Data controller
Robin Lintingre, trading as dortokai (auto-entrepreneur)
16 Rue Simone Veil, APT C7, 64700 Hendaye, France
SIRET: 95106552300023
Email: hello@dortokai.eu
Data collected
We collect the following personal data depending on your interaction with our site:
- Orders: first name, last name, email address, delivery address, billing address, phone number, payment details (processed directly by Stripe or PayPal — we do not store card numbers).
- Customer account: email address, order history, address book.
- Newsletter: email address and language preference.
- Contact form: name, email address, message content.
- Navigation: technical data necessary for the site to function (session cookies, language preference).
- Audience measurement: anonymous usage data collected via Simple Analytics — page views, referrer source, and interaction events (e.g. products viewed, items added to cart). No cookies are set and no personally identifiable data is collected.
Purpose and legal basis
Order processing — contractual necessity (Art. 6.1.b GDPR)
Customer account management — contractual necessity
Newsletter — consent (Art. 6.1.a GDPR)
Legal accounting obligations — legal obligation (Art. 6.1.c GDPR)
Responding to contact requests — legitimate interest (Art. 6.1.f GDPR)
Anonymous audience measurement — legitimate interest (Art. 6.1.f GDPR)
Third-party recipients
Your data may be shared with the following service providers, strictly for the purposes described above:
- OVH SAS (France) — web hosting. Privacy policy
- Stripe (USA/EU) — payment processing. Privacy policy
- PayPal (Luxembourg) — payment processing. Privacy policy
- Brevo (Sendinblue) (France) — newsletter and transactional emails. Your email address is stored on Brevo's servers. Privacy policy
- Simple Analytics (Netherlands/EU) — privacy-friendly, cookieless audience measurement. Collects only anonymous usage data; no personal data or IP address is stored. Privacy policy
No data is sold or shared for advertising or marketing purposes.
Data retention
- Orders and billing data: 10 years (French commercial law obligation)
- Customer accounts: 3 years after last activity
- Newsletter subscribers: until unsubscription
- Contact messages: 3 years
- Session cookies: end of browser session or maximum 13 months
Cookies
Our site uses only strictly necessary and functional cookies:
- WooCommerce: cart and session management
- WordPress: authentication (logged-in users only)
- Language: stores your preferred language (FR/EN)
- Payment: Stripe and PayPal set cookies during the checkout process only
We do not use advertising cookies or cross-site tracking. For audience measurement we use Simple Analytics, a privacy-friendly tool that sets no cookies and collects no personal data — so no consent banner is required.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Delete your data ("right to be forgotten")
- Restrict or object to processing
- Portability of your data in a structured format
- Withdraw consent at any time (newsletter: unsubscribe link in every email)
To exercise any of these rights, use our contact form. We will respond within 30 days.
Complaints
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the French data protection authority: CNIL — cnil.fr.
Updates
This policy may be updated to reflect changes in our practices or applicable law. The current version is dated July 2026.