1. Data controller

VENT DE BOHÈME,
a limited liability company (SARL) with share capital of €7,500
Registered office: 58 rue Antoine Bertin, 97434 La Saline-les-Bains, Réunion, France
SIRET: 792 516 361 00021 – Saint-Denis de La Réunion Trade and Companies Register (RCS)
Contact email: bonjour@ventdeboheme.com

VENT DE BOHÈME determines the purposes and means of the data processing carried out via the website www.ventdeboheme.com.

2. Data collected

VENT DE BOHÈME may collect the following categories of data:

2.1. Data provided directly by the user

identity: surname, first name;
contact details: postal address, email, telephone;
order information: products, amount, delivery address;
customer account information.

2.2. Data collected automatically

technical data: IP address, device type, pages viewed;
cookies and trackers (see Article 9).

2.3. Payment-related data

Bank details are not processed by VENT DE BOHÈME but by its service providers (e.g. Stripe, PayPal).
Users are invited to read their privacy policies.

3. Purposes and legal bases of processing

Purpose	Legal basis	Data concerned	Retention period
Order management, delivery, invoicing	Performance of the contract (Art. 6(1)(b) GDPR)	Identity, contact details, order history	5 years (commercial limitation period)
Creation and management of the customer account	Performance of the contract	Identity, email, encrypted password	As long as the account is active + 2 years of inactivity
Customer service	Legitimate interest (answering requests)	Identity, email, content of exchanges	3 years
Direct marketing (newsletter)	Consent (Art. 6(1)(a) GDPR)	Email	Until consent is withdrawn
Audience statistics	Legitimate interest / Consent for non-essential cookies	technical data / cookies	13 months
Fraud prevention	Legitimate interest	transaction and technical data	2 years

4. Recipients of the data

Data may be shared with:

technical service providers (hosting, maintenance);
logistics providers (carriers);
payment service providers;
warehouse / order preparation provider (PHILEA SOLUTIONS);
marketplaces, for orders placed via La Redoute / MDM / Leroy Merlin.

These providers only access the data they need to carry out their tasks.

5. Transfers of data outside the European Union

Where tools located outside the EU are used (e.g. hosting, emailing), VENT DE BOHÈME ensures that the following are in place:

standard contractual clauses (SCCs) approved by the European Commission;
or another legal mechanism governing the transfer.

6. Users’ rights

In accordance with the GDPR, users have the following rights:

right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to object;
right to data portability;
right to withdraw consent at any time (newsletter);
right to lodge a complaint with the CNIL (French data protection authority).

To exercise these rights:
Email: bonjour@ventdeboheme.com
Postal address: VENT DE BOHÈME, 58 rue Antoine Bertin, 97434 La Saline-les-Bains, Réunion, France.

7. Security

VENT DE BOHÈME implements appropriate technical and organisational measures:

encryption of data in transit (HTTPS/SSL);
access restricted to authorised persons only;
firewalls and protection systems;
secure backups.

No measure offers absolute security, but VENT DE BOHÈME is committed to maintaining a level of protection that complies with the GDPR.

8. Retention periods

Data is kept only for as long as necessary for the purposes set out in Article 3.
Certain legal obligations (accounting, tax) may require longer periods.

9. Cookies

The website uses:

cookies necessary for it to function;
analytics cookies (with prior consent);
marketing cookies (with prior consent).

A consent management banner lets you accept, refuse or customise cookies.
The detailed cookie policy can be found here: [cookie policy link].

10. Changes to this policy

VENT DE BOHÈME may amend this Policy.
The date of the latest update is shown below.

Last updated: 12 November 2025