Legal notice

The website alicepeintures.com is published by

The website alicepeintures.com is hosted by

Intellectual property

All content on the website alicepeintures.com (text, photographs, illustrations, paintings) is protected by copyright. Any reproduction, representation or distribution, in whole or in part, without the prior written consent of Alice Voland is prohibited.

Privacy policy

Data controller

Alice Voland

6 Impasse Boileau – 34920 Le Crès – France

alice@alicepeintures.com

Contact form

When you submit the contact form, the following personal data is collected: name, email address, subject and message. This data is processed solely to respond to your enquiry. Legal basis: consent (GDPR art. 6.1.a). Your message is delivered via Resend, a transactional email service (see Third-party services below).

Shop

When you place an order and pay, the following personal data is collected and processed: your name, your delivery (postal) address, your email address, and the details of your order (the works ordered, their references and prices, the amount paid, and the order status). This data is used to process your payment, prepare and ship your order, keep you informed of its progress, and meet accounting and legal obligations. Data controller: Alice Voland. Legal basis: performance of the sales contract (GDPR art. 6.1.b), and, for accounting records, compliance with a legal obligation (GDPR art. 6.1.c).

Payment

Payments are processed by Stripe, our payment service provider. Your card details are entered directly on Stripe's secure hosted checkout page; they never pass through and are never stored by alicepeintures.com. This website only keeps payment metadata: a Stripe transaction identifier, the amount, the currency, and the payment status. Stripe processes this data to carry out the payment. Stripe privacy policy: https://stripe.com/privacy.

Order tracking

The shop has no customer accounts and no passwords. To let you follow your order, we send you a temporary link containing a secret access token, and we email you a one-time code to confirm your email address before payment. We store only a hashed form of these tokens and codes, never their clear text, together with the date each link was issued and used and the IP address of the request, so that access to an order can be secured and traced. Legal basis: performance of the contract (GDPR art. 6.1.b) and our legitimate interest in securing access to orders (GDPR art. 6.1.f).

Anonymous visitor statistics

This website records anonymous visitor information to understand how the site is used. The following are recorded for each request: the path of the page visited, the date and time, the language, the domain of the referring page if any (for example "https://google.com" or "android-app://com.instagram.android", never the full URL), a truncated IP address (last octet set to zero for IPv4, last 80 bits for IPv6, insufficient to identify an individual visitor), the browser family and major version (e.g. "Firefox 128"), the operating system family and major version (e.g. "macOS 14"), and the device class (desktop, mobile, tablet). The full IP address and the full browser identifier ("User-Agent") are never written to disk; they are used in memory and then discarded before the log line is written.

No tracking cookies, no persistent identifier, no third-party analytics. Data is not transmitted to any third party and is not used for commercial or advertising purposes.

Legal basis: legitimate interest (GDPR art. 6.1.f). This processing is exempt from consent under the CNIL guidelines for audience measurement, since the data collected is strictly limited, minimised, and not reused for other purposes.

Audience measurement (self-hosted Matomo)

In addition to the server log described above, the audience of this website is measured with Matomo, an analytics software installed on a server operated by Alice Voland. No third party is involved: the software is self-hosted, the measurement data stays on that server, and it is never transmitted to anyone else, nor used for commercial or advertising purposes.

This measurement uses no cookies. Matomo is loaded with cookies disabled, so nothing is written to or read from your device. To count a visit, the server derives a hash from the technical information your browser sends with each request; that hash is rotated every 24 hours and cannot be reconstructed afterwards, so you cannot be recognised from one day to the next. Your IP address is anonymised before it is stored (its last two bytes are masked), no user identifier is created, your browsing is not followed across other websites, and no individual visit log is kept.

Legal basis: legitimate interest (GDPR art. 6.1.f), namely producing anonymous statistics on the use of the site. This measurement relies on the audience-measurement exemption from consent published by the CNIL (art. 82 of the French Data Protection Act): it serves the statistics of this website alone, its scope is strictly limited to that purpose, and its data is not reused.

You may refuse this measurement at any time. The button below records your choice in your browser's local storage and stops the measurement script from loading at all; that choice stays on your device and is never sent to the server.

Local storage

Two preferences are saved in your browser's local storage (localStorage): the theme (light or dark mode), and your refusal of audience measurement if you have expressed one. This data never leaves your device and is not accessible by the server.

Third-party services

Contact form messages are delivered via Resend (https://resend.com), a transactional email service. The data transmitted includes your name, email address, subject and message content. Resend processes this data solely for email delivery. Privacy policy: https://resend.com/legal/privacy-policy.

Payments are handled by Stripe (https://stripe.com), a payment service provider. The data transmitted to Stripe includes your name, email address, delivery address and payment details. Stripe processes this data to carry out and secure the payment. Privacy policy: https://stripe.com/privacy.

These providers may process data outside the European Union, in particular in the United States. Such transfers are governed by the European Commission's standard contractual clauses and, for Stripe, by the EU-U.S. Data Privacy Framework. Stripe's data processing agreement is available at https://stripe.com/legal/dpa.

Your rights

You have the right of access, rectification, erasure, objection and restriction of processing. To exercise these rights, write to alice@alicepeintures.com. You may also lodge a complaint with the CNIL (www.cnil.fr).

Some order and accounting records may be retained where required to meet our legal obligations.