This English version is provided for convenience. In case of discrepancy, the French version prevails.
Last updated: 27 October 2026
This policy explains what personal data is collected on cartes-japonaises.fr, why, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
Data controller
Davys Masker, sole trader (entrepreneur individuel), 4, rue Bastion de l’Évangile, 17000 La Rochelle, France (SIRET 443 291 893 00024). Contact: [email protected].
Data collected and purposes
| Situation | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Contact form or email | Name, email address, content of the message | To reply to your request (availability of a card, question, reservation, etc.) | Legitimate interest / pre-contractual measures | 3 years after the last exchange |
| Creating a customer account | Surname, first name, email address, password (encrypted), addresses | To manage your account and your order history | Performance of a contract | Until the account is deleted, or 3 years without activity |
| Order | Identity, billing and delivery addresses, email, telephone number, order details | To process, ship and invoice the order, and to handle after-sales service | Performance of a contract; legal obligation (invoicing) | Duration of the commercial relationship; accounting records 10 years (Article L.123-22 of the French Commercial Code) |
| Blog comments | Name, email address, IP address, content of the comment | To publish and moderate comments, and to fight spam | Legitimate interest | For as long as the comment is published |
| Browsing and security | IP address, pages viewed, browser | To protect the website against attacks and abuse | Legitimate interest | A few weeks in the security logs |
| Audience measurement | Cookie identifier, page views, technical data and approximate location data | To measure traffic to the website and improve it | Consent | Cookies: 13 months maximum; statistical data: 14 months maximum |
| Origin of orders | Source of the visit (search engine, link, social network), landing pages | To know which channels bring in orders | Legitimate interest | Duration of the browsing session |
We do not collect your banking details: when online payment is offered, it is processed directly by the payment provider, which applies its own privacy policy. Your data is never sold or rented out.
Recipients of the data
Your data is intended for the publisher of the website. It may be passed on, to the extent necessary, to the following service providers:
- IONOS SARL (Sarreguemines, France): hosting of the website and email service;
- La Poste: delivery of your orders (name, address, email or telephone number for tracking);
- Google (Google Analytics, via the Site Kit plugin): audience measurement, only if you accept it;
- Automattic (Gravatar service): display of the avatars linked to the email addresses of authors and commenters;
- Wordfence: protection of the website against attacks (analysis of IP addresses);
- administrative or judicial authorities, only upon a legal request.
Transfers outside the European Union
Some service providers (Google, Automattic, Wordfence) may process data in the United States. These transfers are governed by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
Cookies
A cookie is a small file placed on your device when you visit a website. Cookies that are necessary for the website to function are placed without consent; audience measurement cookies are placed only with your agreement, which you may withdraw at any time.
The full list of cookies used (basket, customer account, security, origin of orders and audience measurement), their lifespan and how to refuse them can be found on our cookie policy page.
Your rights
You have the right to access, rectify, erase, restrict and port your data, the right to object to processing based on legitimate interest, the right to withdraw your consent at any time and the right to give instructions on what happens to your data after your death.
To exercise these rights, write to [email protected] or by post to the address above. You will receive a reply within one month. If you believe your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.
Security
The website is served over HTTPS, passwords are encrypted and access to the administration area is protected. The publisher takes reasonable measures to preserve the confidentiality of your data.
Changes to this policy
This policy may change, in particular if a new service is added. The date of the last update is shown at the top of the page. See also our legal notice.
Français