This is a translation. The French version prevails (« la version française fait foi »): Politique de confidentialité.
Last updated: 13 October 2026.
This page explains what personal data is collected on clemencedevienne.com, why, how long it is kept and how to exercise your rights. It applies Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act No. 78-17 of 6 January 1978 (« Informatique et libertés »).
Data controller
Clémence Devienne, sole trader (EI), 12 rue de Cambrai, 75019 Paris, France. Email: clemencedevienne.art@gmail.com.
No data protection officer has been appointed.
What data is processed, and why
Orders
- Data: first and last name, delivery and billing address, email, phone number, order details.
- Purpose: processing the order, delivering the artwork, issuing the invoice, handling a withdrawal or a warranty claim.
- Legal basis: performance of the contract (Article 6(1)(b) GDPR); accounting obligations for invoices (Article 6(1)(c)).
- Retention: accounting records (invoices) are kept for 10 years (Article L123-22 of the French Commercial Code). For an order of €120 or more, the contract is also kept for 10 years (Articles L213-1 and D213-2 of the French Consumer Code). Other data is kept for 3 years after the last contact.
Email messages
- The website has no contact form. If you write to clemencedevienne.art@gmail.com, your name, email address and message are used to reply to you.
- Legal basis: steps taken at your request before entering into a contract, or legitimate interest in answering messages (Article 6(1)(b) or 6(1)(f) GDPR).
- Retention: 3 years after the last contact.
Newsletter
- Data: email address.
- Purpose: sending you news about the artist.
- Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time using the unsubscribe link in every email.
- Retention: until you unsubscribe.
- Tool: Brevo, published by Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France, acting as processor.
Payment
Payment is made through PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes your payment data as a data controller, under its own privacy statement. The website neither receives nor stores any bank card data.
Audience measurement
- Tool: Google Analytics, installed through the Google Site Kit plugin. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Purpose: measuring visits to the website and the pages viewed.
- Legal basis: your consent (Article 6(1)(a) GDPR and Article 82 of the French Data Protection Act). Google Analytics cookies are only set after you accept them in the cookie banner.
- Transfer outside the EU: data may be transferred to Google LLC in the United States. This transfer is covered by the EU-US Data Privacy Framework, recognised by the European Commission’s adequacy decision of 10 July 2023.
Hosting
The website is hosted in France by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France.
Cookies
A cookie is a small file stored on your device. You can change your choices at any time from the cookie settings link on the website: “Cookie settings”, at the bottom of every page.
Necessary cookies (no consent required)
| Name | Purpose | Duration |
|---|---|---|
| woocommerce_cart_hash | Tracking the contents of the cart | Session |
| woocommerce_items_in_cart | Tracking the contents of the cart | Session |
| wp_woocommerce_session_* | Linking your cart to your visit | 2 days |
| pll_language | Remembering the chosen language (French or English) | 1 year |
| cmplz_* | Remembering your cookie choices | 12 months |
Audience measurement cookies (consent required)
| Name | Purpose | Duration |
|---|---|---|
| _ga | Distinguishing visitors (Google Analytics) | 13 months |
| _ga_* | Keeping the session state (Google Analytics) | 13 months |
Who receives your data
Your data is never sold or rented. It is only passed on to those who need it to provide the service: the carrier for delivery (La Poste – Colissimo in France, the chosen carrier abroad), PayPal for payment, Brevo for the newsletter, Google for audience measurement, OVH for hosting.
Your rights
You have the following rights over your data:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object;
- right to data portability;
- right to withdraw your consent at any time;
- right to give instructions on what happens to your data after your death.
To exercise them, write to clemencedevienne.art@gmail.com. You will receive an answer within one month.
Complaints
If you believe your rights have not been respected, you can lodge a complaint with the CNIL (French data protection authority):
- online: https://www.cnil.fr/fr/adresser-une-plainte;
- by post: Commission nationale de l’informatique et des libertés, Service des plaintes, 3 place de Fontenoy, 75007 Paris, France.
If you live in another EU country, you can also contact the data protection authority of your country (Article 77 GDPR).