Privacy Policy
Last updated: July 2025
Preamble
This privacy policy applies to the PictoryAvis website (https://pictoryavis.com), published by the company E-Com Shop, 60 rue François 1er, 75008 PARIS. We are committed to protecting the privacy of our visitors and processing their personal data in accordance with applicable legislation, including the GDPR.
Collected Data
- Email address (via contact form or newsletter registration)
- Navigation data (cookies, statistics, analytics tools like Google Analytics)
- Payment information (only for transactions, processed by our secure payment providers)
- Demographic data (age, gender, location - if voluntarily provided)
- History of interactions with our customer service
Purpose of Collection
- Management of contact requests and customer support
- Sending information or promotional offers (newsletter, affiliation)
- Statistical analysis of website traffic
- Improving user experience and content personalization
- Execution of subscribed services and transaction processing
- Fraud prevention and website security
Cookies
The website uses different types of cookies:
- Essential cookies: Necessary for website operation
- Performance cookies: To analyze website usage (Google Analytics)
- Functionality cookies: To remember your preferences
- Marketing cookies: To personalize advertisements
You can accept or refuse cookies via the dedicated banner. Cookies are kept for a maximum period of 13 months.
Data Sharing
Data is never sold to third parties. It may be shared only with:
- Our technical providers for hosting or traffic analysis
- Judicial or administrative authorities upon legal request
- Our payment partners for transactions (Stripe, PayPal)
- Our marketing tools (Mailchimp for newsletters)
All our partners are GDPR compliant and based in the EU or in countries offering adequate protection.
Retention Period
Data is kept for the time strictly necessary for the purposes described above:
- Contact data: 3 years after last contact
- Navigation data: 13 months
- Transaction data: 10 years (legal obligation)
- Marketing data: 3 years after last interaction
Your Rights
In accordance with the GDPR, you have the following rights over your data:
- Right of access: Obtain a copy of your data
- Right of rectification: Correct inaccurate data
- Right to erasure: Request deletion of your data
- Right to restriction: Restrict processing of your data
- Right to data portability: Retrieve your data in a structured format
- Right to object: Object to processing for legitimate reasons
To exercise your rights, contact us at contact.ecomshopfrance@gmail.com. We will respond within a maximum of one month.
Security
All necessary precautions are taken to protect your data:
- SSL/TLS encryption for all data transmissions
- Secure hosting in Europe with intrusion protection
- Protection against unauthorized access by firewall and authentication
- Regular and encrypted backups
- Staff training on security best practices
In case of data breach, we commit to notify the competent authorities (CNIL) and concerned users within 72 hours.
Subcontractors
We work with the following subcontractors who may have access to certain data:
- Netlify: Website hosting
- Google Analytics: Traffic analysis
- Mailchimp: Newsletter sending
- Stripe: Payment processing
All our subcontractors are GDPR compliant and we have signed data processing agreements with them.
Transfers Outside EU
Some of our subcontractors may transfer data outside the European Union. In this case, we ensure that:
- The country benefits from an adequacy decision by the European Commission
- The European Commission's standard contractual clauses are implemented
- Additional security measures are applied
Contact
For any question or complaint regarding your data, you can:
- Write to: contact.ecomshopfrance@gmail.com
- Send mail to: E-Com Shop, 60 rue François 1er, 75008 PARIS
You also have the right to file a complaint with the CNIL (www.cnil.fr).
Updates
This privacy policy may be updated to reflect legal or technical developments. The current version is dated July 2025.
We will inform you of significant changes by email or via a visible notification on our website.