Privacy policy

Data controller

AB CONCEPTION (publisher of the Casavoilà website), 425 Chemin du Pré Piraud, 38300 Saint-Savin, France — bonjour@casavoila.com. We have not appointed a data protection officer; this address is the point of contact for any question about your data.

Data collected

Via the contact form and your orders: name, email, phone, delivery address, project description. With your consent to audience measurement: pages viewed, approximate city and country derived from your IP address, device type and referring site — our own measurement tool never stores your IP address. With your consent to advertising: advertising cookie identifiers, click identifiers (gclid, fbclid), pages viewed and purchase events; if you place an order, your email address and phone number may be sent to Google and Meta as an encrypted fingerprint (SHA-256) in order to link your order to an ad. These fingerprints are not anonymous: they allow those companies to recognise you. No sensitive data is requested.

Purposes and legal bases

Your data is processed in order to: fulfil your order and keep you informed about it (legal basis: performance of the contract); answer your quotation and after-sales requests (pre-contractual steps and legitimate interest); comply with our accounting and tax obligations (legal obligation); measure site traffic, measure how our advertising performs and show you relevant advertising (legal basis: your consent, which you may withdraw at any time). No data is ever resold.

Recipients

Your data is processed by the providers required to deliver the service: Hetzner (site hosting, Germany), OVH (file storage, France), Stripe (payments, Ireland), Resend (order emails, United States), Sendcloud (shipping, Netherlands), Twilio (SMS, United States) and Anthropic (the site's chat assistant, United States). The 3D configurator additionally loads its fonts from Google and its 3D display libraries from unpkg: these services receive your IP address, without which they could not respond to you. With your consent only, your data is also processed by Google Ireland Limited and Google LLC (audience measurement and advertising) and by Meta Platforms Ireland Limited and Meta Platforms, Inc. (advertising).

Google acts as a processor for audience measurement, and as an independent controller for data shared for advertising purposes. Meta Platforms Ireland Limited acts as a joint controller with Casavoilà for the event data used for advertising targeting and delivery; the essence of that arrangement is made available to you on request.

Transfers outside the European Union

Resend, Twilio, Anthropic, Google LLC and Meta Platforms, Inc. are located in the United States. These transfers rely on the “EU-US Data Privacy Framework” adequacy decision adopted by the European Commission on 10 July 2023, supplemented where applicable by standard contractual clauses.

Advertising, profiling and conversion measurement

If you accept the advertising purpose, we measure which ads bring visitors and orders, and we may show you Casavoilà advertising on other websites, on Facebook and on Instagram. This constitutes profiling for advertising purposes. Part of this measurement takes place server to server, at the moment your order is recorded: the information sent then does not include your name in clear text, but encrypted fingerprints of your email address and phone number. If you refuse this purpose, or withdraw your agreement, none of this information is sent — including for orders placed afterwards.

Google itself explains how it uses the data collected on sites that use its services, such as ours: How Google uses data.

Retention periods

Contact data is kept for as long as necessary to handle your request, then archived in accordance with legal obligations (accounting and commercial periods). Audience measurement data from our own tool is kept for a maximum of 13 months. Where you accept measurement or advertising, data collected by Google is kept for up to 14 months, Google advertising audience lists for up to 540 days and Meta custom audiences for up to 180 days. Your choice regarding trackers is kept for 6 months.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict and object, as well as the right to data portability. You may withdraw your consent to trackers at any time, as easily as you gave it, via the “Cookies” link at the bottom of every page, and object to advertising profiling by the same means. To exercise your other rights: bonjour@casavoila.com. You may also lodge a complaint with the CNIL (www.cnil.fr).