Privacy Policy

PRIVACY POLICY deco-arts.fr

Last updated on 02/09/2023.

PREAMBLE

This privacy policy informs you about how LINENS DIFFUSION uses and protects the information that you provide to us when you use this website accessible from the following URL: deco-arts.fr (hereinafter the "Website").

Please note that this privacy policy may be modified or supplemented at any time by LINENS DIFFUSION, in particular to comply with any legislative or technological developments. In such a case, the date of its update will be clearly identified at the top of this policy. These modifications are binding on the user once they have been informed of the updated privacy policy being published online and have accepted it.

ARTICLE 1. PARTIES

This privacy policy is applicable between the publisher of the Website, hereinafter " the Publisher ", and any person connecting to the Website, hereinafter " the User ".

ARTICLE 2. DEFINITIONS

" Website Content ": elements of any nature published on the Website, whether or not protected by intellectual property rights, such as texts, images, designs, presentations, videos, diagrams, structures, databases or software.

" Publisher " : LINENS DIFFUSION, SAS in its capacity as publisher of the Website.

" User ": any person connecting to the Website.

" Website " : the website accessible at the URL deco-arts.fr, as well as sub-sites, mirror sites, portals and related URL variations.

ARTICLE 3. SCOPE OF APPLICATION

This privacy policy is applicable to all Users. By clicking "I accept" during your registration on the Website, you fully and completely accept this policy. Similarly, by clicking "I accept" on the cookie information banner displayed on the Website, you confirm this acceptance, whilst allowing you to customise the cookies that will or will not be applied to you. You thereby acknowledge having fully read and accepted it without restriction.

The User acknowledges the evidential value of the Publisher's automatic recording systems and, unless they can provide evidence to the contrary, waives the right to contest them in the event of a dispute.

Acceptance of this privacy policy requires that Users have the necessary legal capacity or are at least 16 years of age, or failing that, have the authorisation of a guardian or curator if they lack capacity, of their legal representative if they are under 16, or that they hold a mandate if they act on behalf of a legal entity.

ARTICLE 4. PERSONAL DATA

In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016 and the applicable national legislation, the Publisher provides you with the following information:

4.1. Identity of the data controller

The controller of the data collected and processed on the Website is LINENS DIFFUSION, SAS, with its registered office at 97 Rue Sauveur Tobelem, 13007 Marseille, FR 84470173000013.

4.2. Data collection by the Publisher

4.2.1. Data collected

4.2.1.1 Data collected during browsing on the Website

When browsing the Website, you consent to the Publisher collecting information relating to: the content you view and click on; demographic data; the device used and its software environment; your location; your connection data (times, IP address, etc.).

4.2.1.2. Data collected when using the contact form or the contact email address

Use of the contact form or the contact email address by the User involves the Publisher collecting the following personal data: surname, first name, email address*, telephone number.

Personal data followed by an asterisk are mandatory for using the contact form. Users who do not wish to provide the information required for using the contact form will not be able to send a message to the Publisher directly from the Website.

4.2.1.3. Data collected during registration on the Website

Use of the registration form by the User involves the Publisher collecting the following personal data: surname*, first name*, postal address*, email address*, date of birth, telephone number.

Personal data followed by an asterisk are mandatory for registration on the Website. Users who do not wish to provide the information required for using the registration form will not be able to register directly from the Website.

4.2.1.4. Data collected when using the newsletter form

In the context of using the newsletter form, the Publisher may collect and process: your email address.

4.2.2. Purposes of the collection of personal data

Data collected during browsing is subject to automated processing for the purpose of:

Verifying the identity of persons ;
Ensuring and improving the security of services ;
Developing, operating, improving, providing and managing the Website;
Contextualising and improving the User experience;
Sending information and contacting persons, including by email ;
Targeting advertising content ;
Preventing any unlawful or illegal activity;
Enforcing the conditions relating to the use of the Website.

Data collected when using the contact form or the contact email address is subject to automated processing for the purpose of:

Verifying the identity of persons ;
Ensuring and improving the security of services ;
Contextualising and improving the User experience;
Sending information and contacting persons, including by email ;
Targeting advertising content ;
Preventing any unlawful or illegal activity.

Data collected during registration is subject to automated processing for the purpose of:

Performing contractual obligations ;
Verifying the identity of persons ;
Ensuring and improving the security of services ;
Developing, operating, improving, providing and managing the Website;
Contextualising and improving the User experience;
Sending information and contacting persons, including by email ;
Preventing any unlawful or illegal activity;
Enforcing the conditions relating to the use of the Website.

Data collected when using the newsletter form is subject to automated processing for the purpose of :

sending newsletters to the User.

4.2.3. Legal bases of the processing

Data collected during browsing is based on the legitimate interest of the Publisher, namely conducting an analysis of behaviour on the Website and obtaining improved security and operation of the Website. Some of this data, such as that from the implementation of certain cookies, may be based on the consent of the persons concerned.

Data collected when using the contact form or the contact email address is based on the consent of the persons concerned.

Data collected during registration is based on a contractual relationship.

Data collected when using the newsletter form is based on the consent of the persons concerned.

4.2.4. Recipients of the data

Collected data is accessible only to the members of the Publisher's management, the staff responsible for preparing your order and the staff responsible for managing the Website, and is never made freely viewable by any third-party natural person.

4.2.5. Duration of retention of personal data

Personal data collected during browsing is retained for a reasonable period necessary for the proper administration of the Website and for a maximum of 12 months, or until the withdrawal of the consent of the persons concerned.

Personal data collected when using the contact form or when sending an email to the contact email address is retained for a reasonable period necessary for the proper management of the User's request, and for a maximum of 12 months.

Data collected during registration is retained for the duration of the contractual relationship between the Publisher and the User.

Data collected when using the newsletter form is retained until the withdrawal of the consent of the persons concerned.

At the end of each of these periods, the Publisher shall archive this data and retain it for the period during which its liability may be engaged.

After this retention period, the Publisher undertakes to permanently delete the data of the persons concerned.

4.2.6. Security and confidentiality of personal data

Personal data is retained under secure conditions, using current technological means, in compliance with the provisions of the General Data Protection Regulation and the applicable national legislation.

4.2.7. Minimisation of personal data

The Publisher may also collect and process any data voluntarily transmitted by a User, in particular via the free text field of the contact form.

The Publisher guides Users as much as possible when they provide unnecessary or superfluous personal data.

The Publisher undertakes to retain and process only data strictly necessary for its activities, and shall delete any non-useful data received as soon as possible.

4.3. Respect for rights

You have the following rights concerning your personal data, which you may exercise by writing to our postal address or by sending an email to the following address : info@deco-arts.fr

4.3.1. Right to information, access and communication of data

You have the ability to access the personal data concerning you.

Due to the obligation of security and confidentiality in the processing of personal data incumbent on the Publisher, your request will only be processed if you provide proof of your identity, in particular by producing a scan of your valid identity document (in the case of a request by email) or a signed photocopy of your valid identity document (in the case of a written request), both accompanied by the statement "I certify on my honour that this copy of my identity document is a true copy of the original. Done at ... on ...", followed by your signature.

To assist you in your process, you will find here a model letter prepared by the Cnil.

4.3.2. Right to rectification, deletion and right to be forgotten

You have the ability to request the rectification, updating, locking or deletion of your personal data which may, as the case may be, prove to be inaccurate, erroneous, incomplete or obsolete.

You may also set general and specific directives regarding the fate of personal data after your death. Where applicable, the heirs of a deceased person may require that the death of their relative be taken into account and/or that the necessary updates be made.

To assist you in your process, you will find here a model letter prepared by the Cnil.

4.3.3. Right to object to the processing of data

You have the ability to object to the processing of your personal data.

To do so, you should send an email to the following address : info@deco-arts.fr. In this email, you must specify the data you wish to have deleted and the reasons justifying this request, except in the case of commercial prospecting.

4.3.4. Right to data portability

You have the right to receive the personal data you have provided to us in a transferable, open and readable format.

4.3.5. Right to restriction of processing

You have the right to request that the processing of your personal data by the Publisher be restricted. Accordingly, your data may only be stored and no longer used by the Publisher.

4.3.6. Withdrawal of consent

Your consent is essential for the processing of your data by the Publisher. However, you may withdraw it at any time. This withdrawal shall lead to the deletion of personal data concerning you.

Services requiring the processing of your data by the Publisher will nevertheless no longer be accessible.

4.3.7. Response times

The Publisher undertakes to respond to your request for access, rectification or objection or any other supplementary request for information within a reasonable period not exceeding 1 month from the receipt of your request.

4.3.8. Complaint to the competent authority

If you consider that the Publisher is not complying with its obligations regarding your personal information, you may file a complaint or request with the competent authority. In France, the competent authority is the Cnil, to which you may submit a request here.

4.4. Transfer of collected data

4.4.1. Transfer to partners

The Publisher informs you that we use authorised service providers to facilitate the collection and processing of data that you have communicated to us. These service providers may be located outside the European Union and receive the data collected on the Website.

The Publisher has previously ensured the implementation by its service providers of adequate safeguards and compliance with strict conditions of confidentiality, use and data protection, for example via the EU-US Data Privacy Framework (DPF).

The User consents to the data collected being transmitted by the Publisher to its partners and being processed by these partners within the framework of third-party services, namely :

No known partner at this time.

4.4.2. Transfer upon requisition or judicial decision

The User also consents to the Publisher communicating the collected data to any person, upon requisition of a state authority or by judicial decision.

4.4.3. Transfer in the context of a merger or acquisition

If the Publisher is involved in a merger, asset sale, financing operation, liquidation or bankruptcy or in an acquisition of all or part of its business by another company, the User consents to the collected data being transmitted by the Publisher to that company and that company carrying out the personal data processing referred to in this privacy policy in lieu of the Publisher.

ARTICLE 5. TRACKER/COOKIE POLICY

Upon your first connection to the Publisher's Website, you are informed by a banner at the bottom of your screen that information relating to your browsing may be recorded in files called "cookies". Our cookie policy allows you to better understand the measures we implement regarding browsing on our Website. It informs you in particular about all cookies present on our Website, their purpose, and gives you the procedure to follow to configure them.

5.1. Use of trackers/cookies

The Publisher of this Website may place a cookie and other trackers on the hard drive of your device (computer, tablet, mobile, etc.) in order to ensure smooth and optimal browsing on our website.

"Cookies" (or connection tokens) are small text files of limited size that allow us to recognise your computer, tablet or mobile for the purpose of personalising the services we offer you.

To better inform you about the information that cookies identify, you will find below a table listing the different types of cookies that may be used on the Publisher's website, their name, their purpose and their retention period.

5.2. Purposes of trackers

Using the information contained in the trackers and cookies used, the Publisher can analyse the traffic and use of the Website and, where applicable, facilitate and improve browsing, carry out prospecting operations, compile commercial statistics or display targeted advertisements.

5.3. Trackers used

Partner	Purpose of processing	Partner's conditions
Shopify	Access to secure areas, management of browsing history	https://www.shopify.com/legal/cookies

5.4. Configuration of your cookie preferences

Upon your first connection to the Publisher's Website, a banner briefly presenting information relating to the deposit of cookies and similar technologies appears at the bottom of your screen. This banner allows you to make a choice regarding the cookies whose deposit you accept or refuse on your device. You will be deemed to have given your consent to the deposit of cookies by clicking on the "I accept" icon, either globally or individually. Conversely, you will be deemed to have refused the deposit of cookies by clicking on the "I refuse" icon; again, this choice may apply to all cookies or only to some of them. In the absence of a choice, you will be deemed to have refused the deposit of cookies. Your decision will be recorded for 6 months and may be modified at any time.

5.4.1 Cookies exempt from consent

In accordance with the recommendations of the French Data Protection Authority (Cnil), certain cookies are exempt from the prior collection of your consent insofar as they are strictly necessary for the operation of the website or have the sole purpose of enabling or facilitating electronic communication. These include session identifier cookies, authentication cookies, load-balancing session cookies and interface personalisation cookies. These cookies are fully subject to this policy insofar as they are issued and managed by the Publisher.

5.4.2 Cookies requiring the prior collection of your consent

This requirement applies to cookies issued by third parties and which are classified as "persistent" insofar as they remain on your device until they are deleted or reach their expiry date.

As such cookies are issued by third parties, their use and deposit are subject to their own privacy policies. This family of cookies includes audience measurement cookies, advertising cookies and social network sharing cookies (such as Facebook, Twitter, Youtube and Instagram).

Audience measurement cookies compile statistics concerning the traffic and use of various elements of the Website (such as the content/pages you have visited). This data contributes to improving the ergonomics of the Publisher's Website.

5.5. Maximum retention period for trackers

Trackers are intended to be retained on the User's computer for a period of up to 12 months. This data is retained under secure conditions, using current technological means, in compliance with the provisions of the General Data Protection Regulation and the applicable national legislation.

5.6. Objection to the use of trackers

5.6.1. Right to object to the use of trackers

You may accept or refuse the deposit of cookies at any time.

The User may delete or deactivate the use of trackers whenever they wish by modifying their browser settings. It is possible to browse the Website without trackers. However, certain ancillary functions of the Website may not work if the User has deactivated the use of trackers, such as form auto-completion or navigation indicators.

5.6.2. Settings

For further information regarding cookie management tools, you may consult here the dedicated page on the Cnil website.

5.6.2.1. Browser settings

Each internet browser offers its own cookie management settings. The User may configure their browser software so that cookies are rejected, either systematically or according to their source. The User may also configure their browser software so that acceptance or refusal of cookies is proposed on a case-by-case basis, before a cookie is likely to be recorded on their device.

For managing cookies and the User's choices, the configuration of each browser is different. It is described in the browser's help menu, which will allow you to learn how to change your cookie preferences:

5.6.2.2. Settings using add-ons

The User may also delete or object to the placement of cookies on their computer by installing a browser extension, such as Ghostery, which can be downloaded here.

ARTICLE 6. INTELLECTUAL PROPERTY

6.1. Legal protection of Website Content

The Website Content may be protected by copyright and database rights. Any representation, reproduction, translation, adaptation or transformation, in whole or in part, carried out illegally and without the consent of the Publisher or its successors in title constitutes an infringement of Books I and III of the French Intellectual Property Code and may give rise to legal proceedings for counterfeiting.

6.2. Contractual protection of Website Content

The User contractually undertakes towards the Publisher not to use, reproduce or represent, in any manner whatsoever, the Website Content, whether or not protected by intellectual property rights, for any purpose other than their reading by a robot or a browser. This prohibition does not apply to indexing robots whose sole purpose is to scan the content of the Website for indexing purposes.

ARTICLE 7. FINAL PROVISIONS

7.1. Amendments

This Privacy Policy may be amended at any time by the Publisher. The conditions applicable to the User are those in force at the time of their connection to the Website. Any substantial amendment to this privacy policy will be communicated upon the User's first connection following their entry into force. This new privacy policy must then be accepted again.

7.2. Entirety

The nullity of one of the clauses of this contract shall not entail the nullity of the other clauses of the contract or of the contract as a whole, which shall retain their full effect and scope. In such a case, the parties shall, as far as possible, replace the annulled provision with a valid provision corresponding to the spirit and purpose of these terms.

7.3. Non-waiver

The failure by the Publisher to exercise the rights granted to it under these terms shall in no case be construed as a waiver of its right to assert said rights.

7.4. Languages

These conditions are available in French.

7.5. Unfair terms

The provisions of these conditions apply subject to compliance with the mandatory provisions of the French Consumer Code concerning unfair terms in contracts concluded between a professional and a consumer.

ARTICLE 8. DISPUTES

8.1. Applicable law

This Privacy Policy is subject to French law and European regulations, in particular the European Data Protection Regulation.

8.2. Disputes

Pursuant to Ordinance No. 2015-1033 of 20 August 2015, any disputes that may arise in the performance of these general terms and conditions and for which no amicable solution has been found between the parties must be submitted for resolution.

Since 1 January 2016, mediation has been compulsory for all. Thus, any professional selling to individuals is required to communicate the contact details of a competent Mediator in the event of a dispute, regardless of whether they sell remotely or in a physical shop (Source: FEVAD).

CM2C — Centre de la Médiation de la Consommation de Conciliateurs de Justice
14 rue Saint Jean 75017 Paris
Website: https://www.cm2c.net
Email: cm2c@cm2c.net

UPDATE OF APRIL 30, 2026 — ADDITIONAL DETAILS

This section supplements the previous chapters. In the event of any conflict, the most protective version of the user's rights shall prevail.

A. Data collected via the Site's chat support

When you use our chat support on the Site (deco-arts.fr / deco-arts.es / deco-arts.it):

During business hours (live chat): your name, the content of your messages, your e-mail address if you provide it voluntarily, your browsing language and a technical session identifier (cookie chat_visitor_id, 12-month duration).
Outside business hours (offline chat): your name, your e-mail address and the content of your message. This data allows us to reply to you by e-mail at the next opening. Submitting your e-mail and sending the message constitutes explicit consent to be contacted at this address.

Retention: 12 months after your last interaction. Beyond that, automatic deletion unless the conversation is linked to an order (in which case the legal accounting retention period of 10 years applies).

Right to deletion: you may request deletion of your chat data at any time by writing to transport@deco-arts.fr or info@deco-arts.fr.

B. Complete list of subcontractors and data recipients

In addition to subcontractors mentioned in previous sections, we use the following services:

Shopify Commerce Singapore Pte. Ltd.: e-commerce platform, store hosting, analytical trackers (Singapore / Canada / Ireland — EU-US Data Privacy Framework + Standard Contractual Clauses).
Google LLC: Google Analytics 4, Google Ads with server-side Enhanced Conversions, Google Fonts, Google reCAPTCHA, Google Maps (United States — EU-US DPF).
Meta Platforms Ireland Ltd.: Meta Pixel (browser tracking), Meta Conversions API (CAPI server-side), Instagram embed. Internal filter: orders from marketplaces (Mirakl, Amazon, Castorama, Kaufland, Cdiscount, etc.) are excluded from tracking (Ireland / United States — EU-US DPF).
TikTok Technology Limited: TikTok Pixel (Ireland / Singapore — Standard Contractual Clauses).
Stripe Inc.: card payment processing (United States — EU-US DPF).
PayPal (Europe) S.à r.l. et Cie, S.C.A.: PayPal payment processing (Luxembourg — EU).
Alma SAS: split payment in 2/3/4 instalments (France — EU).
Skeepers (Editor's Eden SAS): collection and publication of verified post-purchase customer reviews (France — EU).
OVH SAS: hosting of our chat support infrastructure (hub-deco-arts.com) and professional email Pro (France — EU).
Geodis Distribution & Express SA, DPD France SAS, GLS France SAS, Mondial Relay SAS: order transport and delivery (France and EU).

Note on transfers outside the EU: transfers to the United States are governed by the EU-US Data Privacy Framework (DPF) certified by the European Commission on July 10, 2023. For non-DPF third countries, we apply the Standard Contractual Clauses (SCC) of the European Commission.

C. Complete list of trackers (cookies, technical identifiers) used on our sites

Strictly necessary (deposited without consent)

cart, secure_session_id (Shopify): shopping cart, session security — session duration.
consent_v2, cookieconsent_status (Deco Arts banner — Google Consent Mode v2): memorisation of consent choices — 6 months.
__stripe_mid, __stripe_sid (Stripe): payment fraud detection — 1 year / 30 min.
paypal_*, alma_session_id: payment fraud detection — 1 year / session.

Audience measurement (with consent)

_ga, _gid, _ga_<container> (Google Analytics 4): anonymised audience measurement — 24 months.
_shopify_*, _y, _s (Shopify Trekkie): store audience analysis — session to 12 months.

Advertising (with consent)

_gcl_au, _gcl_aw, _gcl_dc, NID, IDE, 1P_JAR (Google Ads): conversion measurement, retargeting, Enhanced Conversions — 90 days.
_fbp, _fbc, fr (Meta Pixel): Meta Ads conversions, retargeting — 90 days.
_ttp, ttclid (TikTok Pixel): TikTok Ads conversions — 13 months.

Functional (with consent)

chat_visitor_id (Deco Arts chat cookie): visitor identification to resume chat conversation — 12 months.
chat_token (sessionStorage): secure HMAC token to resume conversation via email link — session.
skeepers_*, _avis_verifies_* (Skeepers): tracking review invitations — 12 months.

D. Registered trademark Deco Arts

The commercial trademark Deco Arts is a French verbal trademark registered with the French Trademark Office (INPI) on May 23, 2022 under number 22 4 871 506 (class 20 — cushions). It is owned exclusively by Linens Diffusion SASU.

E. EU online dispute resolution platform

The Customer may also file a complaint via the European Online Dispute Resolution platform (ODR) at https://ec.europa.eu/consumers/odr, in accordance with EU Regulation No. 524/2013.