Privacy Policy

1. Introduction

The protection of your personal data is a priority for GRADZIANI.
We are committed to collecting only the information strictly necessary for the management of your orders, the improvement of our services and the protection of your rights.

We comply with the applicable legislation on personal data protection, in particular:

the General Data Protection Regulation (GDPR),
and the French Data Protection Act (“Informatique et Libertés”) of 6 January 1978, as amended.

This policy applies to all users of the site gradziani.com.
By using our site, you accept the conditions described below.

For any questions regarding your personal data, you may contact our Data Protection Officer (DPO) at the following address:
dpo@gradziani.com

2. Data controller

Name of controller: Girard Mathieu
Company: WEB INFOSERVICE – Owner of the GRADZIANI brand
Address: 19, rue Aristide Maillol – 66420 Le Barcarès, France
Email: contact@gradziani.com

3. Data collected

In the course of your browsing and purchases on gradziani.com, we collect:

a) Information you provide directly:

First name, last name, postal address, email address, phone number,
Information required for delivery and invoicing,
Order history and product preferences,
Customer account data (username, encrypted password).

We do not store any banking data on our servers: payments are processed via secure providers (such as Stripe, PayPal or MyPos).

b) Information collected automatically:

IP address, browser type, connection duration, pages visited,
Browsing data for statistical purposes and site improvement,
Session, security and analytics cookies (Google Analytics).

We do not collect any sensitive data (ethnic origin, political opinions, religion, health, etc.).

4. Purposes of data collection

The data collected is used to:

Manage your customer account and orders,
Ensure delivery and parcel tracking,
Handle invoicing and after-sales service,
Send you confirmation or information emails,
Improve your shopping experience and the quality of our services,
Ensure site security and prevent fraud,
Offer you personalised deals if you have given your consent.

5. Legal basis for processing

Your data is processed on several legal grounds:

Performance of a contract (e.g. order, delivery, customer service),
Consent (e.g. newsletter subscription),
Legal obligations (e.g. accounting records, fraud prevention),
Legitimate interest (e.g. improvement of our services, site security).

6. Recipients of data

The information collected is intended for GRADZIANI and its service providers strictly necessary for the operation of the site (hosting, payment, delivery, maintenance).

We never sell your data to third parties.

Our main partners are:

Hostinger (hosting) – 61 Lordou Vironos Street, 6023 Larnaca, Cyprus
MyPos / Stripe / PayPal (secure payment)
Google Analytics (anonymised traffic statistics)

7. Retention period

Your data is retained:

For the duration of your customer account activity,
Then archived for 10 years to comply with accounting and tax obligations.

You may request the immediate deletion of your account and your data at any time by contacting: dpo@gradziani.com

8. Data security

We implement technical and organisational security measures designed to protect your data:

SSL encryption across the entire site,
Regular and secure backups,
Restricted access to personal data limited to authorised employees only,
Regular internal security audits.

9. Cookies

The site gradziani.com uses different types of cookies:

Session cookies (necessary for the site to function),
Analytical cookies (anonymous statistics via Google Analytics),
Personalisation cookies (display and language preferences).

You can manage your preferences at any time in your browser settings.

10. Your rights

In accordance with the GDPR, you have the following rights:

Right of access: obtain the data held about you,
Right of rectification: correct inaccurate information,
Right to erasure: request the deletion of your data,
Right to restriction of processing,
Right to data portability,
Right to object (in particular to commercial prospecting).

To exercise your rights, contact us:
dpo@gradziani.com
GRADZIANI – WEB INFOSERVICE – 19 rue Aristide Maillol, 66420 Le Barcarès, France

11. Data transfers outside the EU

All data is hosted on Hostinger‘s European servers.
Should a transfer take place outside the European Union (for example via Google or Stripe), it would be strictly governed by the standard contractual clauses of the European Commission, guaranteeing an equivalent level of protection.

12. Changes to the privacy policy

GRADZIANI reserves the right to modify this policy at any time.
The most recent version is always available on gradziani.com.
In the event of a significant change, you will be notified by email.