Privacy policy

Nordheim, with its registered office at 2 Place Voltaire, Ivry-sur-Seine 94200, Île-de-France, France, is the data controller responsible for processing your personal data. In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and applicable French data protection law, we process your data transparently, with integrity and security. For any questions: support@nordheim.shop or +33 7 45 99 22 25.

1. Data We Collect

• Identification data: name, surname, postal address, email address, phone number.
• Order data: products purchased, amounts, order history.
• Browsing data: IP address, browser type, pages visited (via cookies — see our Cookie Policy).
• Payment data: processed exclusively by our PCI-DSS certified payment providers. We never store banking data on our servers.

2. Purposes and Legal Bases

• Contract performance: order processing, shipping, invoicing, customer support.
• Legitimate interest: fraud prevention, improvement of our website and services.
• Legal obligation: retention of accounting and tax records as required by French law.
• Consent: sending marketing communications (you may unsubscribe at any time).

3. Data Retention

• Order data: 10 years (legal accounting obligation).
• Active customer data: for the duration of the commercial relationship + 3 years.
• Marketing data: until consent is withdrawn.
• Browsing data: maximum 13 months.

4. Data Recipients

Your data may be shared with third-party service providers necessary to fulfil our services (carriers, payment providers, technical hosting). These third parties are bound by contractual confidentiality obligations. We never sell your data to third parties for commercial purposes.

5. Your Rights (GDPR)

• Right of access: obtain a copy of your personal data.
• Right of rectification: correct inaccurate data.
• Right to erasure: request deletion of your data.
• Right to object: object to processing for marketing purposes.
• Right to data portability: receive your data in a readable format.
• Right to restriction: restrict processing in certain cases.

To exercise your rights, contact us at support@nordheim.shop. You also have the right to lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.

6. Security

Nordheim implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure: SSL/TLS encryption, restricted data access, and system monitoring.

Last updated: April 2025