Privacy policy

This page explains what personal data we collect on strasselec.com, why, how long we keep it and how to exercise your rights. Last updated: 11 August 2026.

1. Data controller

STRASSELEC SARL
6, rue du Spesbourg — 67000 Strasbourg — France
Tél. : +33 7 81 23 54 80 — info@strasselec.com
RCS Strasbourg — SIRET 499 870 384 00017 — VAT no. FR 88 499 870 384

2. Data collected and purposes

• Customer account (name, email address, encrypted password): to let you order and track your orders.
• Orders and invoices (billing and delivery addresses, telephone, VAT number for businesses, purchase details): to perform the sale and meet our accounting and tax obligations.
• Payment: card details are entered directly with our payment provider. We keep no copy of them.
• Contact form and emails: to answer your enquiries.
• Product reviews: to publish your review under the name you provide.
• Newsletter: to send you our news, only if you subscribed.
• Cart reminder: to email you about a cart left pending. Every message carries an unsubscribe link.
• Business VAT number: to check its validity and apply the correct VAT treatment.
• Audience measurement: to understand how the site is used and improve it — only if you have consented.

3. Legal bases

Depending on the case: performance of the sales contract (order, delivery, after-sales), compliance with legal obligations (invoicing, accounting), your consent (newsletter, audience measurement cookies) and our legitimate interest (site security, fraud prevention).

4. Recipients

• Our carriers, for delivery: GLS and La Poste.
• Our payment provider (Paybox) and our bank.
• Our host OVH SAS, in France.
• Our accountancy firm, Sadec Akelys (Strasbourg), for accounting records.
• The European Commission's VIES service, to check a business VAT number.
• Google, to protect forms against spam (reCAPTCHA) and, if you accepted it, for audience measurement.

We never sell or rent your data to anyone.

5. Transfers outside the European Union

Audience measurement and form protection data may be processed by Google outside the European Union, under the safeguards provided for by law (standard contractual clauses, EU–US Data Privacy Framework). Audience measurement only takes place after you have accepted it.

6. Retention periods

• Customer account: for the life of the account, then 3 years after the last contact.
• Invoices and accounting records: 10 years, as required by law.
• Newsletter: until you unsubscribe, then 3 years at most.
• Audience measurement cookies: 13 months at most. Your cookie choice: 6 months.

7. Your rights

You have the right to access, rectify, erase, restrict, object and to data portability, as well as the right to give instructions on what happens to your data after your death. Write to info@strasselec.com; proof of identity may be requested. You may also lodge a complaint with the French data protection authority, the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.

8. Cookies

Until you accept, no audience measurement script is loaded and no data is sent to Google for that purpose. The 🍪 button at the bottom left of every page lets you change your mind at any time.

9. Security

The whole site is served over HTTPS. Access to order data is restricted to authorised staff.