Privacy policy
Éditions Salvadò Scotto respects your privacy and processes only the personal data needed to answer your requests, manage your orders and operate this website.
1.Data controller
The data controller is Association CANTINSEMU (Éditions Salvadò Scotto), Les Salines, Tour I 9, rue François Pietri, 20090 Ajaccio, France — SIRET 131 165 094 00015. Questions about your personal data or the exercise of your rights may be sent through the website's Contact page.
2.Data, purposes and legal bases
The website processes data you provide directly and information strictly necessary for the shop to operate.
- Contact: name, email address and message, to answer your request. Processing is based on your request and the legitimate interest in managing correspondence.
- Order and delivery: identity, contact details, delivery address, order contents and status, to enter into and perform the sales contract.
- Administration and accounting: order and billing information, to comply with applicable legal obligations.
- Payment: necessary information is sent directly to the secure payment provider to complete the transaction. The website neither receives nor stores your full card number.
- Basket: the selected quantity is saved in your browser's local storage to retain your basket. It is not used to track you.
3.Recipients and processors
Data is accessible only to persons authorised by Éditions Salvadò Scotto and, where necessary, to technical providers responsible for hosting, payment and delivery. They may use it only to perform their duties and in accordance with their contractual and legal obligations.
No personal data is sold, rented or disclosed to third parties for advertising purposes.
4.Retention periods
Contact requests are retained for as long as needed to handle them, and for no more than three years after the last exchange. Data required to manage an order is retained during the contractual relationship and then archived for the applicable statutory periods. Accounting records and invoices are retained for ten years.
The basket remains in your browser until it is cleared, browser data is deleted or the basket is reset. The payment provider retains data under its responsibility for the periods set out in its own policy and by law.
5.Cookies and trackers
The website uses no advertising cookies and no audience measurement tool. It places no tracker requiring your consent, so no consent banner is displayed.
The basket uses browser local storage only. During payment, the secure provider may use technical data strictly necessary for security, fraud prevention and payment processing, in accordance with its own privacy policy.
6.Your rights
Under the GDPR and applicable French law, you may exercise the following rights. Proof of identity may be requested only where there is reasonable doubt about your identity. We will reply within one month, which may be extended by two months for complex or numerous requests.
- The right to access your data and receive a copy.
- The right to correct inaccurate or incomplete data.
- The right to erasure where the legal conditions are met.
- The right to restrict processing.
- The right to object, on grounds relating to your particular situation, to processing based on legitimate interests.
- The right to data portability where processing is automated and based on a contract or consent.
- The right to withdraw consent at any time where processing relies on it, without affecting earlier processing.
- The right to issue instructions concerning your data after your death.
- The right to lodge a complaint with the CNIL, the French data protection authority.
7.Security and transfers
Reasonable technical and organisational measures protect data against loss, unauthorised access, alteration or disclosure. As no system can guarantee absolute security, these measures are regularly adapted to the risks.
Some technical providers may process data outside the European Economic Area. In such cases, transfers are covered by an adequacy decision or safeguards recognised by the GDPR, including the European Commission's standard contractual clauses.
8.Minors and updates
The website and shop are not intended knowingly to collect children's data. A legal representative may request deletion of data submitted by a minor.
This policy may change to reflect updates to the website, its providers or the law. The date below identifies the version currently in force.