Privacy Policy (GDPR)
Last updated: 2026-07-21
Article 1 — Data Controller
Affisell SAS — 123 rue du Commerce, 13100 Aix-en-Provence — SIREN 913XXXXXX000XX — VAT FR{{TVA}}
Contact: contact@affisell.com — Data Protection Officer (DPO): dpo@…
Article 2 — Collected Data
| Category | Examples | Purpose |
|---|---|---|
| Identity & Account | Email, name, role (Buyer / Affiliate / Supplier) | Account creation, authentication |
| Company | Business name, SIRET (supplier) | KYC, invoicing |
| Payment | Stripe identifiers, IBAN (via Stripe Connect) | Payment, payouts |
| Order | Shipping address, purchase history | Contract execution |
| Technical | Logs, IP, cookies (see Cookie Policy) | Security, service improvement |
| Content | Product images, descriptions | Marketplace hosting |
Article 3 — Legal Bases
- Contract execution (art. 6.1.b GDPR): account, orders, payments, support.
- Legal obligation (art. 6.1.c): accounting records, fraud prevention.
- Legitimate interest (art. 6.1.f): security, aggregated analytics, product improvement.
- Consent (art. 6.1.a): non-essential cookies, marketing if enabled.
Article 4 — Recipients
- Stripe, Inc. — payment and Connect (transfer outside EU framed by standard contractual clauses).
- Vercel Inc. — application hosting.
- Suppliers and Affiliates — data strictly necessary for order execution.
- Competent authorities upon legal request.
Article 5 — Retention Periods
- Active account: duration of the contractual relationship.
- Order and accounting data: 3 years after the end of the business relationship, unless longer legal obligation.
- Technical logs: up to 12 months unless security incident.
- Cookies: as per Cookie Policy.
Article 6 — Your Rights
You have the rights of access, rectification, erasure, limitation, objection, portability, and withdrawal of consent.
Exercise: dpo@… or GDPR space (JSON/CSV export, account deletion, consent management).
Complaint: CNIL — www.cnil.fr
Article 7 — Security
Appropriate measures: transit encryption (HTTPS), password hashing, restricted access, backups.
Article 8 — Transfers outside the EU
When subcontractors are located outside the EEA, Affisell ensures appropriate guarantees (SCC, adequacy decision, or equivalent mechanism).
Article 9 — Amendments
Any substantial modification will be brought to your attention (email or banner).