Charter for the protection of personal data

In accordance with Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation, GDPR) and French Act no. 78-17 of 6 January 1978 as amended.

Data controller

The data controller is CEILINGO, a limited liability company with share capital of 10,020 euros, whose registered office is at ZA Legrand, 10 rue des Artisans, 31140 Pechbonnieu, France, registered with the Toulouse Trade and Companies Register under number 799 787 288, SIRET 799 787 288 00023, intra-Community VAT number FR 43 799 787 288.

Contact : contact@ceilingo.fr, +33 (0)5 61 35 93 36. Publication director : Olivier DAUGA.

This charter describes the processing of personal data carried out on the website www.ceilingo.fr. It is provided for information, in accordance with Articles 13 and 14 of the GDPR: it does not have to be accepted, and browsing the site does not constitute consent to the processing described below.

Data collected

Depending on how you interact with the website, the following data may be collected:

• Identity and contact details: last name, first name, e-mail address, delivery and billing addresses, telephone number.
• Order data: products ordered, amounts, order history, invoices, customer service correspondence.
• Payment data: entered directly with the payment provider. Ceilingo never has access to your card number and does not store it.
• Connection and browsing data: IP address, browser, operating system, language, pages viewed, time spent, connection logs.
• Withdrawal data: when you use the Withdraw from your contract here form, the details you declare and the time stamp of your declaration.
• Social media data when you use their features from the website.

Mandatory fields are indicated on each form. Without them, the corresponding request cannot be processed.

Purposes, legal bases and retention periods

Each processing operation rests on a specific legal basis, and data is kept only for as long as its purpose requires:

No automated decision-making producing legal effects, and no profiling, is carried out on the website.

Recipients of the data

Your data is processed by authorised Ceilingo staff. It is also passed on, solely as required for their task, to the following providers:

• PayPlug and PayPal: online payment processing.
• Crédit Mutuel: collection of bank transfers.
• Mailchimp: sending the newsletter.
• The carriers chosen for your delivery.
• The website host and technical maintenance providers.

Each is bound by a processing agreement within the meaning of Article 28 of the GDPR. Your data may also be disclosed to administrative or judicial authorities where the law requires it, and transferred to a buyer in the event of a sale of all or part of the business.

Your data is never sold or rented to third parties for marketing purposes.

Transfers outside the European Union

Some providers, in particular those whose infrastructure is located in the United States, may process data outside the European Union. Such transfers are governed by the safeguards set out in Chapter V of the GDPR, in particular the European Commission's standard contractual clauses or an adequacy decision.

Your rights

You have the following rights over data concerning you: access, rectification, erasure, restriction of processing, objection to processing, portability, and withdrawal of your consent at any time where processing is based on it. You may also give directions concerning the fate of your data after your death.

These rights may be exercised by e-mail to contact@ceilingo.fr or by post to CEILINGO, ZA Legrand, 10 rue des Artisans, 31140 Pechbonnieu, France. You will receive a reply within one month, extended to three months for complex requests. Proof of identity may be requested where there is reasonable doubt as to the identity of the applicant.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

Cookies and trackers

The website places cookies and trackers. Cookies strictly necessary for the website to work are placed without consent; all others, in particular audience measurement and social media cookies, are placed only after your agreement, obtained through the banner shown on your first visit. You may change your choice at any time from the cookie management panel.

Details of the trackers used are set out in our cookie policy.

Security

The whole website is served over HTTPS. Ceilingo implements appropriate technical and organisational measures to protect your data against destruction, loss, alteration, unauthorised disclosure or access. Payment data passes exclusively through the payment providers' servers and is never stored on Ceilingo's servers.

Changes to this charter

This charter may be amended to reflect changes in our processing operations or in the applicable rules. The applicable version is the one published on this page on the date you consult it.

Last updated: 31 August 2026.