1Who is responsible for your data
The data controller is the publisher of GlobalSilentWalks identified in the Legal Notice. Contact for any privacy question or request: globalsilentwalks@gmail.com.
2What we collect
- Technical data when you load a page: IP address, browser, device and requested URL, processed by our host and CDN (Cloudflare) for delivery, security and abuse prevention.
- Messages you send us (contact form or email): name, email address and message content.
- Orders in our shop: name, email, delivery address, phone number if needed by the carrier, order contents. Card details are entered on Stripe’s secure page and never reach our servers.
- Anonymous shop statistics: pages viewed, clicks on products and cart actions, time on page, language, device type, country (derived by Cloudflare) and traffic source, linked to a random session identifier stored in your browser’s session storage. No cookie is used, your IP address is not stored, and Do-Not-Track signals are respected.
- Advertising and audience data through Google AdSense, Monetag, Google Analytics and Umami, as described below.
3Why we use it, and on what legal basis
- Deliver pages and keep the site secure — legitimate interest.
- Process and deliver your orders, handle returns and support — performance of a contract.
- Keep accounting and tax records — legal obligation.
- Answer your messages — legitimate interest / pre-contractual steps.
- Measure audience and improve the shop with anonymous statistics — legitimate interest.
- Personalised advertising and analytics cookies — your consent, which you can withdraw at any time.
5Who processes data on our behalf
- Cloudflare, Inc. — hosting, CDN, security and databases.
- Stripe Payments Europe, Ltd. — payments and fraud prevention; Stripe is an independent controller for its regulatory obligations.
- Google (AdSense, Analytics, Funding Choices) — advertising, audience measurement and consent management.
- Monetag — advertising network that may display banner and full-screen formats.
- Umami — privacy-friendly audience analytics.
- Fulfilment and carrier partners — receive your name, delivery address and, if needed, phone number to produce and deliver your order.
- YouTube (Google) — when you play an embedded video.
Each provider has its own privacy policy. We only share what each one needs to perform its task.
6Transfers outside the EU
Some providers are located in or can access data from the United States. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses, with additional safeguards.
7How long we keep data
- Order and invoice data: up to 10 years (French accounting obligations), then deleted.
- Messages: up to 24 months after the last exchange.
- Anonymous shop statistics: deleted on a rolling basis and never kept beyond 13 months.
- Consent choice: up to 13 months, then asked again.
- Advertising and analytics data held by Google, Monetag and Umami follow their own retention periods.
8Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest, to withdraw consent at any time, and to set directives about your data after death (France). To exercise them, email globalsilentwalks@gmail.com; we answer within one month and may ask you to prove your identity.
If you think your rights are not respected, you may complain to the CNIL (cnil.fr) or to your local data-protection authority.
9Security and children
We use HTTPS everywhere, access controls and minimal data collection. No system is perfectly secure; we will notify you and the authorities of any breach as the law requires.
The site is not directed to children under 15 (or the age set by local law) and we do not knowingly collect their data.
10Changes to this policy
We update this policy when our practices or the law change. The date at the top shows the latest version; significant changes are highlighted on the site.