Who is responsible for your data
Maison Decker, Christine Decker
Which data is collected
[Orders: name, postal and email addresses, phone, the pieces ordered. Card details are handled by the payment provider and never seen by the shop.]
[Selling form: name, contact details, description and photos of the piece.]
[Viewing form: name, contact details, preferred date and message.]
[Purchases from private sellers: identity document details and the record of the purchase, as the law requires.]
Purposes and legal basis
[Handling orders, requests and estimates: article 6(1)(b) GDPR.]
[Accounting, the register of purchases and anti-money-laundering checks: article 6(1)(c) GDPR.]
[Keeping the site secure through server logs: article 6(1)(f) GDPR.]
Who receives the data
[Hosting company, email provider, payment provider, carrier and accountant, with their countries. State whether any data leaves the European Economic Area.]
How long it is kept
[Orders and invoices: as long as accounting law requires. Purchase records: the period set by law. Requests that lead nowhere, and their photos: deleted after 12 months.]
Cookies
[The site sets no cookies until a piece is added to the cart. The cart and checkout then use the cookies they need to work. There are no statistics or advertising cookies.]
Your rights
[Access, rectification, erasure, restriction, objection and portability, and how to use them by email.]
Complaints
[Right to lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.]