Privacy policy & GDPR
Compliant with the General Data Protection Regulation (EU 2016/679) and the amended French Data Protection Act.
1. Data controller
LA CLÉ RAPIDE SAS · SIRET 380 366 328 00033
2 rue de la Paroisse, 78400 Chatou, France
DPO contact: dpo@laclerapide.fr
2. Data collected
We collect only the data necessary for the manufacture, delivery and tracking of your order:
- Identity (last name, first name, company name for pros)
- Contact details (email, phone, delivery address)
- Vehicle information (plate, VIN, manufacturer key no.)
- Order history and after-sales tickets
- Payment data (processed by our provider Stripe, never stored on our servers)
3. Purposes
Your data is used exclusively to:
- Processing and tracking of your orders
- Communication relating to your customer account (after-sales, confirmation)
- Statistiques d'audience et d'expérience (Plausible Analytics sans cookie ; Google Analytics 4 avec IP anonymisée ; Microsoft Clarity, les trois en opt-in via le cookie banner)
- Commercial communication (only if you have explicitly consented to it)
4. Retention period
- Order history: 10 years (accounting obligation)
- Non-converted prospect data: 3 years
- Workshop logs (programming): 5 years
- Cookies: 13 months maximum (CNIL recommendation)
5. Your rights
You have at any time a right of access, rectification, erasure, portability, restriction and objection. To exercise these rights, contact our DPO at dpo@laclerapide.fr.
You may also lodge a complaint with the CNIL (cnil.fr).
6. Security
All exchanges are encrypted in TLS 1.3. Data is stored on European Odoo servers (Belgium) with daily backups and a business continuity plan.
7. Transfers outside the EU
No transfer of personal data outside the European Union is carried out.