Privacy Policy

Last updated: 24 August 2026. This policy describes the current local configuration and the planned production configuration; providers not yet contracted or connected are identified as such.

Data controller

The controller is Daciana Androne EI, 21 rue d’Humeroeuille, 62770 Blangy-sur-Ternoise, France. Correspondence may be sent to Galerie 46, 46 rue d’Arras, 62140 Hesdin, France, or to contact@andronedaciana.com.

Data, purposes and legal bases

• Contact messages, original enquiries and print requests: to answer the request and take requested pre-contractual steps.
• Guest checkout, orders, invoices, delivery, returns and payment status: to perform the contract and meet accounting, tax, fraud-prevention and legal obligations. Full card details are handled by SumUp and are not stored on this website.
• Newsletter email, preferred language, consent source and timestamp: on the basis of consent. Subscription is optional, separate from the purchase and may be withdrawn at any time.
• Strictly necessary technical and security logs: legitimate interest in protecting and maintaining the service.
• Anonymous audience statistics: Matomo will be configured without cookies, advertising, individual profiling, cross-site tracking or e-commerce tracking, subject to a final compliance audit.

Recipients and providers

Access is limited to Daciana and authorised providers who need the data for hosting and email (OVHcloud once contracted), payment (SumUp), delivery quotations and shipping (Boxtal and the selected UPS, DHL, Chronopost or Colissimo service), newsletter delivery (Brevo), audience measurement (Matomo), maintenance, security and backup. Customer contact details are not sent to MONOEUVRE when a print is produced because each print is first delivered to Daciana for checking and hand signing. Data is not sold. Each piece of art, original or print, will be delivered with a certificate of autenticity.

The final production contracts, processing locations, subprocessors and safeguards for any transfer outside the European Economic Area must be audited before launch.

Retention

• General contact messages not followed by a quote or order: 12 months after the last exchange.
• Print requests and quotes not followed by an order: 3 years after the last exchange.
• Orders, payment evidence, delivery documents and invoices: 10 years with restricted access.
• Technical and security logs: no more than 12 months, except evidence isolated for an unresolved incident.
• Newsletter campaign history: 12 months. Consent and opt-out evidence is kept as needed to demonstrate the request and respect the exclusion.
• Backups: daily, with a planned 30-day retention and at least one independent copy; the final schedule depends on the contracted hosting offer.

Cookies and local storage

No advertising or behavioural tracking is planned. Matomo is intended to work without cookies. Only storage strictly necessary for language selection, security, the cart and checkout may be used without consent after a real production audit. Any future non-essential tracker will require a separate decision and consent where required.

Audience measurement opt-out

Matomo is configured without audience-measurement cookies, but you may still object to anonymous audience measurement at any time. Use the control below. A preference cookie may then be stored solely to remember and respect your choice.

Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, portability or object to processing based on legitimate interests. You may withdraw newsletter consent at any time using the unsubscribe link. Write to contact@andronedaciana.com. Reasonable proof of identity may be requested where necessary. You may also complain to the CNIL at www.cnil.fr.