Privacy Policy

Last updated: 10 August 2026

This privacy policy describes how L’Atelier Bleu Motostore (hereinafter the ‘Seller’) collects, uses and protects the personal data of users and customers of the website www.latelierbleumotostore.com, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended Law No. 78-17 of 6 January 1978 on data protection.

It forms an integral part of the Website’s General Terms and Conditions of Sale and supplements Article 14 thereof.

1. Identity of the data controller

The data controller for personal data collected on the Website is L’Atelier Bleu Motostore, a Simplified Joint-Stock Company with a Sole Shareholder (SASU) with a share capital of 1,000 euros, registered with the Villefranche-Tarare Trade and Companies Register under number 105 159 669.

If you have any questions regarding this policy or the exercise of your rights, you may contact the Seller at the following address: [email protected]

Links to third-party websites

The Website may contain links to third-party websites. These websites have their own terms of use and privacy policies, over which the Seller has no control. The Seller accepts no liability for the content of these third-party websites or their data protection practices. The Customer is advised to consult the privacy policies of these third-party websites before providing them with any personal information. The Seller does not pass on any of the Customer’s personal data to these third-party websites merely because a link to them is present.

2. Data collected

The Seller collects the following categories of data, depending on the Customer’s interactions with the Website:

Identification data: surname, first name, email address, postal address, telephone number
Order-related data: purchase history, products ordered, amounts, payment methods used (without storing full bank details, which are processed directly by payment service providers)
Customer account data: login details, password (stored in encrypted form)
Technical browsing data: IP address, browser type, pages viewed, cookies and trackers (see Article 7 below)
For Business Customers: company name, intra-Community VAT number, business contact details
Data relating to communications with customer service: content of enquiries, complaints and correspondence

3. Purposes and legal bases for processing

Order management and management of the contractual relationship (account creation, payment processing, delivery, after-sales service): legal basis, performance of the sales contract
Compliance with legal and accounting obligations (invoicing, retention of commercial documents): legal basis, legal obligation
Marketing and newsletters, where the Customer has given their consent: legal basis, consent
Improvement of the Website and audience measurement: legal basis, the Seller’s legitimate interest, or consent for non-essential cookies
Fraud prevention and management of unpaid debts: legal basis, the Seller’s legitimate interest
Reminders regarding abandoned shopping baskets, if the Customer is logged into their Account: legal basis, the Seller’s legitimate interest in optimising its services
Management of customer reviews and complaints: legal basis, the Seller’s legitimate interest and performance of the contract

Data marked as mandatory at the time of collection (in particular when creating an Account or confirming an Order) is necessary for the performance of the sales contract. If this data is not provided, the Seller will not be able to process the Customer’s Order.

The Seller does not carry out any fully automated decision-making, including profiling, which produces legal effects or significantly affects you, within the meaning of Article 22 of the GDPR.

4. Recipients of the data

The Customer’s personal data may be disclosed to the following categories of recipients, to the extent necessary for the performance of their duties:

Payment service providers (processing of payments by credit card, PayPal, and instalment payment solutions if enabled on the Website)
Carriers and logistics providers, for the delivery of Orders, including internationally
Website host: My Freelance Rocks! (IONOS servers)
Provider of transactional emails and, where applicable, newsletters
Administrative or judicial authorities, upon request and within the limits provided for by law

The Seller ensures that each of these recipients provides sufficient safeguards for data protection, in particular by entering into a data processing agreement in accordance with Article 28 of the GDPR. The Seller contractually imposes on its data processors and partners the same obligations regarding the protection of personal data as those it imposes on itself, and prohibits them from any further subcontracting without its prior and express consent.

5. Data retention period

Data relating to the Customer Account: for the entire duration of the Account, then for 3 years following the last contact, counted from the date of the last activity
Data relating to Orders: 5 years from the conclusion of the contract, in accordance with the civil limitation period under ordinary law
Accounting data and invoices: 10 years, in accordance with accounting and tax obligations
Bank details (where applicable, excluding the security code): until the end of the transaction, unless the Customer consents to their retention to simplify future purchases
Cookies and trackers: a maximum of 13 months from the date of placement

6. Data transfers outside the European Union

In the context of international sales, or the use of certain service providers (hosting, payment or email marketing solutions), certain data may be transferred to countries outside the European Union.

Where such transfers take place to a country not covered by an adequacy decision from the European Commission, the Seller shall put in place the appropriate safeguards provided for by the GDPR, in particular by entering into standard contractual clauses approved by the European Commission with the relevant recipients.

7. Cookies and trackers

The Website uses cookies and trackers, some of which are necessary for the Website to function (shopping basket, Customer Account, security) and others which require the Customer’s consent (audience measurement, personalisation, advertising).

Strictly necessary cookies: essential for the functioning of the Website (shopping basket, account login, security); not subject to consent but mentioned here for information purposes
Audience measurement and performance cookies: subject to consent, unless they meet the exemption criteria set by the CNIL (data not cross-referenced with other processing operations, no cross-site tracking)
Personalisation and advertising cookies: subject to consent, enabling the content or offers presented to the Customer to be tailored

On their first visit, the Customer is informed of the use of cookies via a banner displaying an ‘Accept’ button and a ‘Refuse’ button at the same level and with the same visibility. Refusing non-essential cookies is just as simple as accepting them, and does not prevent access to the Website. The Customer may at any time amend or withdraw their consent, just as easily as they gave it, via the preferences centre accessible on the Website or via their browser settings.

8. Data subjects’ rights

In accordance with the GDPR, the Customer has the following rights in relation to their personal data:

Right of access: to obtain confirmation that their data is being processed and to obtain a copy of it
Right to rectification: to correct inaccurate or incomplete data
Right to erasure: to request the deletion of their data, within the limits provided for by law (in particular statutory retention obligations)
Right to restriction of processing: to request the temporary suspension of the use of their data
Right to object: to object to processing based on the Seller’s legitimate interests, or at any time to marketing communications
Right to data portability: to receive your data in a structured and commonly used format, or to have it transferred to another data controller
Right to withdraw consent at any time, where processing is based on consent

These rights may be exercised by writing to [email protected], accompanied by proof of identity in the event of reasonable doubt as to the identity of the data subject. The Seller undertakes to respond within a maximum of one month from receipt of the request, which may be extended to two months for complex requests.

9. Data security

The Seller implements appropriate technical and organisational measures to protect the Customer’s personal data against loss, unauthorised access, disclosure or accidental or unlawful destruction, including the encryption of passwords and payment details, and restricted access to data in accordance with the ‘need-to-know’ principle.

10. Complaints to the CNIL

If, after contacting the Seller, the Customer considers that their rights have not been respected, they may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at www.cnil.fr.

11. Amendments to the privacy policy

The Seller reserves the right to amend this privacy policy at any time, in particular to comply with any legal, regulatory, case-law or technical developments. The applicable version is that in force on the date the data is collected, which is available at any time on the Website.