Legal notice

The website alicepeintures.com is published by

The website alicepeintures.com is hosted by

Intellectual property

All content on the website alicepeintures.com (text, photographs, illustrations, paintings) is protected by copyright. Any reproduction, representation or distribution, in whole or in part, without the prior written consent of Alice Voland is prohibited.

Privacy policy

Data controller

Alice Voland

6 Impasse Boileau – 34920 Le Crès – France

alice@alicepeintures.com

Contact form

When you submit the contact form, the following personal data is collected: name, email address, subject and message. This data is processed solely to respond to your enquiry. Legal basis: consent (GDPR art. 6.1.a). Your message is delivered via Resend, a transactional email service (see Third-party services below).

Shop

When you place an order and pay, the following personal data is collected and processed: your name, your delivery (postal) address, your email address, and the details of your order (the works ordered, their references and prices, the amount paid, and the order status). This data is used to process your payment, prepare and ship your order, keep you informed of its progress, and meet accounting and legal obligations. Data controller: Alice Voland. Legal basis: performance of the sales contract (GDPR art. 6.1.b), and, for accounting records, compliance with a legal obligation (GDPR art. 6.1.c).

Payment

Payments are processed by Stripe, our payment service provider. Your card details are entered directly on Stripe's secure hosted checkout page; they never pass through and are never stored by alicepeintures.com. This website only keeps payment metadata: a Stripe transaction identifier, the amount, the currency, and the payment status. Stripe processes this data to carry out the payment. Stripe privacy policy: https://stripe.com/privacy.

Order tracking

The shop has no customer accounts and no passwords. To let you follow your order, we send you a temporary link containing a secret access token, and we email you a one-time code to confirm your email address before payment. We store only a hashed form of these tokens and codes, never their clear text, together with the date each link was issued and used and the IP address of the request, so that access to an order can be secured and traced. Legal basis: performance of the contract (GDPR art. 6.1.b) and our legitimate interest in securing access to orders (GDPR art. 6.1.f).

Anonymous visitor statistics

This website records anonymous visitor information to understand how the site is used. The following are recorded for each request: the path of the page visited, the date and time, the language, the domain of the referring page if any (for example "https://google.com" or "android-app://com.instagram.android", never the full URL), a truncated IP address (last octet set to zero for IPv4, last 80 bits for IPv6, insufficient to identify an individual visitor), the browser family and major version (e.g. "Firefox 128"), the operating system family and major version (e.g. "macOS 14"), and the device class (desktop, mobile, tablet). The full IP address and the full browser identifier ("User-Agent") are never written to disk; they are used in memory and then discarded before the log line is written.

No tracking cookies, no persistent identifier, no third-party analytics. Data is not transmitted to any third party and is not used for commercial or advertising purposes.

Legal basis: legitimate interest (GDPR art. 6.1.f). This processing is exempt from consent under the CNIL guidelines for audience measurement, since the data collected is strictly limited, minimised, and not reused for other purposes.

Local storage

A theme preference (light or dark mode) is saved in your browser's local storage (localStorage). This data never leaves your device and is not accessible by the server.

Third-party services

Contact form messages are delivered via Resend (https://resend.com), a transactional email service. The data transmitted includes your name, email address, subject and message content. Resend processes this data solely for email delivery. Privacy policy: https://resend.com/legal/privacy-policy.

Payments are handled by Stripe (https://stripe.com), a payment service provider. The data transmitted to Stripe includes your name, email address, delivery address and payment details. Stripe processes this data to carry out and secure the payment. Privacy policy: https://stripe.com/privacy.

These providers may process data outside the European Union, in particular in the United States. Such transfers are governed by the European Commission's standard contractual clauses and, for Stripe, by the EU-U.S. Data Privacy Framework. Stripe's data processing agreement is available at https://stripe.com/legal/dpa.

Your rights

You have the right of access, rectification, erasure, objection and restriction of processing. To exercise these rights, write to alice@alicepeintures.com. You may also lodge a complaint with the CNIL (www.cnil.fr).

Some order and accounting records may be retained where required to meet our legal obligations.