Who are we?

Our website address is: https://www.castellum.fr.

Comments

When you leave a comment on our site, the data entered in the comment form, as well as your IP address and browser user agent, is collected to help us detect unwanted comments.

An anonymised string created from your email address (also known as a hash) may be sent to the Gravatar service to verify your use of the service. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After your comment has been approved, your profile picture will be publicly visible next to your comment.

Media

If you upload images to the site, we advise you to avoid uploading images that contain EXIF data of GPS coordinates. People visiting your site may download and extract location data from these images.

Cookies

If you leave a comment on our site, you will be asked to save your name, email address and site in cookies. This is only for your convenience so that you do not have to enter this information if you leave another comment later. These cookies expire after one year.

If you go to the login page, a temporary cookie will be set to determine if your browser accepts cookies. It does not contain any personal data and will be deleted automatically when you close your browser.

When you log in, we will set a number of cookies to store your login information and screen preferences. The lifetime of a login cookie is two days, the lifetime of a screen option cookie is one year. If you check “Remember me”, your login cookie will be retained for a fortnight. If you log out of your account, the login cookie will be deleted.

By editing or publishing a post, an additional cookie will be stored in your browser. This cookie does not contain any personal data. It simply indicates the ID of the publication you just edited. It expires after one day.

Embedded content from other sites

Articles on this site may include embedded content (e.g. videos, images, articles…). Embedded content from other sites behaves in the same way as if the visitor were on that other site.

These websites may collect data about you, use cookies, embed third party tracking tools, track your interactions with these embedded contents if you have an account logged on their website.

Use and transmission of your personal data

If you request a password reset, your IP address will be included in the reset email.

Durées de stockage de vos données

If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to automatically recognise and approve subsequent comments rather than leaving them in the moderation queue.

For accounts that register on our site (if any), we also store the personal data specified in their profile. All accounts can view, edit or delete their personal information at any time (with the exception of their user ID). Site managers can also view and edit this information.

The rights you have over your data

If you have an account or have left comments on the site, you can request to receive a file containing all the personal data we hold about you, including that which you have provided to us. You may also request the deletion of your personal data. This does not include data stored for administrative, legal or security purposes.

Transmission of your personal data

Visitors’ comments can be checked using an automated spam detection service.

What we gatherand store

During your visit to the site, we track:

• Products you have seen: we use these to, for example, display products you have recently seen
• Location, IP address and browser type: we use these to estimate taxes and shipping costs
• Delivery address: we’ll ask you to enter it to estimate shipping costs before you place your order, and to send the order to you!

We use cookies to track the contents of the shopping cart as you browse our site.

We collect information during checkout on our shop.

When you purchase from our website, we will ask you to provide information including your name, billing address, shipping address, email, phone number, payment/credit card information and possibly account information such as user ID and password. This information will be used to:

• Sending information about your account and order
• Responding to requests, including refunds and complaints
• Processing payments and preventing fraud
• Setting up your account for our shop
• Comply with any legal obligations, such as tax calculations
• Improve our shop offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we store your name, address, email, and phone number, which will be used to pre-populate order validation for future orders.

We generally store your information for as long as we need it for the purpose for which we collect and use it, and we are not legally obliged to continue to store it. For example, we store order information for XXX years for tax and accounting purposes. This includes your name, email and billing and shipping addresses.

We also store comments or notices, if you choose to send them.

Who in our team has access to the data

Members of our team have access to the information you provide to us. For example, shop administrators and managers have access to:

• Order information such as what was purchased, when and where it should be sent, and
• Customer information such as your name, email and billing and shipping information.

Our team has access to this information to process orders, process refunds and assist you.

What we share with others

We share data with third parties who help us manage our orders and shop services; for example :

Payments

We accept payments via Stripe. When processing payments, certain data will be transmitted to Stripe, including

• Name
• Email
• Address
• Phone
• City/State/Postal Code
• Unique payment identifier
• Payment Provider ID

Please read Stripe’s privacy policy for more details.

Shipping

We deliver the orders by the Colissimo service of La Poste. In order to be used by the Post Office in the context of the performance of its services, in particular to ensure that delivery choices are made, notifications are made, delivery is monitored and/or satisfaction surveys are carried out, we transfer the following data to the Post Office:

• Postal address
• E-mail address
• Telephone number

Within the framework of a contract to which we have subscribed, De Post-La Poste undertakes to take and to ensure that its personnel will take all necessary measures to preserve and ensure the integrity and confidentiality of the personal data that we transmit to it under conditions of security that comply with the rules of the art and the provisions of the regulations in force concerning the protection of personal data. The Post Office undertakes in particular not to use them for other purposes than the realization of the services, in particular to ensure the choice of distribution, to warn the recipient of the provision and the follow-up

• to make the personal data that we transmit to it accessible only to personnel and/or subcontractors duly authorised and empowered by virtue of their functions and capacity, within the strict limit of what is necessary for the performance of their functions;
• not to transfer them to third parties

De Post-La Poste may be required to process the identity and contact details of third parties who may facilitate the delivery.

In the context of the outsourcing of part of the activities of the customer service of De Post-La Poste as well as for the realization of the third party application maintenance of the computer application(s) used by the customer service of De Post-La Poste, the data are the object of a transfer to Morocco.

As part of the outsourcing of the customs clearance service for parcels with a value of more than €1,000 and destined for the French overseas departments, the data is transferred to Mauritius.

This transfer takes place in compliance with the conditions and guarantees adapted to ensure the protection of the personal data that we transmit to La Poste within the framework of this Contract, in particular by the signature of standard contractual clauses according to the modalities provided for by decision of the European Commission, for the transfer of personal data to subcontractors established in third countries.