1. Data controller
alelbiben.aiturfers.fr is published by AlelBiben — Atelier de métallerie, Atelier — 12 rue des Ponts, 49400 Saumur, SIRET 000 000 000 00000. The workshop is the controller of personal data collected on the site and in its business relationships.
For any question about your data, write to contact@alelbiben.fr or to the workshop address. We reply within one month at most.
2. Data collected
We only collect data needed for the service requested. Depending on the form used, this may include:
- identity and contact details: first name, last name, email address, phone number;
- delivery, fitting or survey address, and approximate distance from the workshop for an appointment;
- content of your request: contact subject and message, order notes, project details;
- details of configured pieces, quantities and prices linked to an order request;
- date, time slot and reference of a survey appointment;
- technical data strictly needed for the site to work (session, local cart, error logs).
3. Purposes and legal bases
Data is used to answer your messages, prepare and follow up a quote or order, organise an appointment, handle fabrication, delivery or fitting, manage the customer relationship and, more rarely, send you news when you have consented.
Legal bases: performance of a contract or pre-contractual steps (quote, order, appointment); the workshop’s legitimate interest in the customer relationship, site security and abuse prevention; consent for the newsletter and, where applicable, certain audience measurement; legal obligations for accounting and invoicing.
No fully automated decision producing legal effects is made about you. The configurator computes an indicative price: you decide whether to order, and the workshop validates every request.
4. Recipients and processors
Data is accessible only to workshop staff who need it to handle your request. It may be shared with providers acting on the workshop’s instructions: hosting, transactional email, carrier or fitter for a delivery, accountant for invoicing.
These providers are bound by confidentiality and security commitments. No data is sold, rented or transferred for advertising purposes.
5. Transfers outside the European Union
Hosting and main technical services are chosen within the European Union. If a provider requires a transfer outside the EU, it relies on a GDPR-recognised mechanism (standard contractual clauses, adequacy decision) and you are informed in this policy.
6. Retention periods
Contact messages: three years from the last exchange, unless a contract is ongoing. Unconfirmed appointment requests: twelve months. Quote requests: three years. Orders, invoices and accounting records: ten years, as required by law.
Customer account: until deletion, then three years after the last contact. Newsletter: until consent is withdrawn, then deleted. Technical logs: a few weeks, as needed for diagnosis and security.
7. Cookies and trackers
The site runs without advertising and without advertising trackers. Three uses remain: local storage to keep your cart between visits, a session cookie required for the customer account when created, and, where applicable, anonymised audience measurement without individual profiling.
Strictly necessary cookies do not require consent. If non-exempt audience measurement is added, a consent banner will allow you to accept or refuse, and to withdraw at any time.
You can configure your browser to block or delete cookies. The cart and account login may then stop working, while ordering by email or phone remains possible.
8. Your rights
Under the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection, portability of data you provided, and withdrawal of consent at any time for consent-based processing.
You may also set directives on what happens to your data after your death. To exercise these rights, write to the workshop specifying your request and, where necessary, attaching proof of identity. We reply within one month, extendable by two months for complex requests.
Some data cannot be erased before legal retention periods expire, in particular invoices. In that case, access is restricted and processing limited to the legal obligation.
9. Security
The workshop implements proportionate technical and organisational measures: restricted access to data, encrypted exchanges with the site, passwords stored in derived and irreversible form, regular backups, updated components.
In the event of a data breach likely to create a high risk to your rights, you are informed as soon as possible and the French supervisory authority (CNIL) is notified where required.
10. Complaints
If you believe your rights are not respected, you can complain to the workshop and, failing a satisfactory solution, to the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
11. Changes
This policy may be updated to reflect technical, legal or service changes. The applicable version is the one published on the site. Last revised: 11 November 2026. For any question: contact@alelbiben.fr.