This policy describes what data Démo Atelier processes, why, how long it is kept and what your rights are. It applies to the website and to the customer account. If anything is unclear, write to us.
1. Data controller
AI ROCKET, a sole proprietorship (entreprise individuelle) owned by François Hermand, SIREN 851 274 183, 1 rue du Seigneur Foulque, 60240 Parnes, France, email: legal email address to be completed. No data protection officer has been appointed; requests are handled directly by the controller, at bonjour@demo.rocket-ia.fr.
2. The data we process
Data processed by the website:
- adresse IP (condensat)
- commandes
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Email address, order contents, amount, proof of acceptance of the Terms | Perform the order, deliver, notify you, prove the sale | Performance of the contract | Unpaid orders: 30 days; paid orders: 10 years, then anonymised |
| Invoices | Accounting | Legal obligation | 10 years |
| Login codes (stored as a fingerprint), session token | Open and secure the customer account | Performance of the contract | Codes: 15 minutes; sessions: 90 days |
| IP address, as a hash | Security, abuse prevention | Legitimate interest | 30 days |
| Technical server logs | Security, diagnostics | Legitimate interest | 12 months |
| Random measurement identifier, pages viewed, order steps, origin of the visit | Audience measurement of the website | Legitimate interest (measurement exempt from consent) | 13 months |
Payment is processed by Stripe: we neither receive nor keep your card details. Stripe acts as a data controller for the data needed for payment, under its own privacy policy.
3. What we do not do
- We do not sell or rent any data.
- We use no advertising tracker and no third-party cookie.
- We do not send marketing emails without your consent; each one carries an unsubscribe link.
4. Audience measurement
To know which pages are useful and where visitors come from, we count visits ourselves. A random identifier is created in your browser on your first visit and kept for 13 months. It is only used to link your visits together on this website alone: it is not passed on to anyone and does not follow you to any other website.
We record the page viewed, the step reached in the order process, the language, the type of device and, where applicable, the campaign or website that brought you here. Your IP address is not kept: only a hash renewed every day tells two visitors apart, without making it possible to identify anyone. This measurement is limited to our own use, with no cross-referencing or transfer: it falls under the consent exemption provided by the French data protection authority (CNIL) for audience measurement. You can stop it by clearing this website's data in your browser.
5. What your browser keeps
Your browser's local storage keeps your language, your session if you sign in and the measurement identifier described above. These items are used only to make the website work.
6. Recipients and transfers
Processors, each limited to the data needed for its task and bound by a contract compliant with Article 28 of the GDPR:
- Hosting: hosting provider's name to be completed.
- Email delivery: Brevo (Sendinblue SAS, France).
Recipients that process data on their own behalf (separate controllers):
- Payment: Stripe Payments Europe, Limited (Ireland); transfers to the United States are covered by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
We may be required to disclose data to the authorities where the law so requires.
7. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability of your data, the right to withdraw your consent where it is the basis of processing, and the right to give instructions on what happens to your data after your death. To exercise them, write to bonjour@demo.rocket-ia.fr from the address concerned. We reply within one month. You may lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.
8. Security
Encrypted connections, restricted access to servers, one-time login codes, revocable sessions, encrypted backups. In the event of a data breach likely to put your rights at risk, we inform you and the CNIL within the legal time limits.
9. Changes
This policy follows changes to the website. Its version appears at the top; any new tracker leads to a new version and a new request for consent. The French version of this policy prevails in the event of any discrepancy.