1. Data controller
Legal name: Jnrpuff
Address : 70 Rue Hoche, 90841 Rennes Brittany
Contact DPO: dpo@jnrpuff.fr
2. Data collected
We collect:
✅ Identification data : Name, first name, email address
✅ Transactional data : Order history, payment methods
✅ Technical data : IP address, cookies (see dedicated section)
✅ Delivery data : Postal address, telephone number
3. Purposes of processing
The data is used for:
• Execution of orders (Article 6-1b GDPR)
• Sending newsletters (with explicit consent – Article 6-1a)
• Technical improvement of the site (legitimate interest – Article 6-1f)
4. Legal bases
Each treatment is based on:
▸ Contract (for purchases)
▸ Consent (for marketing)
▸ Legal obligation (invoicing)
5. Recipients of the data
We share data with:
- Logistics providers (parcel delivery)
- Payment Processors (Stripe/Bank)
- Tax authorities (legal obligation)
No transfer outside the EU
6. Retention period
| Data type | Duration |
|---|---|
| Customer data | 3 years after last activity |
| Transactional data | 10 years (tax obligation) |
| Analytics cookies | 13 months |
7. Your rights
Pursuant to Articles 15 to 22 GDPR:
🔸 Right of access to your data
🔸 Correction inaccurate information
🔸 Deletion (“right to be forgotten”)
🔸 Portability data (CSV/JSON format)
🔸 Opposition to marketing processing
To exercise these rights:
📧 Contact: info@jnrpuff.fr
🗓 Response within 1 month maximum
8. Cookies
We use:
• Essential cookies (shopping cart) – No consent required
• Analytics cookies (Matomo) – Can be disabled via the dashboard
• Third-party cookies (Facebook Pixel) – Active only with your consent
9. Security
Technical measures:
• HTTPS (SSL) encryption
• Secure storage with approved HDS host
• Annual cybersecurity audit
10. Complaint
In the event of a dispute:
⚖️ Competent authority:
CNIL (National Commission for Information Technology and Civil Liberties)
3 Place de Fontenoy, 75007 Paris