🔒 PRIVACY POLICY

Last updated: April 2026

The FARZEN store, operated by the sole proprietorship Les Fans de Winona, attaches great importance to the protection of your personal data. This policy explains how we collect, use, and protect your information, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679).

1. DATA CONTROLLER

Les Fans de Winona — Sole Proprietorship
Registered office: 60 Rue François 1er, 75008 Paris, France
Controller: Mr. Hugues NOUVELLET
✉️ contact@campdebasefarzen.com — 📞 +33 (0)7 66 38 41 58

2. DATA COLLECTED

We collect only the information necessary for processing your order and improving our services:

• Contact information: first name, last name, email address, phone number
• Order information: delivery address, items ordered, payment methods
• Browsing information: cookies, IP address, pages visited, interactions on the site
• Delivery information: carrier, tracking number

3. PURPOSES OF PROCESSING

Your data is used to:

• Process your orders and deliveries
• Provide customer service and manage returns
• Improve our products and services
• Send marketing communications if you have consented
• Comply with legal and tax obligations
• Prevent fraud and ensure transaction security

4. LEGAL BASIS FOR PROCESSING

• Performance of a contract: order processing, delivery, customer service
• Consent: newsletter, promotional offers, marketing cookies
• Legal obligation: retention of accounting and tax data
• Legitimate interest: service improvement, fraud prevention, security

5. SHARING DATA WITH THIRD PARTIES

We share your data only with service providers necessary for the execution of the service. Your data is never sold to third parties.

Provider	Role	Country	GDPR Guarantees
Shopify Inc.	Hosting and e-commerce platform	Canada / USA	Adequacy decision (Canada) — Standard contractual clauses (USA)
CJ Dropshipping	Logistics, fulfillment and order shipping	China	Standard contractual clauses (SCC) — Transfer governed by data processing agreement
Partner carriers	Parcel delivery	International	Data limited to what is necessary (name, address, phone number)
Payment providers	Secure transaction processing	Variable	PCI-DSS compliance — Standard contractual clauses
Google LLC (Google Merchant Center, Google Analytics)	Traffic analysis, Shopping campaigns	USA	Standard contractual clauses — Google Ads Data Processing Terms

6. TRANSFERS OUTSIDE THE EUROPEAN UNION AND LOCAL REGULATIONS

Some of our service providers are established outside the European Union (Shopify – USA, CJ Dropshipping – China, Google – USA). These transfers are governed by appropriate safeguards in accordance with Articles 46 et seq. of the GDPR, in particular by standard contractual clauses approved by the European Commission.

For customers located outside the European Union, local data protection regulations may also apply, in particular:

• Brazil: Lei Geral de Proteção de Dados (LGPD – Law No. 13.709/2018). Brazilian customers benefit from the rights provided by the LGPD, including the right of access, correction, erasure, and portability of their data. The competent supervisory authority is the ANPD (Autoridade Nacional de Proteção de Dados).
• Middle East, Asia, Africa: Other local regulations may apply depending on the customer's country of residence.

We commit to processing your data with the same level of protection, regardless of your country of residence.

7. COOKIES AND TRACKING

The site uses the following types of cookies:

• Essential cookies: necessary for the operation of the site (cart, session, security)
• Analytical cookies: Google Analytics — audience measurement and browsing behaviour
• Marketing cookies: Google Merchant Center — Shopping campaign tracking

You can refuse or manage cookies via your browser or our cookie preference management tool available on the site.

8. DATA RETENTION

• Order-related data: 10 years (legal and tax obligations)
• Marketing data: until consent is withdrawn
• Anonymised browsing data: maximum 24 months
• Logistics tracking data: 3 years after delivery

9. YOUR RIGHTS

In accordance with the GDPR, you have the following rights:

• Access: obtain a copy of your data
• Rectification: correct inaccurate data
• Erasure: request the deletion of your data
• Restriction: request the restriction of processing
• Portability: receive your data in a structured format
• Objection: object to processing for marketing purposes

To exercise your rights:
✉️ contact@campdebasefarzen.com — 📞 +33 (0)7 66 38 41 58
You may also lodge a complaint with the CNIL: www.cnil.fr

10. SECURITY

We implement all appropriate technical and organisational measures to protect your data against any unauthorised access, disclosure, alteration or destruction (SSL encryption, restricted access, secure Shopify hosting).

11. POLICY UPDATES

This policy may be updated to remain compliant with legal developments and site practices. The date of the last update is always indicated at the top of the page. In the event of a substantial change, customers will be notified by email.