Privacy policy

Data controller

Controller

Manoël Pérignon, sole trader (entrepreneur individuel, EI), trading name PharWeb

Address

1 rue des Déportés, 56300 Pontivy, France

Personal data contact

contact@pharweb.fr

Data collected

• Contact form: first name, last name, email address, phone number, status (individual, business, local authority, association), needs ticked, indicative budget and the content of your message.
• Exchanges by email, phone or WhatsApp: the information you give us to handle your request.
• Online shop: when you create your account and place an order, we record your name, username, email address, password (encrypted), billing address (last name, first name, company, address, phone number, VAT number where applicable), the details of your orders, the IP address used when ordering and your download history. Payment is made directly with Stripe: your bank card details do not pass through our website and are never kept by PharWeb.
• Matomo audience measurement: pages viewed, visit duration, browser and device type, IP address. Matomo is hosted on our own servers, with no sharing with third parties.
• Internal website statistics: a statistics tool built into the website also records the pages viewed and the duration of visits.
• Google Analytics audience measurement (loaded via Google Tag Manager): only if you accept it in the cookie banner.
• Disqus comments on blog articles: only if you accept the “Social networks” category; Disqus then processes the data related to your use of its service.
• Technical security data: IP address and requests received by the server, used by the website firewall to block attacks.
• Anti-bot protection for forms (Cloudflare Turnstile): when a form is submitted (contact, newsletter, account creation, forgotten password…), an invisible check carried out by Cloudflare analyses technical data (IP address, browser and device characteristics) to distinguish human visitors from bots.
• Cookie choices: your consent preferences, recorded without your IP address.

The information requested in the form is used only to handle your request.

Purposes and legal bases

Retention periods

Contact requests and prospects

3 years from the last exchange

Customers

For the duration of the contractual relationship, then according to legal periods (accounting records: 10 years)

Shop customer account

Until deleted at your request, or 3 years after your last order or login

Shop orders and invoices

10 years (accounting obligations)

Cookie storing your choice

180 days (6 months), after which you are asked again

Consent log

395 days (about 13 months)

Audience measurement cookies

13 months maximum

Recipients

Your data is intended for PharWeb only. It is never sold, rented or passed on. Some technical service providers may access it strictly within the limits of their assignment:

• IONOS SARL, website host.
• Stripe (Stripe Payments Europe, Ltd., Ireland), payment provider: it receives the information needed to pay for your order. Stripe may process data outside the European Union.
• turboSMTP, the website’s email sending service (order confirmations, notifications, form replies): it receives your email address and the content of the messages sent to you. Its servers are located in the United States.
• OVH, host of the servers of our Matomo audience measurement tool.
• Google (Google Tag Manager and Google Analytics), only if you accept it. Google may process data outside the European Union, under the safeguards provided for by the GDPR.
• Disqus (blog comments), only if you accept it. Disqus may process data outside the European Union.
• Cloudflare (Turnstile service), for anti-bot verification of forms. Cloudflare may process data outside the European Union. This data is processed in accordance with Cloudflare’s Turnstile Privacy Addendum.

Cookies and trackers

On your first visit, a banner lets you accept, refuse or choose cookies by category. Non-essential cookies are only set after your consent.

• Necessary cookies: website operation and storage of your choices. They do not require consent.
• Matomo audience measurement: visit statistics hosted on our servers.
• Analytics cookies: Google Analytics via Google Tag Manager, activated only with your consent.
• Social network cookies: Disqus comments on blog articles, blocked until you have accepted them.

Your choice is kept for 6 months. You can change it at any time using the “Cookie manager” icon at the bottom left of the screen, or set your browser to block cookies.

Security

The website is served exclusively over HTTPS, protected by a web application firewall, kept up to date and backed up regularly. Access to the data is limited to PharWeb.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to object to it and to data portability, as well as the right to withdraw your consent at any time and to set out instructions on what happens to your data after your death.

To exercise these rights, write to contact@pharweb.fr or by post to the address above. You will receive a reply within one month. If there is reasonable doubt about your identity, proof may be requested.

Complaint to the CNIL

If, after contacting us, you believe that your rights are not being respected, you can lodge a complaint with the French data protection authority (Commission nationale de l’informatique et des libertés, CNIL): www.cnil.fr/fr/plaintes.

Changes to this policy

This policy may be updated to reflect changes to the website or to regulations. The online version is the only one that applies. For any question: contact@pharweb.fr. See also our legal notice.