Data protection & cookies
1 Data controller
This policy applies to the e-commerce website of DASSAUD & FILS (https://dassaudfils.com). We process personal data in compliance with the GDPR, the French Data Protection Act and the recommendations of the CNIL.
Data controller: DASSAUD & FILS, SAS with a share capital of €200,000, RCS Clermont-Ferrand 339 259 764, registered office: 21 rue de Lagat, 63120 Courpière, France.
Data protection contact / Internal DPO: François-Louis TOUSSAINT (Webmaster / Data Protection Officer)
📧 webmaster+rgpd@dassaudfils.com · 📞 +33 4 22 91 79 81
For any questions regarding your data or the exercise of your rights, please contact us at the address above. If you believe that your rights are not respected, you may lodge a complaint with the CNIL (www.cnil.fr).
2 Data collected
The categories of data that may be collected and processed on our website include:
- Contact / customer support forms: email address, message content, possible attachments, timestamps.
- Cookies / trackers: session identifiers, consent preferences, aggregated analytics data, marketing trackers (Meta Pixel) where applicable.
- Technical browsing data: IP address, browser/device type, pages viewed, visit duration, technical events (errors, latency).
Certain data are mandatory for contract performance (e.g. delivery address). Without them, the order cannot be processed.
3 Purposes and legal bases
Your data are processed for the following purposes; the applicable legal basis is specified in each case:
| Purpose | Legal basis (GDPR Art. 6) | Examples of data |
|---|---|---|
| Customer service / support | Legitimate interest (6-1-f) | Messages, emails, attachments |
| Audience measurement and site improvement | Consent (6-1-a) | Analytics cookies, aggregated data |
Consent may be withdrawn at any time without retroactive effect, via unsubscribe links (newsletter) and through our cookie consent module.
4 Data retention periods
We retain your data for limited periods proportionate to the purposes pursued:
| Category | Retention period | Comments |
|---|---|---|
| Support / complaints | 3 to 5 years | Depending on case type and statutory limitation periods |
| Analytics / marketing cookies | Up to 13 months | Derived audience data retained for a maximum of 25 months |
| Consent cookie (“Cooky’Chef”) | 6 months | Renewal of consent collection |
| PrestaShop session cookie | ~20 days | Session ID, cart, technical preferences |
5 GDPR rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
- Access: obtain confirmation and a copy of your data, and information about processing.
- Rectification: correct inaccurate or incomplete data.
- Erasure (“right to be forgotten”): deletion of data within legal limits.
- Objection: at any time, to direct marketing and related profiling.
- Restriction: temporary suspension of processing in certain cases.
- Portability: receive your data in a structured, interoperable format.
- Post-mortem directives: define the handling of your data after death.
To exercise your rights: 📧 webmaster+rgpd@dassaudfils.com · response within one month (extendable by two months in complex cases). Proof of identity may be required. If difficulties persist, you may contact the CNIL.
6 Processors and data transfers
We use service providers acting as data processors, contractually bound by confidentiality, security, and assistance obligations:
- Hosting: o2switch (France).
- Analytics: Google Analytics (consent required, IP anonymisation when configured).
- Maintenance / support: technical providers bound by confidentiality clauses.
Processing is carried out within the EU or in countries recognised as providing adequate protection. Any transfer outside the EU is subject to appropriate safeguards (standard contractual clauses, supplementary measures where necessary).
7 Security and confidentiality
We implement technical (TLS encryption, firewalls, logging, network segmentation, regular updates) and organisational (restricted access, authorisations, confidentiality clauses, backups) measures to protect data integrity and confidentiality. As no system is infallible, in the event of a data breach likely to result in a risk to your rights and freedoms, we will notify the CNIL and, where applicable, the data subjects within the statutory time limits.
8 Cookie management
8.1 Purpose and legal framework
This “Cookies” section informs you about the use of cookies and other trackers on our website, in accordance with Article 82 of the French Data Protection Act, the GDPR, and CNIL recommendations. It complements our privacy policy.
8.2 What is a cookie?
A cookie is a small text file stored/read by your browser on your device (computer, tablet, smartphone) when visiting a website. Other trackers (tags, pixels, local storage) may serve similar purposes: recognising a browser, remembering preferences, measuring audience, or personalising content/advertising.
8.3 Consent management with “Cooky’Chef”
In accordance with regulations, no non-essential cookie is placed without your prior consent. On your first visit, an information banner is displayed via our internal module Cooky’Chef, allowing you to accept all, رفض all or configure by category, with option symmetry compliant with CNIL requirements.
Your choice is stored via a consent cookie for 6 months. Until a choice is expressed, no non-essential cookies are placed. You may modify or withdraw your consent at any time via the “Cookie settings” link permanently available at the top of the page.
8.4 Categories of cookies used
- Strictly necessary cookies (exempt from consent): essential for website operation and explicitly requested services (e.g. cart retention, session, security, error handling). Without them, certain features are unavailable.
Examples: PrestaShop session cookie (name likePrestaShop-XXXXXXXX, approx. ~20 days), Cooky’Chef consent cookie (6 months). - Functional cookies (subject to consent): improve personalisation and convenience (language, display, persistent cart, favourites, chat).
- Analytics cookies (consent required): traffic and performance statistics (Google Analytics:
_ga,_gid,_gat). Data are aggregated and used to improve the website. - Marketing/advertising cookies (consent required): ad personalisation and campaign measurement (Meta Pixel:
_fbp,_fbc; Google Ads:_gcl_*, etc.). If refused, you will see non-targeted ads. - Social media cookies (consent required): sharing/login features (Facebook, Instagram, YouTube). Without consent, these modules may remain inactive.
8.5 Cookie duration and control
- Lifespan: cookies subject to consent expire no later than 13 months after placement; derived audience data are retained for a maximum of 25 months.
- Browser management: you may delete or block cookies via your browser settings or use private browsing. Blocking necessary cookies significantly degrades the experience (cart, account).
- Total/partial refusal: via Cooky’Chef, you may refuse all non-essential cookies or fine-tune by category. Your choice is respected and can be changed at any time.
8.6 Consequences of refusal
If non-essential cookies are refused, only essential technical functionalities remain active. Some features (statistics, personalisation, social sharing, embedded external content) may be limited or disabled.
Last updated: 13/10/2025
