Privacy policy

Data controller

[LEGAL NAME], [LEGAL STATUS], [ADDRESS], established in France. Privacy contact: [PRIVACY EMAIL]. Data protection officer, if applicable: [CONTACT DETAILS].

Data and purposes

Account identity, email, hashed password and access rights support account and map access. Proposed basis: contract performance; security measures: legitimate interests to document.

Contact enquiries use your name, email, topic and message to reply. Confirm the basis depending on the context: pre-contractual steps or legitimate interests.

Newsletter subscriptions use consent, with confirmation and unsubscribe records. Order and invoice data will be processed when payments are enabled, for contract and accounting requirements.

Recipients and external services

Authorised staff at [BUSINESS], [HOSTING PROVIDER] and [MAIL PROVIDER] may process information necessary for their tasks.

External resources include OpenStreetMap, MapTiler if enabled, Google Fonts, jsDelivr and media hosts. Google or Facebook participate if you choose their sign-in. Document each provider’s role and contractual arrangements.

Transfers outside the European Economic Area: [COUNTRIES, PROVIDERS AND SAFEGUARDS].

Retention

Accounts and access history: [PERIOD / CRITERIA]. Contact messages: [PERIOD]. Newsletter and consent records: [PERIOD]. Security logs: [PERIOD]. Accounting documents: [APPLICABLE RETENTION]. These rules must be validated and implemented; no automatic deletion is promised here.

Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction or portability, or object to processing. You may withdraw consent for processing based on it.

Account > Profile lets you edit your username. Settings lets you change your email after verification, export account data as JSON, unsubscribe from the newsletter and close your account. Sensitive actions require identity confirmation.

Settings also provides a request form for additional access, rectification, objection or restriction, with a reference and status. Submissions require human review and do not automatically apply all requested measures. You can also use Contact or [PRIVACY EMAIL], especially after account closure. The controller must arrange processing within applicable deadlines. You may complain to the CNIL.

Closing an account anonymizes its profile and removes Google/Facebook identities, sessions, tokens, favorites, reviews, access rights, billing profiles and the newsletter subscription for the current address. Orders and accounting documents are not deleted by this action. Free-text privacy request messages are erased; category, reference and status are retained. The automatic export covers account database records, not support correspondence, historical avatar files, technical logs or backups, which must be handled separately under validated retention rules.

Contact the CNIL

Cookies and security

A session supports your account, cart and form security. See the Cookies page for external resources. This policy and the technical safeguards must be validated before publication.