Privacy policy

1. Data controller

MYRMIDONS 746 (Achille 746), 11 rue Jules Verne, 63200 Mozac, France, registered under number 978 555 191, is the controller for the processing described below. Contact: contact@praxitele746.fr

No data protection officer has been appointed: the activity falls under none of the cases making that mandatory. Requests are handled directly by the legal representative.

2. What is collected, and why

Buying a piece

Email, name, billing address, country, VAT number where applicable. Purpose: perform the sale, issue the invoice, apply the right VAT rate. Legal basis: performance of the contract and the statutory invoicing obligation.

Proof of consent

Timestamp of acceptance of the terms and, where given, of the waiver of the right of withdrawal, with the IP address used. Purpose: prove those consents were collected before payment, as the law requires. Legal basis: legal obligation and legitimate interest in holding evidence.

Opening the vault

Email entered on the access page. Purpose: check with the payment provider that an order exists, then send an access link. Legal basis: performance of the contract.

Quote request or message

Name, email, message content, budget and deadline given. Purpose: answer the request and, where relevant, prepare a quote. Legal basis: pre-contractual steps taken at the person's request.

Technical logs

IP address, date, page requested, browser type, kept by the host. Purpose: site security, abuse detection, request rate limiting. Legal basis: legitimate interest in protecting the service.

No data is collected for advertising. No profiling is carried out. No automated decision produces legal effects on anyone.

3. Retention periods

Invoices and accounting records

10 years (article L123-22 of the French Commercial Code)

Proof of consents attached to an order

5 years after the sale

Quote requests and messages that went nowhere

3 years after the last exchange

Technical buyer cache (signed email, never in clear text)

180 days

Vault access cookie

180 days

Language cookie

12 months

Host security logs

per Vercel's policy, normally 30 days

4. Cookies and analytics

This site sets no advertising cookie and uses no third-party tracker requiring your consent. It therefore shows no consent banner — not out of neglect, but because it has nothing to ask you to accept.

p746_acces

Strictly necessary cookie, set only once the vault has been opened. It holds a signed token, unreadable by page JavaScript, used to check your access right. Duration: 180 days.

p746_lang

Strictly necessary to the language switch: it remembers which version of the site you were reading. Duration: 12 months.

Audience measurement, where enabled, is handled by Plausible Analytics: no cookie, no personal data, no IP address retained, no cross-site tracking. Only aggregate page-view statistics are produced. That configuration is the one the French data protection authority accepts without consent.

5. Who else sees this data

Data is never sold, rented or passed to third parties for commercial purposes. Only the technical providers strictly necessary to run the service are involved, bound by contract under article 28 GDPR.

Stripe Payments Europe, Ltd.

Payment, invoicing, VAT calculation — Ireland (EU) · transfers covered by SCCs — https://stripe.com/fr/privacy

Resend, Inc.

Transactional email delivery — United States · transfers covered by SCCs (DPF) — https://resend.com/legal/privacy-policy

Vercel Inc.

Website hosting and technical logs — cdg1 region (Paris) · transfers covered by SCCs — https://vercel.com/legal/privacy-policy

Transfers outside the European Union are covered by the European Commission's standard contractual clauses. Data may also be disclosed to the tax authorities or a judicial authority where the law requires it.

6. Security

• The site is served over HTTPS only.
• No card data passes through this site: entry happens on a page hosted by Stripe.
• Vault access relies on a signed token and an httpOnly cookie, out of reach of page JavaScript.
• Email addresses used as cache keys are signed and never stored in clear text.
• Public endpoints are rate-limited to prevent address enumeration.

Think you have found a security flaw? Report it to contact@praxitele746.fr. Any good-faith report gets an answer and will never be met with legal action.

7. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability over your data, together with the right to leave instructions on what happens to it after your death.

To exercise them, write to contact@praxitele746.fr from the address concerned, or by post to 10 rue du Docteur Massénat, 19100 Brive-la-Gaillarde, France. An answer follows within one month. Proof of identity is requested only where there is serious doubt about who is asking.

The right to erasure does not extend to data the law requires to be kept, in particular invoices and the proof of consents attached to a sale.

You may also lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — https://www.cnil.fr

8. Changes

This policy may change with the site. The date of the last update is at the top of this page. A substantial change affecting orders in progress is notified by email to the clients concerned.