This policy concerns the marketing website and its contact and ordering journeys. Information specific to the app's processing must be available when those functions are used.

Data controller

10-Chairs Innovations, a French simplified joint-stock company (SAS) with share capital of 40,000 euros, registered with the Épinal Trade and Companies Register under number 931 685 317, at 6 C rue du Grand Breuil, 88200 Remiremont, France, determines the purposes and means of the processing described here. Personal data contact: contact@10-chairs.com, +33 6 29 39 74 57.

Contact and pre-contractual enquiries

The form collects contact details needed to respond, any business activity supplied and the message. Required fields are identified. A name, email address and usable message enable the request to be handled; users must not send card numbers, passwords or unnecessary sensitive data.

Processing is based on pre-contractual steps requested by the person or 10-Chairs' legitimate interest in responding to other enquiries. Making contact does not automatically subscribe anyone to a newsletter or community.

Orders and credits

When a purchasing journey is enabled, necessary data includes identity, billing and delivery details, the selected model, order reference, price, dates and payment status. This data is used to perform the contract, inform the customer, deliver, refund, handle guarantees and comply with accounting obligations.

Credits require an account, a balance and records of purchases, usage and restored credits. This data is used to provide the service, correct errors and prevent fraud. The accounting origin of credits may be retained to calculate a monetary refund, without creating a difference in the uses provided by purchased and free credits.

Full card details are processed through the payment provider's interface, including Stripe when that journey is used. They must not be entered in 10-Chairs forms.

Recipients and service providers

Authorised 10-Chairs personnel and providers strictly necessary for the function used may access the data: hosting and forms, email and support, payment and billing, transport and delivery, hosting of the app and content, media processing and social connections requested by the user.

Framer provides services for the marketing website. Stripe handles payments entrusted to it. A WhatsApp link leads to a Meta service; users choose whether to join. Categories of recipients are described here without attributing processing to a provider that has not yet been selected.

Introducing new processing, an artificial intelligence tool or a social network connection must be accompanied by the corresponding information before collection. When a transfer outside the European Economic Area takes place, the applicable safeguards are explained to the people concerned and may be requested at the contact address.

Retention

Ordinary contact correspondence is retained to handle the request, then for a maximum of three years after the last active exchange, unless a dispute or obligation justifies separate retention. Data used for relevant business marketing is retained for no more than three years after collection or the last active contact and remains subject to the right to object.

Data needed for orders and guarantees is retained during their performance and then in restricted-access archives for the applicable evidential and limitation periods. Relevant accounting records are retained for ten years. Data needed for credit balances and evidence of their use remains while the account and associated rights are active; closure does not remove legally necessary archives.

Retention periods for media files, social connections and app logs are specified in that service's information. Credits having no expiry date does not mean unlimited retention of all account data and media.

Security and rights

Data access is limited according to participants' roles. Security measures must be appropriate to the risks, particularly for accounts, exchanges, media retrieval and order records.

Depending on the processing and statutory conditions, individuals may request access, rectification, erasure, restriction or portability, or object to processing. Consent may be withdrawn for the future without affecting the lawfulness of previous operations. Requests should be sent to contact@10-chairs.com. Proof of identity is requested only where reasonable doubt makes it necessary.

A response is provided within the statutory period, generally one month. A justified extension may be notified where regulations permit. Individuals may contact the CNIL, https://www.cnil.fr, or the competent supervisory authority. No automated decision-making producing legal effects is presented as being deployed merely through visiting the website.