Privacy Policy

Last updated: March 10, 2026

This privacy policy describes how users' personal information is collected, used, and protected when browsing the Secrets d'Alsace website.

1. Data Controller

The personal data collected on this website is processed by:

AU GALOPIN (AG)
18 Rue des Serruriers
67000 Strasbourg – France
SIRET: 75046568400017
Email: contact@secretsdalsace.com
Phone: +33 3 88 32 28 29
The website's publisher and editor is:
Hellow Digital – contact@hellowdigital.fr

2. Website Hosting

This website is hosted by:

o2switch
Chemin des Pardiaux
63000 Clermont-Ferrand – France
Phone: +33 4 44 44 60 40
Website: https://www.o2switch.fr

3. Personal Data Collected

When using the website https://secretsdalsace.com, several types of data may be collected.

Voluntarily Provided Data

Users can submit certain information via:

Contact Form

The data collected may include:

Last Name
First Name
Email Address
Phone Number
Message
This information is used solely to respond to requests submitted via the form.

Customer Account Creation

When creating an account, the following data may be collected:

First and Last Name
Email Address
Postal Address
Phone Number
Information Necessary for Order Management
Online Orders

When placing an order through the online store, certain data is required:

Customer Identity
Billing and Shipping Address
Order Information
Payment Information (managed by a secure provider)
Bank details are never stored on the website.

4. Purposes of Data Collection

Personal data is collected in order to:

respond to requests submitted via the contact form
manage user accounts
process orders and payments
ensure product delivery
improve the user experience
compile website traffic statistics

5. Audience Measurement Tools

The website uses Google Analytics (GA4) to analyze website traffic and usage.

This data allows us to measure, in particular:

the number of visitors
the pages viewed
the time spent on the website
the approximate geographic origin of visits
This information is anonymized whenever possible and used solely for statistical purposes.

6. Cookies

The website uses cookies to improve the user experience.

A cookie is a small file stored on the user's computer during browsing.

The website uses, in particular:

technical cookies necessary for the website's operation
audience measurement cookies (Google Analytics)
Cookie consent management is handled by CookieYes, which allows users to:

accept cookies
reject them
personalize their preferences
Cookies are stored for a maximum of 13 months, in accordance with the recommendations of the CNIL (French Data Protection Authority).

7. Data Sharing

Personal data may only be transmitted to service providers necessary for the website's operation, including:

website technical provider
secure payment provider
services used for managing the online store
The website uses, in particular:

WooCommerce for managing the online store
Stripe for secure payment processing
These service providers may have access to the data strictly necessary for the performance of their services.

Data is never sold or rented to third parties.

8. Data Retention Period

Personal data is retained only for the period necessary for the purposes for which it was collected.

Generally speaking:

Messages sent via the form: maximum 3 years
Customer account data: duration of the active account
Order-related data: 10 years (accounting obligations)
Cookies: maximum 13 months

9. Data Security

The website implements various security measures to protect personal data:

Secure HTTPS connection
Regular website backups
Anti-spam and anti-intrusion protection
Limited data access
These measures aim to prevent any unauthorized access, modification, or disclosure of data.

10. User Rights

In accordance with the General Data Protection Regulation (GDPR), each user has the following rights:

right of access to their data
right to rectification
right to erasure
right to restriction of processing
right to object
right to data portability
All requests can be sent to:

contact@secretsdalsace.com

A response will be provided within a maximum of 30 days.

11. Complaint to the CNIL

If a user believes that their rights have not been respected, they can file a complaint with the CNIL.