Privacy Policy

1. Data controller

The controller of the personal data collected via the Site is Rachid AOUBOUKDIR (ART BEYOND CONVENIENCE, 59 rue de Ponthieu, Bureau 326, 75008 Paris, France), reachable at contact@artbeyondconvenience.fr.

2. Data collected

• Order and delivery: name, postal address, e-mail and phone number (provided at payment). The phone number is requested for delivery by Colissimo against signature (delivery notice, parcel tracking).
• Payment: processed by Stripe. We do not receive or store your card numbers.
• Browsing: anonymous audience measurement via Cloudflare Web Analytics (traffic statistics, without cookies and without advertising profiling).

The Site offers neither a customer account nor a newsletter: no data is collected other than for orders and aggregated audience measurement.

3. Purposes and legal bases

• Process and deliver orders, provide customer service — performance of the contract.
• Comply with our accounting and legal obligations — legal obligation.
• Measure the site's audience — legitimate interest in improving the service.

4. Recipients and processors

Your data may be passed to our technical providers strictly for the purposes above:

• Stripe — payment processing.
• Vercel — hosting of the shop.
• Railway — hosting of the server and database.
• Cloudflare — image hosting (R2) and audience measurement (Web Analytics).
• Colissimo — carrier.

5. Transfers outside the European Union

Some of our providers (Stripe, Vercel, Cloudflare) are US companies: data may be transferred to the United States. These transfers are governed by the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, to which these providers are certified, and by the European Commission's standard contractual clauses where applicable.

6. Retention period

Data relating to orders (identity, address, e-mail, phone) is kept for as long as necessary to process the order, provide customer service and honour legal guarantees; accounting records (invoices) are then archived for ten (10) years in accordance with Article L123-22 of the French Commercial Code. Audience statistics are aggregated and anonymous from the moment they are collected, with no time limit since they identify no one.

7. Cookies and local storage

The Site places no cookie subject to consent, which is why it displays no cookie banner:

• Your browser stores your basket (abc_cart) and your language (abc_lang) locally: storage strictly necessary to the service, exempt from consent (Article 82 of the French Data Protection Act). This information does not leave your browser.
• Audience measurement (Cloudflare Web Analytics) works without cookies, on aggregated data, with no cross-site tracking.
• The SoundCloud player is loaded only after an explicit click on your part: no data is sent to SoundCloud before that action.
• Payment takes place on the page hosted by Stripe, subject to Stripe's privacy policy.

8. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, contact contact@artbeyondconvenience.fr. A response will be provided within one month.

9. Complaints

You may lodge a complaint with the CNIL (the French data protection authority — www.cnil.fr) if you consider that the processing of your data does not comply.