Data controller
Le responsable du traitement des données collectées sur le site hoyaterra.com est EI Ophélie CONTET, entreprise individuelle agricole. Le site est exploité sous le nom commercial HoyaTerra.
For any question concerning personal data or to exercise a right, the Customer may write to contact@hoyaterra.com or use the contact form.
Data collected
- When an order is placed or an account is created: surname, first name, billing and delivery details, email address, telephone number where required for delivery, and order contents and history.
- When an enquiry or claim is submitted: name, email address, subject and contents of the message, any order number and any photographs provided.
- When browsing: technical data strictly necessary for the operation and security of the website, such as the IP address, technical logs and essential cookies.
- When paying: card payments are processed directly by Stripe. HoyaTerra does not store the full card number or security code.
Purposes and legal bases
- managing the basket, customer account, orders, payments, deliveries, invoices and after-sales service: performance of the contract;
- responding to enquiries submitted through the contact form: pre-contractual measures or the legitimate interest in responding to enquiries;
- complying with accounting, tax and regulatory obligations: legal obligation;
- preventing fraud, securing the website and ensuring its proper operation: legitimate interest and, where applicable, legal obligation.
No data are used for newsletters, targeted advertising or commercial prospecting when the website launches.
Recipients and service providers
Data are accessible only to HoyaTerra and, to the extent required for their role, to the service providers involved in operating the shop: Hostinger for hosting, Stripe for payments, Zoho for emails, Sendcloud for shipment management, the selected carriers for delivery, and Google Drive for the encrypted storage of website backups.
These service providers act under their own obligations or on behalf of HoyaTerra. Where data are processed outside the European Economic Area, the safeguards required by the applicable regulations must be implemented by the service provider concerned.
Retention periods
- contact-form messages, claims and attached photographs: 90 days in the website form, unless they need to be retained for longer to follow up an order or dispute;
- order data and invoices required for accounting purposes: 10 years in accordance with legal obligations;
- customer-account data: while the account is in use and then for no more than three years after the last activity, except for data that must be retained to comply with a legal obligation;
- technical logs and security data: for a period limited to what is necessary for the security and operation of the website;
- payment data: for the periods applied by Stripe; full card details are not stored on the website.
Cookies
Au lancement, le site utilise uniquement les cookies nécessaires à son fonctionnement, notamment pour le panier, la connexion au compte client, la sécurité et le paiement. Aucun outil de publicité ciblée ou de mesure d’audience non indispensable n’est activé. Cette information sera mise à jour si un outil d’analyse, de marketing ou un contenu externe est ajouté ultérieurement.
Your rights
Depending on your circumstances, you have rights of access, rectification, erasure, restriction, objection and portability. You may also withdraw your consent where processing is based on consent.
These rights may be exercised by writing to contact@hoyaterra.com or using the contact form. Proof of identity may be requested only where there is reasonable doubt about the requester’s identity. You may also submit a complaint to the CNIL.
Security and updates
Technical and organisational measures are implemented to protect data, including HTTPS encryption, restricted administrative access, security updates and regular backups.
This policy will be updated when the website’s features, service providers or data-processing activities change.