Privacy policy

1. Data controller

The controller of personal data is the company myFabrik SARL, whose registered office is located at 5 allée des Douves, 33470 Gujan-Mestras. Contact: contact@myfabrik.eu

2. Data collected

We collect the following data:

• Identification data: surname, first name, email address
• Delivery data: postal address, telephone
• Order data: products ordered, configurations, amounts
• Browsing data: pages viewed, actions (analytics)
• Payment data: processed directly by Stripe/PayPal (we do not store card numbers)

3. Purposes of processing

Data is collected for:

• The management and processing of orders
• The delivery of products
• Communication relating to orders (confirmation, shipping, delivery)
• Customer support (tickets)
• The improvement of our services (analytics)
• Compliance with our legal obligations (invoicing, VAT)

4. Legal basis

The processing of data is based on:

• The performance of the contract (order and delivery)
• Legal obligation (invoicing, VAT)
• Legitimate interest (service improvement, analytics)

5. Retention period

• Account data: until account deletion + 3 years
• Order data: 10 years (accounting obligation)
• Browsing data: 13 months

6. Recipients

Data may be shared with:

• Our payment providers (Stripe, PayPal)
• Our carriers (Colissimo, Mondial Relay)
• Our hosting provider
• The competent authorities in the event of a legal obligation

7. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right of rectification: correct your data
• Right to erasure: request the deletion of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: restrict the processing of your data

8. Cookies

The site only uses strictly necessary cookies:

• Session cookie (token): user authentication, expires after 7 days
• Cart (localStorage): cart saving, persistent

9. Transfers outside the EU

Some providers (Stripe, PayPal) may process data outside the EU. These transfers are governed by standard contractual clauses approved by the European Commission.