Personal data – Spirit en Europe

Privacy and personal data protection policy

In accordance with Regulation (EU) 2016/679 of April 27, 2016 on the protection of personal data (known as the GDPR), this policy (hereinafter “the Policy”) sets out how Spirit Europe, whose head office is located at ZA la Batie, 229 All. de Champrond, 38330 Saint-Ismier, processes the personal information of its users.

The data controller is Philippe Collet, guarantor of the respect of your privacy.

The purpose of this Policy is to explain clearly how Spirit Europe collects, uses, stores, and secures your personal data (hereinafter “the Data”) when you use the website www.spiriteurope.com (hereinafter “the Site”).

Given the evolution of legal texts regarding data protection, this Policy may be modified. Users will be informed by email in the event of an update.

If any of the clauses should be declared invalid or contrary to current regulations, it will be considered unwritten without affecting the validity of the other provisions.

Data collected

Depending on your interactions with E-dkado (browsing, account creation, ordering, newsletter subscription, exchanges by email or telephone), different categories of data may be collected:

Identity and contact details: last name, first name, postal address, telephone number, email address.
Connection and browsing: IP address, browser type, pages visited, connection duration, operating system, language.
Orders and transactions: delivery and billing address, bank or PayPal details.
Exchanges and reviews: messages sent via forms, telephone calls, comments.
Social media use when the corresponding features are activated.

Methods of collection

Data can be collected in two ways:

Directly: via forms (account creation, order, contact), by email, or by telephone.
Indirectly: through cookies and trackers during your browsing. A specific cookie policy details their operation and use.

Purposes of processing

The data collected is used to:

Process your orders and ensure contractual follow-up.
Manage your user account and your requests via the contact page.
Guarantee transaction security and purchase traceability.
Send you information related to your purchases (invoices, order history).
Inform you about changes to the Site and services.
Improve the user experience (traffic analysis, personalization).
Send you commercial offers if you have consented.
Comply with legal and regulatory obligations.

Without certain information, it may be impossible to finalize an order or access certain features of the Site.

Data recipients

Your data is processed by the internal E-dkado team in charge of:

Order and shipment management.
Customer support.
Billing.

It may also be transmitted to external service providers strictly necessary for the proper functioning of the service, including:

Payment providers (PayPal, Crédit Agricole, Paybox).
Carriers (La Poste, Colissimo, etc.).
Accounting and tax services.
Technical providers (host, analysis tools such as Google Analytics).

All these partners are contractually committed to respecting confidentiality and processing data only within the framework defined by E-dkado.

Retention period

Data is kept for a limited period:

Up to 1 year after the last contact if no account has been created.
Up to 10 years for data related to an order (legal obligation).
Browsing data: 6 months for audience measurement cookies and 13 months for other trackers.
Account-related data: kept for 10 years from the last invoice, even after account deletion.

Beyond these periods, data is anonymized for exclusively statistical purposes.

Data security

Information is stored on secure servers located in France and hosted by Ionos. Technical measures (firewalls, SSL encryption, antivirus) and organizational measures are in place to prevent any loss, unauthorized access, alteration, or disclosure.

However, due to the risks associated with the Internet, absolute security cannot be guaranteed. It is therefore your responsibility to protect your login details and passwords.

Your rights

In accordance with the GDPR and the Data Protection Act, you have the following rights:

Access: obtain a copy of your data.
Rectification: correct inaccurate data.
Erasure: deletion of your data (excluding legal obligations, e.g., accounting).
Limitation: temporarily restrict processing.
Objection: object to certain processing, particularly for commercial purposes.
Portability: receive your data in a structured format.
Withdrawal of consent: at any time, without retroactive effect.