what we hold, why, and for how long

Data controller

HANDSON, trading as Atelier Brut

Address

14 Rue Chauveau-Lagarde, 75008 Paris, France

Contact for data matters

support@handsonclothing.store

Data protection officer

Not appointed. Our processing does not meet the thresholds that require one; data requests go to the address above and are handled by the publication director.

Order details

Name, email, telephone, delivery address, order contents. Purpose: to take, prepare, deliver and account for your order. Basis: performance of the contract you have entered into.

Accounting records

Invoices and payment records. Purpose: to meet accounting and tax obligations. Basis: legal obligation.

Messages you send

Name, email, optional telephone, subject and the content of your message. Purpose: to answer you. Basis: your consent, given by the box you tick on the form.

Trade enquiries

Name, email, the trade you describe, wear point, current size, budget range. Purpose: to write back once with clothing suggestions. Basis: your consent. This is not a mailing list.

Site measurement

Aggregate page counts, only if you accept measurement cookies. Purpose: to see which pages are read. Basis: your consent, refusable at no cost.

Order and delivery data

Three years from the last contact, then deleted.

Invoices and accounting records

Ten years, as required by the French Commercial Code.

Messages and trade enquiries

Three years from the reply.

Your cookie choice

Six months, then you are asked again.

Aggregate measurement

Twenty-five months, in a form that does not identify you.

• —The carrier delivering your parcel receives your name, delivery address and telephone number, and nothing else.
• —Our accountant receives invoice data, under a professional duty of confidentiality.
• —The payment provider chosen by the operator processes the transaction at the final step. It is bound as a processor and receives only what the payment needs.
• —Our hosting provider stores the site and its data as a processor. It is named on the legal notice.

Each of these acts on our instructions under a written contract and may not use your data for its own purposes.

Our hosting provider is established in the United States. Where data is processed outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses together with the technical measures our provider applies.

You may ask us for a copy of the safeguards that apply to a given transfer by writing to the address above.

• —Access. A copy of the data we hold about you.
• —Rectification. Correction of anything inaccurate or incomplete.
• —Erasure. Deletion, where we have no continuing legal reason to keep it. Accounting records are the usual exception.
• —Restriction. Suspension of processing while a dispute about accuracy or lawfulness is resolved.
• —Portability. The data you gave us, in a machine-readable file.
• —Objection. To processing based on our legitimate interests.
• —Withdrawal of consent. At any time, without affecting what was lawful before you withdrew it.
• —Instructions after death. You may tell us what should happen to your data, generally or specifically.

Write to support@handsonclothing.store and we answer within one month. If a request is complex we may extend that by two months and will tell you why within the first month. We may ask for proof of identity where there is real doubt about who is asking.

If you are not satisfied with how we have handled your data or your request, you have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés.

Authority

Commission Nationale de l’Informatique et des Libertés

Address

3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France

Website

www.cnil.fr

You may complain to the authority whether or not you have contacted us first, and doing so costs nothing.

The site is served over an encrypted connection. Access to order data is limited to the people who need it to prepare and account for orders. Data is held within the European Economic Area wherever our providers offer it.

Where a breach is likely to result in a high risk to your rights, we will tell you directly and without undue delay, and we will notify the supervisory authority within the statutory period.

Cookie use is set out separately on the cookies page, where you can also change your choice.