GOTS
Talseume Oversize Sweatshirt
Protection of your data
Privacy Policy
How Talseume collects, uses, and protects your personal data, in compliance with the GDPR.
Talseume places particular importance on protecting the privacy and personal data of its customers and visitors. This Privacy Policy transparently describes what data is collected, for what purposes, for how long, and what your rights are.
Elle est conforme au Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended Act No. 78-17 of 6 January 1978, known as the "Informatique et Libertés" Act.
1. Responsable du traitement
Le responsable du traitement, au sens de l'article 4 du RGPD, est :
- BOUZANGA Mes reves, entrepreneur individuel (EI) exploitant sous le nom commercial Dikenga design la marque Talseume
- Postal address : 44c Allée Robillard, 93320 Les Pavillons-sous-Bois, France
- RCS Bobigny : 519 495 758
- Email : [email protected]
No Data Protection Officer (DPO) has been appointed, as such an appointment is not mandatory given the size of the business and the nature of the processing carried out. Requests concerning your data are handled directly by the data controller.
2. Personal data collected
We only collect data strictly necessary for the purposes described below. No sensitive data (racial origin, political opinions, health, etc.) is collected.
| Category | Data concerned | Source |
|---|---|---|
| Identity | Title, last name, first name, date of birth (optional) | Saisie directe |
| Contact details | Email address, phone number (optional) | Saisie directe |
| Livraison & facturation | Adresse postale, code postal, ville, pays | Saisie directe |
| Account client | Password (encrypted), order history, wishlist | Account creation |
| Paiement | Banking data (processed and stored exclusively by Stripe, never by Talseume) | Stripe / Klarna |
| Navigation | IP address, browser type, OS, pages viewed, session duration, traffic source | Cookies & logs |
| Communications | Newsletter preferences, open rate, clicks | Inscription newsletter |
| Service client | Content of exchanges, complaints, returns | Email, formulaire |
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|
| Traitement, suivi et livraison des commandes | Performance of the contract (art. 6.1.b) | Duration of the contract + 10 years (accounting obligation, art. L.123-22 of the French Commercial Code) |
| Gestion du compte client | Performance of the contract (art. 6.1.b) | 3 years from the last activity |
| Customer service, after-sales support, complaints | Legitimate interest (art. 6.1.f) | 3 years from the last contact |
| Newsletter et communications marketing | Consentement (art. 6.1.a) | Until unsubscription, then 3 years |
| Mesure d'audience & statistiques | Consentement (cookies) | 13 mois maximum (recommandation CNIL) |
| Personnalisation & recommandations | Consentement | 13 mois |
| Lutte contre la fraude | Legitimate interest (art. 6.1.f) | 5 ans |
| Legal obligations (invoicing, accounting) | Legal obligation (art. 6.1.c) | 10 ans |
4. Data recipients
Your data is not jamais vendues, rented, or sold to third parties for commercial purposes. They are only transmitted to subprocessors strictly necessary for the performance of their duties :
| Sous-traitant | Purpose | Localisation |
|---|---|---|
| Stripe | Traitement des paiements par carte bancaire | Irlande / États-Unis |
| Klarna | Paiement en plusieurs fois | Sweden |
| Netlify | Website hosting | États-Unis |
| La Poste / Colissimo / Mondial Relay | Acheminement des commandes | France |
| Brevo / Mailjet (newsletter) | Envoi d'emails marketing et transactionnels | European Union |
| Google Analytics | Anonymized traffic statistics | États-Unis (sous CCT) |
| Meta Business Suite (Instagram, Facebook) | Mesure et ciblage publicitaire (sous consentement) | Irlande / États-Unis |
Each subprocessor acts on behalf of and in accordance with Talseume's instructions, under a contract compliant with Article 28 of the GDPR.
5. Transfers outside the European Union
Some of our subprocessors (Stripe, Netlify, Google, Meta) may process your data in the United States. These transfers are strictly governed by the clauses contractuelles types adopted by the European Commission, guaranteeing an adequate level of protection in accordance with Article 44 et seq. of the GDPR.
6. Data security
Talseume implements all appropriate technical and organizational measures to ensure the security and confidentiality of your data : systematic HTTPS connections, password encryption (hashing), strong authentication for access to internal tools, access limited to authorized and trained personnel, regular backups.
7. Vos droits
In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your personal data at any time :
- Right of access — obtain confirmation that your data is being processed and receive a copy of it ;
- Droit de rectification — correct inaccurate or incomplete data ;
- Right to erasure (the "right to be forgotten") — request the erasure of your data, subject to legal obligations ;
- Right to restriction of processing — temporarily freeze the use of your data ;
- Right to data portability — retrieve your data in a structured, machine-readable format ;
- Droit d'opposition — object to processing, in particular for commercial prospecting purposes ;
- Droit de retirer votre consentement at any time for processing based on this ground ;
- Right to define post-mortem directives concerning the fate of your data after your death.
To exercise these rights, write to [email protected], enclosing proof of identity. A response will be provided within a maximum of one month.
8. Filing a complaint with the CNIL
If, after contacting us, you believe that your rights are not being respected, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) (French Data Protection Authority) : www.cnil.fr/fr/plaintes.
9. Cookies
The use of cookies and trackers on the site is detailed in our Politique cookies. You may manage your preferences at any time via the consent banner.
10. Modification de la Politique
This Policy may be updated to reflect legal, technical, or operational changes. Any substantial modification will be notified by email or via an information banner on the site, at least 30 days before it takes effect.
11. Contact
For any question regarding this Policy or the exercise of your rights : [email protected].
