This is a translation provided for convenience. The French version is the only legally binding text; in case of any difference, it prevails.
1. Data controller
Benjamin Favre, sole trader (entrepreneur individuel, EI), trading as Webdesign29, 16 rue Poullaouec, 29200 Brest, France, is the controller of the processing carried out by this website. Contact: contact@inklura.fr.
2. Data processed
- Account: e-mail address, name, 1clic sign-in identifier and customer reference.
- Orders and billing: Stripe customer, subscription and payment references, plan, amounts, billing address and VAT number entered on the payment page. Card numbers are entered at Stripe and never reach this website.
- Licences: licence key (stored encrypted), addresses of the activated shops and of their pair, WooCommerce or PrestaShop side, module version, activation and last-check dates.
- Security: log of licence operations (activation, deactivation, download, order) with the IP address the request came from, and temporary rate-limiting counters.
- Correspondence: the messages you send us by e-mail and attachments sent to support.
Your shops' catalogues, orders and customer records are exchanged directly between your two shops: they do not go through this website and are never sent to us. The daily licence check only sends the key, the shop address and the module version.
3. Purposes and legal bases
- Managing the account, licences, downloads and support: performance of the contract or pre-contractual steps at your request.
- Invoicing and bookkeeping: legal obligation.
- Securing the service (preventing key abuse, rate limiting, investigating an incident): legitimate interest in protecting the service and its customers.
We do not use your data for advertising, do not sell it and carry out no profiling.
4. Recipients
Only authorised people at Webdesign29 access your data. The following are also involved, each for its own part:
- 1clic, the identity service used for sign-in: it receives the e-mail, name and password entered when creating the account or signing in. This website does not keep your password.
- Stripe, payment and invoicing provider, acting under its privacy policy; some of its processing takes place outside the European Union, with the safeguards it describes.
- OVH SAS, host of the website and its databases, in France.
Fonts are served by this website: no request is sent to Google Fonts or to any analytics service.
5. Retention periods
- Account and licences: for the duration of the contractual relationship, then for as long as needed to handle a claim or defend a right, within the legal limitation periods.
- Accounting records and invoices: ten years.
- Security log and technical data: as long as needed for the security of the service and the resolution of incidents.
- Rate-limiting counters: deleted automatically shortly after their ten-minute window ends.
7. Your rights
You can ask for access to your data, its rectification, erasure, restriction of processing or portability, and object to processing based on legitimate interest, by writing to contact@inklura.fr. We reply within one month. Some data must however be kept to meet a legal obligation, such as invoices.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority.