S.A.S.U. Lex arbitri
35, rue du Général Foy
Email: contact@lex-arbitri.fr
1. Identity of the data controller
The company S.A.S.U. Lex arbitri, whose registered office is located at 35, rue du Général Foy, is responsible for the processing of personal data carried out in connection with the operation of its website and the online sale of books.
2. General principles
Personal data processing is carried out in accordance with:
- Regulation (EU) 2016/679 of 27 April 2016 on data protection (GDPR)
- French Law No. 78-17 of 6 January 1978 as amended
- Guidelines and frameworks issued by the French supervisory authority
The Seller undertakes to respect the following principles:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
3. Data collected
As part of the online sale of books, the following data may be collected.
3.1 Identification data
- First name and last name
- Postal address
- Email address
- Telephone number
3.2 Billing data
- Billing address
- VAT identification number (where applicable)
3.3 Payment data
Payments are processed by a specialized payment provider.
Banking data are not stored by Lex arbitri.
3.4 Browsing data
- IP address
- Device-related data
- Data generated by cookies (see cookie policy)
4. Purposes of processing
Personal data are collected for the following purposes:
- Order and delivery management
- Billing management
- Customer relationship management
- Compliance with legal and accounting obligations
- Handling complaints
- Sending information related to books (subject to consent)
5. Legal basis for processing
The processing of personal data is based on:
- Performance of the sales contract
- Compliance with legal obligations (accounting and taxation)
- The Seller’s legitimate interest (complaint management, website security)
- Consent of the data subject (commercial communications)
6. Data retention period
Data are retained for a period proportionate to the purposes pursued.
Customer data
For the duration of the contractual relationship, then archived in accordance with accounting obligations (up to 10 years).
Marketing data
3 years from the last contact.
Cookies
In accordance with applicable recommendations (maximum 13 months).
7. Data recipients
Personal data may be shared with:
- The Seller’s internal services
- Payment service providers
- Technical service providers (hosting and maintenance)
- Carriers responsible for delivery
These service providers are contractually bound to ensure the confidentiality and security of personal data.
8. International data transfers
If service providers located outside the European Union are used, data transfers are governed by:
- An adequacy decision of the European Commission, or
- Standard contractual clauses ensuring an equivalent level of protection.
9. Data subject rights
Each data subject has the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw consent at any time
Requests may be sent to:
contact@lex-arbitri.fr
A response will be provided within a maximum period of one month.
If necessary, the data subject may lodge a complaint with the French supervisory authority.
10. Data security
The Seller implements appropriate technical and organizational measures to ensure:
- Confidentiality
- Integrity
- Availability of data
These measures include in particular:
- Secure hosting
- Restricted access to data
- Secure connection protocols
- Regular backups
11. Cookies
The website uses cookies necessary for the proper functioning of the site and, where applicable, audience measurement cookies.
An information banner allows users to:
- Accept
- Refuse
- Configure non-essential cookies
Non-essential cookies are only placed after consent.
12. Minors
The website is not intended for minors under the age of fifteen.
Any data collection relating to a minor must be authorized by their legal representative.
13. Complaint
Any person who considers that their rights have not been respected may lodge a complaint with the competent French supervisory authority.