Privacy policy

1. Data controller

[Atelier Georgia SAS], [address to be filled]. Contact: contact@atelier-georgia.fr.

2. Purposes

B2B sale of handcrafted zellige and natural stone: managing reseller applications, pro accounts, order requests, invoicing and delivery. Replies to messages received through the contact form.

3. Legal basis

Performance of the contract (pro space, requests, deliveries), legitimate interest (site security, abuse prevention, admin action logging), legal obligations (retention of accounting records).

4. Data categories

Identity (first name, last name, role), contact (business email, phone, address), company data (legal name, registration number, legal form, coverage area), order data (references, m², amounts, desired and confirmed delivery dates), technical browsing data (IP address, user-agent, server logs).

5. Recipients

Atelier Georgia team (sales administration and production), hosting provider OVH SAS (France), SMTP provider for transactional emails. No transfer outside the European Union.

6. Retention periods

• Active pro account: contract duration + 3 years after last interaction.
• Order requests and invoices: 10 years (accounting obligation, art. 102 LPF).
• Admin action log (audit): 2 years, automatic purge.
• Technical logs (nginx): 13 months maximum.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, port and object to your data, as well as to withdraw consent and lodge a complaint with the CNIL. To exercise these rights: contact@atelier-georgia.fr.

8. Cookies

The site uses only cookies that are essential for the pro space and admin to work. No analytics or advertising trackers.

• ag_pro_session — pro session (essential, sameSite strict, httpOnly, 7-day lifetime).
• ag_admin_session — admin session (essential, sameSite strict, httpOnly, 7-day lifetime).

9. Hosting

The site is hosted by OVH SAS (Roubaix, France). Data is stored in mainland France. OVH complies with GDPR and ISO 27001 standards.