This policy informs you of how the company CASALIL, operating under the trade name La Maison Pernoise, collects and processes your personal data in connection with your use of the website lamaisonpernoise.com. We take the protection of your data very seriously and we are committed to complying with the General Data Protection Regulation (GDPR) as well as the French Data Protection Act (loi Informatique et Libertés).
Data controller
The controller of the personal data collected on the website is:
- Company: CASALIL, a limited liability company (SARL) with a share capital of €10,000
- Trade name: La Maison Pernoise
- Registered office: 167 avenue de la Gare, 84210 Pernes-les-Fontaines, France
- SIRET: 793 621 905 00017
- Trade and Companies Register (RCS): Avignon
- Intra-Community VAT no.: FR 48 793 621 905
- Publication director: Lau Dejente
- Email: contact@lamaisonpernoise.com
- Phone: +33 9 80 08 48 42
CASALIL has not appointed a Data Protection Officer (DPO), as such an appointment is not mandatory given the nature of our activity. For any question relating to your personal data, you may contact us directly using the details above.
Personal data collected
Depending on how you use the website, we may collect the following categories of data:
- Identification data: title, last name, first name, date of birth
- Contact details: email address, phone number, postal addresses (billing and delivery)
- Account data: username, password (stored in encrypted form)
- Order data: products ordered, amounts, purchase history, invoices
- Payment data: we do not store your full banking details. Payment information is collected and processed directly by our payment providers (see the "Recipients and processors" section)
- Browsing data: IP address, browser type, pages visited, visit duration, cookies (see the "Cookies" section)
- Loyalty programme data: accumulation of your purchases, loyalty tiers reached, vouchers generated
- Wish list: products you add to your "favourites"
- Communications: messages exchanged with our customer service, requests submitted via the contact forms
Mandatory fields are indicated by an asterisk in our forms. Without this information, we will not be able to process your order or create your account.
Purposes of processing
Your personal data is collected and processed for the following purposes:
- Creation and management of your customer account
- Processing, shipping and tracking of your orders
- Issuing invoices and keeping accounts
- Management of after-sales service, returns and any complaints
- Management of the La Maison Pernoise loyalty programme
- Sending our newsletter, only if you have consented to it
- Personalisation of your experience (language, wish list)
- Audience measurement and statistical analysis of the website
- Website security and fraud prevention
- Compliance with our legal and regulatory obligations
Legal bases for processing
The processing of your data is based on the following legal bases, provided for in Article 6 of the GDPR:
- Performance of the contract: processing of your order, delivery, management of the customer account, after-sales service, loyalty programme
- Legal obligation: retention of invoices, tax and accounting filings, fraud prevention
- Consent: sending the newsletter, placement of non-essential cookies
- Legitimate interest: website security, audience measurement, improvement of our services
Recipients and processors
Your personal data is accessible to the authorised staff of CASALIL responsible for order management, customer relations, accounting and marketing. It may also be passed on to the following processors, who act on our behalf and in accordance with our instructions:
- Website hosting: 1&1 IONOS SE, Germany
- Sending of transactional emails (order confirmation, invoice, forgotten password): Twilio SendGrid, United States
- Sending of marketing emails (newsletter): Mailjet (Sinch Email France SAS), France
- Payment solutions: PayPlug (France), Systempay / Lyra Network (France), PayPal Europe (Luxembourg)
- Carriers: Colissimo (La Poste), GLS France, Dililog, La Poste
- Audience measurement: Google Analytics, provided by Google Ireland Limited (Ireland)
We may also be required to pass on your data to administrative or judicial authorities in the event of a legal request.
We never sell, rent or exchange your personal data to third parties for commercial purposes.
Transfers outside the European Union
Some of our processors may transfer or store your data outside the European Union, in particular in the United States. This is the case for:
- Twilio SendGrid (transactional emails), based in the United States
- Google Analytics, whose parent company Google LLC is based in the United States
- PayPal, some of whose operations may be processed by entities outside the EU
These transfers are governed by the safeguards provided for by the GDPR: adherence to the EU - United States Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) and/or standard contractual clauses adopted by the European Commission.
Retention periods
Your data is retained for the following periods:
- Customer account: as long as the account is active, then 3 years after your last activity (last login or last order)
- Order data, invoices and accounting records: 10 years from the close of the accounting year, in accordance with Article L123-22 of the French Commercial Code
- Prospecting data (newsletter sign-up without purchase): 3 years from your last contact
- Analytics cookies: 13 months maximum, in accordance with the recommendations of the CNIL
- Banking details: not retained by CASALIL. Any tokens are retained by the payment providers in accordance with their own policy
- Connection logs: 1 year, in accordance with the French Act on confidence in the digital economy (LCEN)
Upon expiry of these periods, your data is deleted or irreversibly anonymised.
Data security
We implement appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access. In particular:
- Secure connection to the website using an SSL/TLS certificate (HTTPS)
- Passwords stored in encrypted form
- Access to data limited to authorised staff
- Hosting with a GDPR-compliant provider
- Regular updates of the website management system (PrestaShop) and its modules
Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:
- Right of access: obtain confirmation that your data is being processed and receive a copy of it
- Right to rectification: have your data corrected if it is inaccurate or incomplete
- Right to erasure ("right to be forgotten"): have your data deleted in the cases provided for by law
- Right to restriction of processing: request that the processing of your data be suspended
- Right to portability: receive your data in a structured, machine-readable format, or request its direct transmission to another controller
- Right to object: object to the processing of your data on legitimate grounds, and at any time and without justification in the case of commercial prospecting
- Right to withdraw your consent at any time, where the processing is based on it (for example, unsubscribing from the newsletter)
- Right to set directives regarding the fate of your data after your death
How to exercise your rights
To exercise any of these rights, you may contact us:
- By email: contact@lamaisonpernoise.com
- By post: CASALIL, 167 avenue de la Gare, 84210 Pernes-les-Fontaines, France
We undertake to respond to your request within one month of receiving it. This period may be extended by two additional months if the request is complex or in the event of multiple requests; we will then inform you accordingly.
Cookies
Our website uses cookies, that is to say small files placed on your device during your visit, in order to ensure the proper functioning of the website and to measure its audience. A distinction is made between:
- Strictly necessary cookies: essential to the functioning of the website (cart management, identification, security, language preference). They do not require your consent.
- Audience measurement cookies: allow visits to be counted and the use of the website to be analysed (Google Analytics). These cookies are placed subject to your consent.
- Personalisation cookies: remember your preferences (wish list, recently viewed items).
You can at any time configure your browser to refuse cookies or to be warned before they are placed. However, refusing certain cookies may impair the functioning of the website, in particular preventing the placing of an order.
Complaint to the CNIL
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés, CNIL):
- Address: 3 place de Fontenoy, TSA 80715, 75334 Paris cedex 07
- Phone: 01 53 73 22 22
- Website: www.cnil.fr
Changes to this policy
We may amend this policy in order to adapt it to legislative, case-law or technical developments. Any substantial change will be notified to you on the website and, where applicable, by email.
Update date
Policy updated on 8 May 2026.