DRAFT – legal review required. This text is a template, not legal advice. Have it reviewed and complete everything in [square brackets] before launch.
Data controller
[company name], [address], admin@papirino.com.
What data we process
- Account and orders: name, e-mail address, billing address, products ordered, download history. Purpose: performing the contract (Art. 6(1)(b) GDPR).
- Payments: processed by Mollie B.V.; we never receive full card details.
- VAT evidence: billing country and IP address, to apply the correct VAT (legal obligation).
- E-mail: transactional e-mails about your order. Newsletters only with your separate consent.
How long we keep data
Invoices and order data are kept for 10 years, as required by French commercial law (Code de commerce, art. L123-22). Account data is kept for as long as your account exists.
Processors
Hetzner Online GmbH (hosting, Germany) and Mollie B.V. (payments, the Netherlands). A data processing agreement is in place with each processor.
Cookies
We only use strictly necessary cookies for logging in, the basket and checkout. We do not use tracking or advertising cookies.
Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection. E-mail admin@papirino.com. You can lodge a complaint with the data protection authority in your country or with the French CNIL.