Privacy policy

This policy informs visitors and customers of studiovallor.fr about personal-data processing carried out by Studio Vallor, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés). Studio Vallor is established in France.

It complements the legal notice, the cookie policy and the terms of sale and use. Legal notice · Cookie policy · Terms of sale

The data controller is Studio Vallor, SIREN 883 565 780, publisher of the site studiovallor.fr, established in France, reachable at contact@studiovallor.com. No data protection officer (DPO) has been appointed; requests are handled at this address.

Depending on the forms and services used, we may collect:

• identity and contact details: last name, first name, email, phone where provided, billing and delivery address;
• delivery data needed for print-on-demand dropshipping: shipping address in the countries we serve (France, Belgium, Luxembourg, Switzerland) and, where useful, a phone number for the carrier;
• order data: posters, options (format, paper, frame), amounts, order number, production and shipping status;
• account data, if you create one: email, first name, last name and password (stored hashed);
• support and newsletter data: messages sent to customer service and, if you subscribe, your email;
• security data: a reCAPTCHA token when this protection is enabled on login, registration or checkout;
• audience data via Umami Cloud: pages viewed, referrer, browser, operating system, device type and country. According to Umami, this measurement does not use cookies and does not identify you personally.

Card payments are processed by Stripe, a PCI-DSS certified provider. We do not collect or store bank-card numbers, expiry dates or CVC codes. Apple Pay and Google Pay, when offered, also go through Stripe.

Data are used to:

• process, invoice and have the order delivered (performance of the contract);
• provide tracking, returns and after-sales service (performance of the contract);
• create and manage a customer account when you request it (performance of the contract);
• respond to your contact requests (legitimate interest or pre-contractual steps);
• meet our accounting, tax and anti-fraud obligations, including via Stripe and reCAPTCHA when enabled (legal obligation and legitimate interest);
• measure site audience and interactions with Umami Cloud, without advertising (legitimate interest);
• send the newsletter if you subscribe (consent, which you may withdraw at any time).

Data are intended for Studio Vallor and, strictly as needed, its processors and providers:

• Stripe, for card payment and compatible wallets (Apple Pay, Google Pay);
• a print-on-demand production and shipping provider, which prints the poster and ships it to the address you provide, via a carrier in its network;
• OuiHeberg SARL, for hosting the site in France;
• Umami Software, Inc. (Umami Cloud, cloud.umami.is), for audience measurement in production;
• Google, for fonts loaded on the site and, when enabled, reCAPTCHA.

These providers act only for the purposes described. No data is sold to third parties. Mondial Relay is not used for delivery: shipping is handled by our print-on-demand partner and its carrier partners.

Order and invoice data are kept for as long as needed for tracking, warranties, after-sales service and accounting obligations (in practice up to 10 years for supporting documents). Account identifiers are kept while the account is active, then archived or deleted. Support messages are kept for up to 3 years. Newsletter emails are kept until you unsubscribe. Umami audience data are kept for a limited period proportionate to measurement. Stripe retains payment data under its own policy and legal obligations.

Some providers may transfer data outside the European Union: Stripe, our print-on-demand and shipping provider, Umami Cloud (servers in the US and the EU according to Umami) and Google (fonts, reCAPTCHA). Where this happens, transfers are framed by GDPR safeguards (standard contractual clauses or an adequacy decision). Delivery to Switzerland may also involve a transfer to that country, which benefits from an adequacy decision.

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to contact@studiovallor.com. You may withdraw consent (newsletter) at any time. You may also lodge a complaint with the CNIL (www.cnil.fr), the French supervisory authority. www.cnil.fr

Details of cookies, local storage, Umami Cloud and third-party scripts (Stripe, Google Fonts, reCAPTCHA) are in the cookie policy. Cookie policy