Privacy Policy

GDPR Compliance & CNIL Guidelines

Privacy Policy & Personal Data Protection

At La Baguetterie (36/38 rue Victor Massé, 75009 Paris, France), respecting your privacy is a top priority. This page outlines in complete transparency how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the guidelines issued by the French Data Protection Authority (CNIL).

1. Data Controller

Personal data collected on www.baguetterie.fr is processed by:

  • Company: La Baguetterie
  • Address: 36/38 rue Victor Massé, 75009 Paris, France
  • Commitment: We never sell, rent, or trade your personal data to third-party marketers.

2. Security & Processors

Your information is hosted within the European Union and protected by strict security protocols:

  • Full end-to-end encryption via SSL/TLS (HTTPS) certificates.
  • Payment transactions are handled exclusively by PCI-DSS certified payment providers (we never store your credit card details).
  • Restricted internal access limited strictly to logistics, customer service, and accounting teams.

3. Your Rights (GDPR / CNIL)

Under the French Data Protection Act and the GDPR, you may exercise the following rights at any time:

  • Access & Rectification: review or update your personal details.
  • Erasure ("Right to be Forgotten"): request the permanent deletion of your account.
  • Objection & Restriction: withdraw your consent at any time (newsletters, cookies).
  • Data Portability: receive your personal data in a structured, machine-readable format.

Scope of Our Transparency Commitment (Processing Register)

Purpose of Processing Data Collected Legal Basis (GDPR) Retention Period
Order management & shipping First name, last name, postal address, email, phone number, purchase history Contract performance Duration of the commercial relationship + 5 years (statutory limitation)
Invoicing & accounting compliance Identity, billing address, transaction details Legal obligation 10 years (French Commercial Code)
After-Sales Service (Warranty & Repairs) Customer contact details, product serial number, support correspondence Contract performance Duration of the statutory or manufacturer warranty
La Baguetterie Newsletter & Updates Email address, instrument preferences Explicit consent Until consent is withdrawn (unsubscribe link) or 3 years of inactivity
Audience analytics & essential cookies Session identifiers, anonymized IP address, browsing data Legitimate interest / Consent 13 months maximum for consent-based trackers

What Professionals Say About Our Security Standards

Because trust is built on technical and legal rigor, here are the auditable safeguards implemented across our platform:

"La Baguetterie's e-commerce architecture strictly applies the principle of data minimization: only the information strictly necessary to ship your gear and manage warranties is ever requested."

Technical & Web Architecture Management

Infrastructure Compliance & Encryption

"Payment workflows are completely isolated from application servers via PCI-DSS Level 1 certified gateways, ensuring bank-grade security on every single order."

Certified Payment Gateway Partner

Transaction Security & Fraud Prevention

"Consent management and data retention schedules strictly adhere to the CNIL e-commerce framework, giving musicians full control over their digital footprint."

GDPR Compliance Officer

Audit & Personal Data Protection

Cart
Your cart is empty.