Privacy Policy

At Tapis Vintage, the protection of your personal data is a priority.

When you use the site https://www.tapisvintage.com (the "Site") and as part of the management of our contractual relationships with our customers, we are required to collect personal data concerning you.

This policy aims to inform you about how we process this data in accordance with Regulation (EU) 2016/679 of April 27, 2016, on data protection (the "GDPR") and Law No. 78-17 of January 6, 1978, on information technology, files, and freedoms (together the "Applicable Regulations").

1. Who is the data controller?

The data controller is:

TAPIS VINTAGE
Company operating the site https://www.tapisvintage.com
Email: contact@tapisvintage.com
(hereinafter "We")

2. What data do we collect?

Personal data is any information that allows an individual to be identified directly or indirectly.

We collect the following categories:

• Identification data: last name, first name, email address, postal address, phone number

• Data relating to your orders

• Connection data (logs, encrypted passwords)

• Navigation data (IP address, pages viewed, date and time of connection, browser used, operating system)

• Economic and financial data (data relating to payments via our secure providers)

• Information submitted via the contact form

Mandatory data is indicated at the time of collection.

3. For what purposes, on what legal bases, and for how long do we retain your data?

Provide services available on the Site

Legal basis: performance of the contract
Duration: for the entire duration of the account + probationary archiving for 5 years

Fulfill your orders

Legal basis: performance of the contract
Duration: duration of the contractual relationship
Invoices: 10 years (legal obligation)

Payment data is processed by our secure providers (Shopify Payments, Stripe, PayPal).
Data relating to the visual cryptogram is never stored.

Manage customer reviews

Legal basis: legitimate interest
Duration: 2 years

Send newsletters

Legal basis: consent
Duration: 3 years after last contact or withdrawal of consent

Respond to contact requests

Legal basis: legitimate interest
Duration: 3 years

Comply with legal obligations

Invoices: 10 years
Contractual data: 10 years

Audience measurement cookies

Legal basis: consent
Duration: 25 months

4. Recipients of the data

Access to the data is granted to:

        Tapis Vintage internal staff

Our subcontractors: Shopify host, payment providers, delivery providers, marketing and analytical tools

Public authorities in case of legal obligation

5. Transfer outside the European Union

Certain data may be transferred outside the EU via the services used (Shopify, analytical tools).

These transfers are governed in accordance with Articles 45 and 46 of the GDPR:

• Adequacy decisions

• Standard contractual clauses

• Appropriate safeguards

6. Your rights

In accordance with Articles 13 to 22 of the GDPR, you have:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to object

• Right to data portability

• Right to withdraw your consent

You can exercise your rights at:
contact@tapisvintage.com

You can lodge a complaint with the CNIL.

7. Cookies

For more information regarding cookies, please consult our Cookie Policy.

8. Contact

Email: contact@tapisvintage.com

Effective date: 01/01/2025