Last update: February 6, 2025

​

This privacy policy describes how Imaginarium, a micro-enterprise registered under number 89355212500013, with its registered office located at 42 rue Jules Sandeau, Aubusson 23200, collects, uses, and protects the personal data of Customers and visitors to its website https://www.imaginarium-bazar.shop/.

By using Imaginarium’s services, you agree to this privacy policy and consent to the collection and use of your personal data in accordance with the applicable legal provisions, including the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act (Law No. 78-17 of January 6, 1978, as amended).

​

1. DATA CONTROLLER

The data controller is:

Name: Imaginarium – SCHERER Hélène
Address: 42 rue Jules Sandeau, 23200 Aubusson
Email: schererhelene@imaginarium-bazar.shop
Phone: +33 7 45 13 37 77

If you have any questions regarding this policy or the exercise of your rights concerning your personal data, you can contact us using the details above.

​

2. PERSONAL DATA COLLECTED

As part of its activities, Imaginarium collects several types of personal data, including:

​

2.1. Data provided directly by the Customer
When placing an order or contacting us, the Customer provides certain information, including:

• Identity: name, first name, postal address, email address, phone number.

• Order details: purchased items, requested customizations, order history.

• Payment information: amount paid, payment method (check, bank transfer, credit card via a secure platform).

Online payments are processed by secure payment providers (Stripe).
Imaginarium never has access to the Customer’s full banking information.
These transactions are encrypted and secured via SSL/TLS protocol.

​

2.2. Data collected automatically
While browsing the site https://www.imaginarium-bazar.shop/, certain technical data are collected:

• IP address and approximate location,

• Cookies and connection data (see section 6 on cookies),

• Interaction history with the site (pages visited, clicks, browsing duration).​

​

2.3. Data collected via social networks
If the Customer interacts with Imaginarium via social networks (Facebook, Instagram, Etsy, etc.), certain personal data may be collected depending on the Customer’s account settings on these platforms.

 

3. PURPOSES OF DATA PROCESSING

The personal data collected is used solely to:

• Process and fulfill orders (manufacturing, customization, delivery).

• Manage customer relations (order tracking, after-sales service, support).

• Communicate with the Customer (order confirmation, invoicing, information on delivery times).

• Send commercial offers and newsletters (with the Customer’s consent).

• Improve user experience on the site (navigation analysis, preferences).

• Comply with legal and fiscal obligations (invoice retention and accounting).

​

4. LEGAL BASIS FOR DATA PROCESSING

Data processing is based on the following legal grounds:

• Performance of the contract: processing orders and managing customer relations.

• Legal obligation: compliance with tax and accounting obligations.

• Consent: sending newsletters and marketing communications.

• Legitimate interest: improving the site and offered services.

The Customer can withdraw consent at any time for commercial communications by clicking "Unsubscribe" in emails or by contacting Imaginarium.

​

5. DATA RECIPIENTS

Collected data is processed only by Imaginarium and is never sold to third parties.
However, it may be shared with:

• Service providers and subcontractors (carriers, website hosting, payment providers).

• Legal authorities, if required by law (e.g., tax or judicial request).

All providers are required to maintain data confidentiality and security.
Some data may be transferred outside the European Union, notably if the artisan uses services based in the United States (hosting, online payments, communication tools).
In this case, appropriate protective measures are implemented, including:

• The provider’s adherence to the Privacy Shield (if it is a US company).

• Standard contractual clauses approved by the European Commission.

• Data encryption and GDPR compliance.

​

6. COOKIES AND TRACKERS

The site https://www.imaginarium-bazar.shop/ uses cookies and trackers to:

• Ensure proper site functionality,

• Improve navigation and user experience,

• Analyze site traffic and measure audience,

• Offer personalized content.

​

6.1. Types of cookies used

• Essential cookies: necessary for site operation (e.g., shopping cart).

• Analytical cookies: for navigation analysis (Google Analytics, etc.).

• Marketing cookies: to offer targeted ads on social networks and search engines.

​

6.2. Managing cookies
The Customer can accept or refuse cookies via the consent banner displayed during the first visit.
They can also modify preferences through browser settings.

​

7. DATA RETENTION PERIOD

Personal data is retained for a limited time:

• Order data: 5 years after the last transaction (legal requirement).

• Invoices and accounting data: 10 years (tax obligation).

• Marketing data: 2 years after last contact with the Customer.

• Cookies: between 6 and 13 months depending on their nature.

After these periods, data is deleted or anonymized.

​

8. DATA SECURITY

Imaginarium implements technical and organizational security measures to protect personal data against loss, unauthorized access, and disclosure.
Bank transactions are secured via SSL/TLS protocol, and customer data is stored on protected servers.

In the event of a personal data breach likely to pose a high risk to users’ rights and freedoms, Imaginarium commits to:

• Notify the CNIL within 72 hours, according to Article 33 of the GDPR.

• Inform the affected individuals by appropriate means (email, letter).

• Implement immediate corrective measures to limit the breach’s impact.

​

9. CUSTOMER RIGHTS REGARDING THEIR DATA

In accordance with the GDPR and the French Data Protection Act, the Customer has the following rights:

• Right of access: obtain a copy of the personal data held.

• Right to rectification: correct inaccurate or incomplete information.

• Right to erasure: request deletion of data, subject to legal obligations.

• Right to object: refuse data use for marketing purposes.

• Right to portability: retrieve data in a readable and structured format.

The Customer can exercise these rights by contacting Imaginarium by email at schererhelene@imaginarium-bazar.shop or by mail at: 42 rue Jules Sandeau, 23200 Aubusson.

In case of dispute, the Customer can contact the CNIL (French Data Protection Authority) at www.cnil.fr.