1. Data controller
SASU OPTINOC, 10 Allée Louis Bréguet, 94310 Orly, France.
Data Protection Officer (DPO): info@optinoc.com
2. Data collected
- First and last name
- Email address
- Phone number
- Delivery and billing address
- Order history
- Browsing data (cookies)
3. Processing purposes
- Order management
- Delivery tracking
- Customer service
- Commercial communication (with consent)
- Site improvement
4. Legal bases
- Contract execution: order processing
- Consent: newsletter and cookies
- Legitimate interest: service improvement and fraud prevention
5. Recipients
- OPTINOC (sales and logistics)
- Payment processor: Stripe
- Carriers: DHL, FedEx
- Host: Railway Inc.
No data is resold to third parties.
6. Transfers outside the EU
- Stripe Inc. (United States) — standard contractual clauses
- Railway Inc. (United States)
- Cloudflare Inc. (United States)
Appropriate safeguards are in place in accordance with GDPR.
7. Retention periods
- Active customers: 5 years after the last order
- Prospects: 3 years after last contact
- Cookies: 13 months maximum
- Invoicing data: 10 years (legal obligation)
8. Your rights
Under GDPR, you have the following rights:
- Right of access
- Right of rectification
- Right of erasure
- Right of portability
- Right of processing restriction
- Right of objection
To exercise your rights: info@optinoc.com. Response time: 1 month.
9. Cookies
- Technical cookies: session, cart
- Analytical cookies: site improvement
Duration: session or 13 months maximum. You can configure your preferences in your browser settings.
10. Complaint
You have the right to file a complaint with the CNIL:
- CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
- www.cnil.fr
Last updated: April 2026
