Privacy policy

Effective date:

Data controller
Prosenix, 190 Avenue Thiers, Bâtiment Étoile Part-Dieu, 69006 Lyon, France. For any question about personal data, contact info@prosenix.com.

Data we collect and why
We collect the following data when you place an order, create an account, or contact us:

Identity and contact details: name, email address, delivery address, phone number. Purpose: processing and delivering your order, customer service.

Payment data: card details and PayPal identifier. Purpose: processing payment. Card data is processed by our payment provider and is not stored on our servers.

Order history and correspondence. Purpose: order tracking, returns, and after-sales service.

Browsing data: IP address, pages viewed, visit duration. Purpose: improving the site and preventing fraud.

Legal basis
We process your data on the basis of: performance of the contract of sale, compliance with legal obligations such as invoice retention and fraud prevention, and, for non-essential cookies and marketing communications, your prior consent.

Who receives your data
Your data may be shared with: our carrier for delivery, our payment provider for transactions, our hosting provider for site storage, and, where legally required, administrative or judicial authorities. We do not sell or rent your data to third parties for commercial purposes.

Retention periods
Order and invoice data are kept for 10 years from the end of the relevant financial year, in line with accounting obligations. Marketing prospecting data is kept for 3 years from the last contact. Cookies have a maximum lifespan of 13 months.

Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to, and port your data, and to withdraw consent at any time where processing is based on consent. To exercise these rights, write to info@prosenix.com. We respond within one month. If you believe your rights are not respected, you may lodge a complaint with the CNIL at 

Cookies
The site uses strictly necessary cookies for core functions such as the shopping cart and session management. With your consent, we also use analytics and personalisation cookies. You can change your preferences at any time through the cookie banner on the site. Non-essential cookies are placed only after you give explicit consent.

Data Protection Officer
We have not appointed a Data Protection Officer, as our processing activities do not require one under Article 37 of the GDPR.

Security
We use appropriate technical and organisational measures to protect your data, including SSL/TLS encryption, server access controls, and staff training. If a data breach is likely to result in a high risk to your rights, we will inform you and the CNIL within the required legal timeframes.

International transfers
If we use service providers located outside the European Economic Area, we ensure that transfers are covered by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.