1. Data Controller and General Principles
1.1. Data Controller Details
ELENA BURENINA Studio located at 13 rue Pierre Dupont, 75010 Paris, France acts as the primary data controller for all personal information collected through elenaburenina.com. We process personal data in full compliance with the European Union General Data Protection Regulation (GDPR) and applicable national privacy laws.
1.2. Scope of Policy
This policy outlines how we collect, process, store, and safeguard your personal information when you navigate our online store, purchase products, register an account, subscribe to communications, or interact with client service.
2. Categories of Personal Data Collected
2.1. Contact and Identification Data
When you place an order or register, we collect your full name, shipping address, billing address, email address, and phone number.
2.2. Transaction and Order Details
We retain records of ordered items, sizes, purchase history, order values, transaction timestamps, and communications related to client service or returns.
2.3. Payment Credentials
All financial transactions are handled directly by accredited payment gateway providers including Payment Plugins for Stripe, WooCommerce PayPal Payments, and Mollie. We do not store or process complete credit card numbers or sensitive banking credentials on our servers.
2.4. Form Submissions
Information submitted through contact forms on our site is processed via WPForms to allow our support team to respond to your inquiries.
2.5. Technical and Device Data
We automatically collect technical data during visits, including IP address, browser type, operating system, time zone settings, referral URLs, and browsing patterns.
3. Legal Basis and Purposes of Data Processing
3.1. Contract Performance
We process personal data to fulfill contractual obligations, including order management, payment verification, parcel delivery, and invoice generation.
3.2. Legal Obligations
Data is processed to meet statutory obligations, including tax regulations, accounting standards, and fraud prevention requirements under European law.
3.3. Marketing Communications
With your explicit consent, your email address is processed via Klaviyo to send news, special collection announcements, and promotional updates. You may unsubscribe at any time using the link included in every newsletter.
3.4. Legitimate Interest
We process technical data to analyze user activity, improve store navigation, protect site infrastructure, and enhance overall user experience.
4. Data Sharing and Third Party Service Providers
4.1. Payment Service Providers
Necessary transactional data is shared with certified processing partners including Stripe, PayPal, and Mollie to execute payments securely and prevent fraudulent activities.
4.2. Logistics and Delivery Partners
Shipping details are transmitted to international courier partners such as DHL and UPS strictly for delivering your orders.
4.3. Marketing and Customer Support Tools
Subscriber email addresses are processed through Klaviyo for email automation. General inquiries submitted via WPForms are routed to our client support team.
4.4. Strict Prohibition of Data Sale
We never sell, rent, or trade your personal information to third parties for commercial or independent advertising purposes.
5. Data Storage and Retention
5.1. Financial and Order Records
Personal data linked to completed purchases is stored for the duration mandated by applicable commercial and accounting laws in France.
5.2. Marketing Subscriptions
Contact details utilized for marketing communications are retained until you withdraw consent or request account deletion.
6. International Data Transfers
6.1. International Transfer Safeguards
When personal information is transferred outside the European Economic Area, appropriate legal and technical safeguards are enforced, such as Standard Contractual Clauses approved by the European Commission.
7. Your Rights Under GDPR
7.1. Access and Correction
You have the right to request access to your personal data held by us and demand correction of inaccurate information.
7.2. Erasure and Restriction
You may request deletion of your personal data or restriction of its processing, provided there are no overriding legal retention obligations.
7.3. Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine readable format.
7.4. Submitting Rights Requests
To exercise your rights, please contact our privacy representative at office@elenaburenina.com. All formal requests are handled within 30 days.