ARTICLE 1 : PREAMBLE
The purpose of this Privacy Policy is to inform users of the website:
- How their personal data is collected. Personal data is defined as any information that makes it possible to identify a user. As such, this may include: their first and last name, age, postal or email address, location, or IP address (non-exhaustive list)
- The rights they have with regard to this data
- The person responsible for processing the personal data collected and processed
- The recipients of this personal data
- The website’s cookie policy
This policy supplements the Legal Notice and the Terms of Use available to users at the following address:
https://ateliertac-hexagone.fr/mention-legales/
https://ateliertac-hexagone.fr/cgu/
ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA
“In accordance with Article 5 of European Regulation 2016/679, personal data shall be:
- Processed lawfully, fairly, and transparently with regard to the data subject;
- Collected for specified (see Article 3.1), explicit, and legitimate purposes, and not further processed in a manner incompatible with those purposes;
- Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
- Accurate and, where necessary, kept up to date. All reasonable measures must be taken to ensure that personal data which are inaccurate with respect to the purposes for which they are processed are erased or rectified without delay;
- Kept in a form that permits the identification of data subjects for no longer than is necessary for the purposes for which they are processed;
- Processed in a manner that ensures appropriate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by means of appropriate technical or organizational measures.
Processing is lawful only if, and to the extent that, at least one of the following conditions is met:
- The data subject has given their consent to the processing of their personal data for one or more specific purposes;
- The processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures at the data subject’s request;
- The processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- The processing is necessary to protect the vital interests of the data subject or of another natural person;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- Le traitement est nécessaire aux fins des intérêts légitimes poursuivis par le responsable du traitement ou par un tiers, à moins que ne prévalent les intérêts ou les libertés et droits fondamentaux de la personne concernée qui exigent une protection des données à caractère personnel, notamment lorsque la personne concernée est un enfant.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING WEBSITE NAVIGATION
Article 3.1 : Data collected
The personal data collected in the context of our activities are as follows:
- Last/First name
- Coordinates (postal adress, phone number, email adress)
- Birth date
- Gender
- Order history
- Your banking information, if you have provided it to us (e.g., for a refund).
The purpose(s) of collecting and processing this data are as follows:
- Products custumisation
- Shipping of ordered products
- Delivery tracking
- Customer service claims (refunds, product warranty, etc.)
- Detection of potential fraud
- Payment on the website
Article 3.2: Method of Data Collection
This data is collected when creating a customer account as well as when placing an order.
They are stored by the Data Controller under reasonable security conditions, for a period of: 2 years for inactive accounts.
The company may keep certain personal data for longer than the periods stated above to fulfill its legal or regulatory obligations.
Article 3.3: Data Storage and Hosting
https://ateliertac-hexagone.fr website is hosted by :
o2switch
Chemin des Pardiaux 63000 Clermont-Ferrand
Contact 0444446040
Article 3.4: Transmission of Data to Third Parties
The data may be transmitted to our partners, listed below:
- Carriers for the delivery of your order
- The payment service provider
- Suppliers of equipment in certain cases (e.g., defective products covered by warranty, etc.)
- Various professional service companies (marketing agencies, advertising agencies, website hosts, etc.)
Article 3.5 : Cookies policy
To improve your experience on our website, we need to be able to know and remember certain settings from your browsing: this is the role of cookies.
Cookies are programs used solely for this purpose: to remember, during your visit, your identity (recognized via your username and password) and the contents of your shopping cart as you fill it.
You can at any time select which cookies to enable, and, if desired, completely refuse cookies (bearing in mind that this may noticeably affect your browsing experience on the site). You may also regularly delete cookies from your device through your browser.
The following type(s) of cookie are used:
- Analytical and Statistical Cookies: These cookies allow us to better understand how the user interacts with the website through their browsing behavior, in order to optimize the site and generate statistics. They also allow us to determine whether the visitor has visited the site before or is a new visitor.
For this purpose, our website uses Google Analytics and Google Tag Manager.
ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION REPRESENTATIVE
Article 4.1: Person Responsible for Data Processing
Personal data is collected by Thomas GSELL EI, registered under number 988283511.
The Data Controller can be contacted as follows:
- By mail at the following address: 60 rue François 1er 75008 Paris ;
- By email : contact@ateliertac-hexagone.fr.
ARTICLE 5: THE USER’S RIGHTS CONCERNING THE COLLECTION AND PROCESSING OF PERSONAL DATA
Any user concerned by the processing of their personal data may exercise the following rights in accordance with Regulation (EU) 2016/679 and the French Data Protection Act (Law No. 78-17 of 6 January 1978):
- Right of access, rectification, and erasure of data (as provided respectively in Articles 15, 16, and 17 of the GDPR);
- Right to data portability (Article 20 of the GDPR);
- Right to restriction of processing (Article 18 of the GDPR) and to object to the processing of data (Article 21 of the GDPR);
- Right not to be subject to a decision based solely on automated processing;
- Right to determine the fate of personal data after death;
- Right to lodge a complaint with the relevant supervisory authority (Article 77 of the GDPR).
To exercise your rights, you can contact Atelier Tactique Hexagone by postal mail at 60 rue François 1er, 75008 Paris, France, or by email at contact@ateliertac-hexagone.fr
To enable the Data Controller to fulfill the request, the user may need to provide certain information, including their full name, email address, and account, personal space, or subscriber number.
Visit cnil.fr for more information about your rights.
ARTICLE 6: TERMS FOR MODIFICATION OF THE PRIVACY POLICY
The publisher of https://ateliertac-hexagone.fr reserves the right to update this Privacy Policy at any time to ensure that it remains compliant with applicable laws for site users.
Any modifications shall not affect purchases previously made on the website, which remain subject to the Privacy Policy in effect at the time of purchase and as accepted by the user when completing the purchase.
The user is encouraged to review this Policy each time they use our services, without the need for formal notification.
This Policy, originally issued on 01/08/2025, was updated on 01/08/2025.
Draft made on LegalPlace.fr