Privacy Policy
Last updated: 2025-09-23
1. Data Controller
“Souvenirs Éternels” ("we") is the data controller for personal data collected through our website and services. Contact: souvenirQRfrance@gmail.com.
2. Data We Collect
- Identification: name, email, order information, shipping address (via payment).
- Memorial content: texts, photos, videos provided by the customer.
- Technical data: technical logs, IP addresses, security events.
- Cookies and trackers (see Cookies Policy).
3. Purposes and Legal Bases
- Service provision (creation/hosting of memorials, QR generation) – Contract performance.
- Payment and billing (via Stripe/Netlify Functions) – Contract/legal obligations.
- Customer support and communications – Legitimate interest / Contract performance.
- Security, fraud prevention, service improvement – Legitimate interest.
- Non-essential analytics cookies – Consent.
4. Retention Periods
- Account/Order data: during the contractual relationship then legal archiving.
- Memorial content: as long as the memorial remains published by the client.
- Technical logs: limited duration necessary for security and diagnostics.
5. Recipients and Transfers
We use processors for hosting and features: Netlify (hosting), Google Firebase (database/storage), Stripe (payment). These providers may operate outside the EU; we ensure appropriate safeguards (SCCs, technical measures). No data resale.
6. Your Rights
Under GDPR, you have rights of access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with your authority. Contact: souvenirQRfrance@gmail.com.
7. Security
We apply reasonable technical/organizational measures (encryption in transit, access control, security logs). Private memorial passwords are never stored in clear text: we store only a SHA‑256 hash.
8. User-Generated Content
You are responsible for the content you upload. Do not upload sensitive data without a proper legal basis nor unlawful content. Reported content may be suspended/removed.
9. Cookies
See our Cookies Policy for details and consent management.