Protection of your data

Privacy Policy

How Talseume collects, uses, and protects your personal data, in compliance with the GDPR.

Last updated: 18 May 2026 · GDPR compliant

Talseume places particular importance on protecting the privacy and personal data of its customers and visitors. This Privacy Policy transparently describes what data is collected, for what purposes, for how long, and what your rights are.

It complies with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended Act No. 78-17 of 6 January 1978, known as the "Informatique et Libertés" Act.

1. Data Controller

The Data Controller, within the meaning of Article 4 of the GDPR, is :

BOUZANGA Mes reves, sole trader (entrepreneur individuel / EI) operating under the trade name Dikenga design for the Talseume brand
Postal address : 44c Allée Robillard, 93320 Les Pavillons-sous-Bois, France
Bobigny Trade and Companies Register (RCS) : 519 495 758
Email : [email protected]

No Data Protection Officer (DPO) has been appointed, as such an appointment is not mandatory given the size of the business and the nature of the processing carried out. Requests concerning your data are handled directly by the data controller.

2. Personal data collected

We only collect data strictly necessary for the purposes described below. No sensitive data (racial origin, political opinions, health, etc.) is collected.

Category	Data concerned	Source
Identity	Title, last name, first name, date of birth (optional)	Directly provided by the user
Contact details	Email address, phone number (optional)	Directly provided by the user
Shipping & billing	Postal address, postcode, city, country	Directly provided by the user
Customer account	Password (encrypted), order history, wishlist	Account creation
Payment	Banking data (processed and stored exclusively by Stripe, never by Talseume)	Stripe / Klarna
Browsing	IP address, browser type, OS, pages viewed, session duration, traffic source	Cookies & logs
Communications	Newsletter preferences, open rate, clicks	Newsletter sign-up
Customer Service	Content of exchanges, complaints, returns	Email, contact form

3. Purposes and legal bases

Purpose	Legal basis (GDPR)	Retention period
Processing, tracking, and delivery of orders	Performance of the contract (art. 6.1.b)	Duration of the contract + 10 years (accounting obligation, art. L.123-22 of the French Commercial Code)
Customer account management	Performance of the contract (art. 6.1.b)	3 years from the last activity
Customer service, after-sales support, complaints	Legitimate interest (art. 6.1.f)	3 years from the last contact
Newsletter and marketing communications	Consent (Art. 6(1)(a))	Until unsubscription, then 3 years
Audience measurement & statistics	Consent (cookies)	13 months maximum (CNIL recommendation)
Personalization & recommendations	Consent	13 months
Fraud prevention	Legitimate interest (art. 6.1.f)	5 years
Legal obligations (invoicing, accounting)	Legal obligation (art. 6.1.c)	10 years

4. Data recipients

Your data is not never sold, rented, or sold to third parties for commercial purposes. They are only transmitted to subprocessors strictly necessary for the performance of their duties :

Subprocessor	Purpose	Location
Stripe	Processing of card payments	Ireland / United States
Klarna	Instalment payment	Sweden
Netlify	Website hosting	United States
La Poste / Colissimo / Mondial Relay	Order delivery	France
Brevo / Mailjet (newsletter)	Sending marketing and transactional emails	European Union
Google Analytics	Anonymized traffic statistics	United States (under Standard Contractual Clauses)
Meta Business Suite (Instagram, Facebook)	Advertising measurement and targeting (subject to consent)	Ireland / United States

Each subprocessor acts on behalf of and in accordance with Talseume's instructions, under a contract compliant with Article 28 of the GDPR.

5. Transfers outside the European Union

Some of our subprocessors (Stripe, Netlify, Google, Meta) may process your data in the United States. These transfers are strictly governed by the Standard Contractual Clauses adopted by the European Commission, guaranteeing an adequate level of protection in accordance with Article 44 et seq. of the GDPR.

6. Data security

Talseume implements all appropriate technical and organizational measures to ensure the security and confidentiality of your data : systematic HTTPS connections, password encryption (hashing), strong authentication for access to internal tools, access limited to authorized and trained personnel, regular backups.

7. Your Rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your personal data at any time :

Right of access — obtain confirmation that your data is being processed and receive a copy of it ;
Right to rectification — correct inaccurate or incomplete data ;
Right to erasure (the "right to be forgotten") — request the erasure of your data, subject to legal obligations ;
Right to restriction of processing — temporarily freeze the use of your data ;
Right to data portability — retrieve your data in a structured, machine-readable format ;
Right to object — object to processing, in particular for commercial prospecting purposes ;
Right to withdraw consent at any time for processing based on this ground ;
Right to define post-mortem directives concerning the fate of your data after your death.

To exercise these rights, write to [email protected], enclosing proof of identity. A response will be provided within a maximum of one month.

8. Filing a complaint with the CNIL

If, after contacting us, you believe that your rights are not being respected, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) (French Data Protection Authority) : www.cnil.fr/fr/plaintes.

9. Cookies

The use of cookies and trackers on the site is detailed in our Cookie Policy. You may manage your preferences at any time via the consent banner.

10. Changes to this Policy

This Policy may be updated to reflect legal, technical, or operational changes. Any substantial modification will be notified by email or via an information banner on the site, at least 30 days before it takes effect.