{"id":646,"date":"2026-05-09T16:30:54","date_gmt":"2026-05-09T14:30:54","guid":{"rendered":"https:\/\/xaviers.photo\/confidentialite\/"},"modified":"2026-08-12T16:44:18","modified_gmt":"2026-08-12T14:44:18","slug":"privacy","status":"publish","type":"page","link":"https:\/\/preprod.xaviers.photo\/en\/privacy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<p class=\"xs-legal-notice-en wp-block-paragraph\"><em>This English translation is provided for convenience only. Only the French version (<a href=\"https:\/\/preprod.xaviers.photo\/en\/privacy\/\">Politique de confidentialit\u00e9<\/a>) is legally binding.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Last updated: 6 August 2026<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Data controller<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The controller of the personal data collected on xaviers.photo is:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Xavier Sch\u00e4llebaum<\/strong> \u2014 artist-author photographer<br>\nSIRET 437 694 375 00027<br>\n5 rue du G\u00e9n\u00e9ral Delanne, 92200 Neuilly-sur-Seine, France<br>\nEmail: <a href=\"mailto:contact@xaviers.photo\">contact@xaviers.photo<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Data collected<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The xaviers.photo website collects the following data:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Type of data<\/th><th>Source<\/th><th>Purpose<\/th><th>Duration<\/th><\/tr><\/thead><tbody><tr><td>Surname, first name, address, telephone, email<\/td><td>Order form<\/td><td>Order fulfilment, delivery, invoicing<\/td><td>10 years (accounting obligation)<\/td><\/tr><tr><td>Email only<\/td><td>Newsletter form<\/td><td>Sending news of new editions<\/td><td>Until unsubscribed<\/td><\/tr><tr><td>Email, message<\/td><td>Contact form<\/td><td>Responding to enquiries<\/td><td>3 years after last contact<\/td><\/tr><tr><td>Account data (login, first and last name, addresses, order history and documents)<\/td><td>Account creation (order or registration)<\/td><td>Management of the collector&#8217;s space: order tracking, certificates of authenticity, invoices, order documents<\/td><td>For the life of the account; deleted on request<\/td><\/tr><tr><td>Aggregated browsing data<\/td><td>Plausible audience measurement (cookie-free)<\/td><td>Anonymous visit statistics<\/td><td>Aggregated \u2014 no individual data retained<\/td><\/tr><tr><td>Payment data<\/td><td>Stripe (processor)<\/td><td>Payment security<\/td><td>No banking data stored by the Seller<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Collector&#8217;s space<\/strong> \u2014 Creating an account (when ordering or registering) opens a secure personal area giving access to order tracking, certificates of authenticity, invoices and order\/delivery documents. The account is activated via a confirmation e-mail sent to the address provided. Account data are kept for as long as the account is active; you may request its deletion at any time by writing to contact@xaviers.photo.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Legal bases<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Performance of the contract<\/strong> : for print orders and the management of the collector&#8217;s space, including transactional order and activation e-mails (art. 6.1.b GDPR)<\/li>\n\n\n\n<li><strong>Consent<\/strong> : for the newsletter and cookies that are not strictly necessary (art. 6.1.a GDPR)<\/li>\n\n\n\n<li><strong>Legitimate interest<\/strong> : for site security and fraud prevention (art. 6.1.f GDPR)<\/li>\n\n\n\n<li><strong>Legal obligation<\/strong> : for the retention of invoices and accounting data (art. 6.1.c GDPR)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">4. Recipients of the data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The data are processed by the Artist and his processors:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Infomaniak<\/strong> (hosting, Switzerland) \u2014 GDPR data-processing agreement signed<\/li>\n\n\n\n<li><strong>Stripe<\/strong> (payments, Ireland\/USA) \u2014 EU-US Data Privacy Framework<\/li>\n\n\n\n<li><strong>Carriers<\/strong> (delivery of the works) \u2014 data strictly necessary for delivery<\/li>\n\n\n\n<li><strong>PICTO Paris<\/strong> (printing atelier) \u2014 production files only, no client data<\/li>\n\n\n\n<li><strong>Brevo<\/strong> (newsletter and transactional e-mails, France) \u2014 data strictly necessary for sending<\/li>\n\n\n\n<li><strong>Klarna<\/strong> (payment facility) \u2014 an independent data controller when you choose instalment payment<\/li>\n\n\n\n<li><strong>Plausible Analytics<\/strong> (cookie-free audience measurement, hosted in the European Union)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">No data is resold or transmitted for third-party commercial purposes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5. Transfers outside the EU<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Some processors (Stripe, Google) may transfer data to the United States. These transfers are governed by the <strong>EU-US Data Privacy Framework<\/strong> (July 2023) and by the European Commission\u2019s Standard Contractual Clauses (SCCs).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Your rights<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In accordance with articles 15 to 22 of the GDPR, you have at any time the right of access, rectification, erasure, restriction, portability and objection concerning your personal data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can exercise these rights by email at <a href=\"mailto:contact@xaviers.photo\">contact@xaviers.photo<\/a>. A reply will be provided within one month at most.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You also have the right to lodge a complaint with the <strong>Commission Nationale de l\u2019Informatique et des Libert\u00e9s (CNIL, the French data protection authority)<\/strong> : <a href=\"https:\/\/www.cnil.fr\" target=\"_blank\" rel=\"noopener\">www.cnil.fr<\/a> \u2014 3 place de Fontenoy, 75007 Paris.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7. Security<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The xaviers.photo website is hosted on secure Infomaniak servers (Switzerland), with HTTPS encryption across the entire domain, encrypted daily backups, and anti-intrusion and anti-DDoS protection.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This English translation is provided for convenience only. Only the French version (Politique de confidentialit\u00e9) is legally binding. Last updated: 6 August 2026 1. Data controller The controller of the personal data collected on xaviers.photo is: Xavier Sch\u00e4llebaum \u2014 artist-author photographer SIRET 437 694 375 00027 5 rue du G\u00e9n\u00e9ral Delanne, 92200 Neuilly-sur-Seine, France Email: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-646","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/preprod.xaviers.photo\/en\/wp-json\/wp\/v2\/pages\/646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/preprod.xaviers.photo\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/preprod.xaviers.photo\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/preprod.xaviers.photo\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/preprod.xaviers.photo\/en\/wp-json\/wp\/v2\/comments?post=646"}],"version-history":[{"count":3,"href":"https:\/\/preprod.xaviers.photo\/en\/wp-json\/wp\/v2\/pages\/646\/revisions"}],"predecessor-version":[{"id":814,"href":"https:\/\/preprod.xaviers.photo\/en\/wp-json\/wp\/v2\/pages\/646\/revisions\/814"}],"wp:attachment":[{"href":"https:\/\/preprod.xaviers.photo\/en\/wp-json\/wp\/v2\/media?parent=646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}