Privacy Policy – Gilsa Paris

1. Introduction

The company Gilsa Paris attaches great importance to protecting the privacy of its customers, partners and visitors.

This policy aims to inform you clearly and transparently about how we collect, use, store and protect your personal data, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the French Data Protection Act.

2. Identity of the data controller

Data controller:
Gilsa Paris
9 rue Belhomme, 75018 Paris France
sales@gilsa.fr

The data controller is the natural or legal person who determines the purposes and means of processing your personal data.

3. Data collected

As part of our activities, we may collect different categories of personal data:

• Identity data: last name, first name, title
• Contact data: email address, postal address, telephone number
• Customer account data: login, password, order history
• Payment data: bank details (via our secure providers Stripe or PayPal)
• Browsing data: IP address, browser type, pages visited, cookies
• Communication data: messages sent via the contact form or customer service
  This data is collected either directly from you or automatically when you browse the site.

4. Purposes of processing

Your data is collected for the following purposes:

• Managing and tracking orders, deliveries and invoicing
• Creating and managing your customer account
• After-sales service and customer relations
• Sending commercial information and newsletters (with your consent)
• Improving the site, measuring audience and personalizing the user experience
• Securing the site and preventing fraud

5. Legal bases for processing

The processing of your data is based on the following legal grounds:

• Performance of a contract (order, account creation, delivery)
• Consent (newsletter subscription, non-essential cookies)
• The legitimate interest of Gilsa Paris (site improvement, statistics)
• Compliance with legal obligations (retention of invoices, anti-fraud measures)

6. Data retention period

7. Data recipients

Your data is only shared with:

• Internal teams at Gilsa Paris (customer service, marketing, logistics)
• Our technical providers and contractual partners acting on our behalf:
  • Web hosting and e-commerce provider (PrestaShop)
  • Payment service providers
  • Carriers
  • Marketing and analytics agencies

All these providers are subject to strict confidentiality and security obligations.

8. Transfer of data outside the European Union

Certain data may be transferred outside the European Union, in particular via tools such as Google Analytics or Meta (Facebook / Instagram).
These transfers are governed by standard contractual clauses approved by the European Commission, guaranteeing a level of protection in line with GDPR requirements.

9. Data security

Gilsa Paris implements appropriate technical and organizational measures to protect your personal data:

• Secure connections (HTTPS / SSL)
• Restricted access for authorized persons only
• Hosting on secure servers located within the European Union
• Encryption of payment data via PCI-DSS certified providers

10. Your rights

In accordance with applicable regulations, you have the following rights:

• Right of access to your personal data
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to the processing of your data
• Right to data portability
• Right to withdraw consent at any time (e.g. newsletter unsubscribe)

To exercise your rights, you can contact us at:
sales@gilsa.fr
Gilsa Paris – Service Données Personnelles, 9 rue Belhomme, 75018 Paris

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

11. Updating this policy

This policy may be updated at any time to reflect legal or technical developments.
Last update: 6 November 2025