Last updated: 06/08/2026
1. Data controller
The controller of personal data processing is:
- Enzino
- 4 rue Emile Zola, 56600 Lanester, FR
- SIRET: 50050901300057
- Contact: contact@enzinoai.com
2. Data collected
When using our site, we may collect the following data:
- Order data: first name, last name, email, shipping address, phone (optional)
- Account data (if you sign up): email, hashed password, first name, last name, address
- Payment data: handled exclusively by Stripe — we never store any banking data
- Browsing data: IP address, browser type, pages visited (via server logs)
- Newsletter data (if you opt in): email address
3. Purposes of processing
Your data is collected for the following purposes:
- Processing and delivering your order
- Managing your customer account
- Sending transactional emails (confirmation, shipping)
- Accounting and legal obligations (invoice retention for 10 years)
- Sending the newsletter (only with your explicit consent, unsubscribe possible anytime)
- Customer service and support
4. Legal bases
- Contract performance: order processing
- Legal obligation: invoice retention (10 years, French Commercial Code)
- Consent: newsletter subscription
- Legitimate interest: site security, fraud prevention
5. Data recipients
Your data may be shared with the following processors, strictly necessary for service execution:
- Stripe (secure payment) — Stripe Privacy
- Gelato (printing and shipping) — Gelato Privacy
- Site hosting provider: Ionos
No data is resold to third parties for commercial purposes.
6. Retention periods
- Order data: 10 years (accounting requirement)
- Customer account data: duration of subscription + 3 years after last login
- Newsletter data: until unsubscription
- Server logs: 12 months maximum
7. Your rights
In accordance with GDPR (EU Regulation 2016/679) and French Data Protection Act, you have the following rights:
- Right of access: obtain a copy of your data
- Right of rectification: correct inaccurate data
- Right to erasure ("right to be forgotten"): request deletion of your data
- Right to restriction of processing
- Right to portability: retrieve your data in a structured format
- Right to object: refuse certain processing (especially marketing)
- Right to withdraw consent at any time (newsletter in particular)
To exercise these rights, contact us at contact@enzinoai.com. We will respond within one month.
In case of disagreement, you may file a complaint with the French CNIL (Data Protection Authority): cnil.fr/en/plaintes, or your local DPA in the EU.
8. Cookies
Our site uses only strictly necessary cookies:
- Session cookie (PHPSESSID): maintains your cart and login session
- Currency preference cookie: remembers your EUR/USD choice
- Favorites cookie: stored client-side (localStorage), lets you keep track of your favorites
No advertising tracking or third-party analytics cookies are used at this time. If this changes, your explicit consent will be required before any deposit.
9. Security
We implement appropriate security measures (HTTPS, bcrypt-hashed passwords, PCI-DSS Stripe payment, protected admin access) to protect your data against unauthorized access.
10. Changes
This policy may be modified. The last update date is indicated at the top of the page. Substantial changes will be communicated by email to customers with an account.