Legal information
Privacy Policy
1. Data controller
Renate Frotscher EI
10 rue de la Martinelle, 15600 Maurs, France
Email: contact@clstr.art
SIRET: 495 070 344 00017
2. Data collected
We collect the following data, only when necessary:
When placing an order (with or without account):
- Name
- Email address
- Phone number (optional)
- Shipping address
- Payment data (processed directly by Square, never stored on our servers)
When creating an account:
- Name, email address
- Password (stored hashed, never in plain text)
When subscribing to the newsletter:
- Email address
- First name (optional)
Technical data:
- No tracking or advertising cookies are used
- No third-party analytics tools are currently used
3. Purposes
Your data is used to:
- Process and ship your orders
- Send transactional emails (order confirmation, shipping notification)
- Manage your customer account (if created)
- Send the newsletter (only if subscribed, unsubscribe at any time)
- Respond to your inquiries
Your data is never sold, rented, or shared for commercial purposes with third parties.
4. Legal basis
- Contract performance: processing your order, delivery, transactional emails
- Consent: newsletter subscription, account creation
- Legitimate interest: fraud prevention, site improvement
5. Service providers
Data may be shared with the following providers, strictly within the scope of their services:
| Service | Provider | Data | Country |
|---------|----------|------|---------|
| Payment | Square | Payment data | EU/US |
| Shipping | Mondial Relay | Name, address, phone | France/EU |
| Transactional emails | Brevo | Email, name | France |
| Newsletter | Brevo | Email, first name | France |
| Hosting | Self-hosted server | All data | France |
No data transfers outside the EU except for Square (GDPR-compliant via standard contractual clauses).
6. Data retention
- Order data: 10 years (French accounting obligation)
- Customer account: until account deletion by the user
- Newsletter: until unsubscription
- Contact data: 3 years after the last interaction
7. Your rights
Under the GDPR (EU Regulation 2016/679), you have the following rights:
- Right of access: obtain a copy of your data
- Right to rectification: correct your data
- Right to erasure: request deletion of your data
- Right to portability: receive your data in a structured format
- Right to object: object to the processing of your data
- Right to withdraw consent: withdraw your consent at any time (newsletter, account)
To exercise these rights, send an email to contact@clstr.art with your request and proof of identity. Response within 30 days.
You may also file a complaint with the French data protection authority (CNIL): www.cnil.fr
8. Cookies
The clstr.art website only uses strictly necessary technical cookies:
- Session cookie (cart, authentication)
- No advertising cookies
- No tracking cookies
- No third-party cookies (no Google Analytics, Facebook Pixel, etc.)
These technical cookies do not require consent (article 82 of the French Data Protection Act).
9. Security
We implement appropriate technical and organizational measures to protect your data:
- Encrypted HTTPS connection
- Hashed passwords (bcrypt)
- Payment data processed exclusively by Square (PCI DSS certified)
- Data access limited to strict necessity
10. Changes
This privacy policy may be updated. In case of a substantial change, a notification will be displayed on the site.
Last updated: April 2026.