Privacy Policy

Given the development of new communication tools, it is necessary to pay particular attention to the protection of privacy. This is why we are committed to respecting the confidentiality of personal information that we collect.

Data Controller L'Atelier Lundi Léandre, located at 75017 Paris, France, is responsible for processing personal data collected on this site.

Collection of Personal Information We collect the following personal data:

• First name
• Postal address
• Postal code
• Email address
• Phone number / fax number

The personal information we collect is gathered through forms and through the interactivity established between you and our website. We also use, as indicated in the following section, cookies and/or logs to collect information about you.

Legal Basis for Processing We collect the following personal data :

• Your consent for sending commercial and promotional information
• Contract performance for order tracking and management
• Our legitimate interest for improving our services and website security
• Compliance with our legal obligations, particularly in tax and accounting matters

Forms and Interactivity Your personal information is collected through forms, namely :

• Website registration form
• Order form

We use the information thus collected for the following purposes :

• Order tracking
• Information / Promotional offers
• Statistics
• Contact

Your information is also collected through interactivity that may be established between you and our website in the following way :

• Comments
• Correspondence

We use the information thus collected for the following purposes :

• Information or promotional offers
• Statistics
• Contact

Cookies and Similar Technologies Our site uses cookies and similar technologies to improve your browsing experience. The types of cookies used are :

• Essential cookies (necessary for site operation) – retention period: session
• Analytics cookies (audience measurement) – retention period: 13 months
• Functionality cookies (user preferences) – retention period: 6 months
• Advertising cookies (ad targeting) – retention period: 13 months

You can configure your browser to refuse certain cookies or be alerted when cookies are sent. To learn more about cookies and how to manage them, visit www.allaboutcookies.org. www.allaboutcookies.org.

Data Retention Period We retain your personal data for the following periods :

• Customer account data: throughout the contractual relationship, then 3 years after the last contact
• Order data: 10 years (legal accounting and tax obligations)
• Commercial prospecting data: 3 years from the last contact
• Connection logs: 1 year

Data Recipients The information collected may be communicated to the following recipients :

• Our authorized personnel responsible for order processing
• Our technical service providers (hosting, IT maintenance)
• Our subcontractors for delivery and payments
• Administrative or judicial authorities when required by law

International Data Transfers Your personal data is hosted and processed within the European Union. However, some of our technical service providers may be located outside the EU. In this case, we ensure that these transfers are governed by appropriate safeguards in accordance with GDPR (standard contractual clauses, adequacy decision, etc.).

Right to Object and Withdraw We are committed to offering you a right to object and withdraw regarding your personal information. The right to object is understood as the possibility offered to internet users to refuse that their personal information be used for certain purposes mentioned during collection. The right to withdraw is understood as the possibility offered to internet users to request that their personal information no longer appear, for example, in a mailing list.

To exercise these rights, you can contact us at : Postal code: 44800 Saint-Herblain, France Email: contact@atelierlundileandre.com Website section: atelierlundileandre.com

Rights of Data Subjects In accordance with GDPR, you have the following rights regarding your personal data :

• Right of access (consult your data)
• Right to rectification (modify inaccurate information)
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object to processing of your data
• Right to define directives regarding the fate of your data after your death
• Right to withdraw your consent at any time

To exercise these rights, you can contact us via the coordinates mentioned above. A response will be provided to you within one month of receiving your request.

You also have the right to lodge a complaint with the National Commission for Information Technology and Civil Liberties (CNIL): www.cnil.fr. www.cnil.fr.

Protection of Minors Our site is not intended for minors under 16 years of age. If you are a parent or guardian and you think your child has provided us with personal information without your consent, please contact us immediately. We will take steps to remove this information from our servers.

Security The personal information we collect is kept in a secure environment. People working for us are required to respect the confidentiality of your information.

To ensure the security of your personal information, we use the following measures :

• SSL Protocol
• SET Protocol
• Access management – authorized person
• Access management – concerned person
• Network monitoring software
• Computer backup
• Username / password
• Firewall

We are committed to maintaining a high degree of confidentiality by integrating the latest technological innovations to ensure the confidentiality of your transactions. However, since no mechanism offers maximum security, some risk is always present when using the Internet to transmit personal information.

Data Breach Procedure In case of a personal data breach, we undertake to notify this breach to the competent supervisory authority within 72 hours after becoming aware of it, unless the breach does not present a risk to your rights and freedoms. If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you as soon as possible.

Legislation We are committed to respecting the legislative provisions set out in: the General Data Protection Regulation (GDPR), the Data Protection Act (law n° 78-17 of January 6, 1978), as well as the ePrivacy Directive of the European Union, and the Law for Trust in the Digital Economy (LCEN) in France.

Privacy Policy Modifications This privacy policy may be updated periodically to reflect changes in our data management practices. We encourage you to regularly consult this page to be informed of updates. The date of last update will be indicated at the bottom of this policy.

Data Protection Officer For any questions regarding our privacy policy or your personal data, you can contact our data protection officer at the following address: dpo@atelierlundileandre.com.

Last updated: June 6, 2025