés) via www.cnil.fr.