Privacy policy
This policy explains how Special Marine, a service published by SERANE GROUPE, collects, uses and protects your personal data when you use specialmarine.fr, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act. The French version prevails.
1. Data controller
The data controller is SERANE GROUPE (SAS, SIREN 924 850 548), publisher of the website, whose full details appear in the legal notice. For any question about your data: contact@specialmarine.fr.
2. Data collected
Depending on how you use the website, we may process:
- Account: e-mail address, password (stored hashed, never in clear text), first and last name, telephone number, language, billing and delivery addresses.
- Orders: products ordered, quantities, amounts, invoices, history and shipment tracking.
- Payment: PayPal transaction identifier and payment status. No card data ever passes through or is stored on our servers: it is handled exclusively by our payment provider.
- Technical data: IP address, browser type, connection and security logs, used for security and fraud prevention.
3. Purposes and legal bases
- Creating and managing your account, processing and delivering your orders, after-sales service — performance of the contract.
- Securing the website, preventing fraud, spam and abuse — legitimate interest.
- Issuing and keeping invoices, complying with accounting and tax obligations — legal obligation.
- Sending non-essential communications or setting audience-measurement trackers — consent, where required.
4. Recipients and processors
Your data is accessible to authorised Special Marine staff and to our technical processors, strictly as required to provide the service:
- OVH SAS (France) — website hosting and delivery of transactional e-mails;
- PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) — payment processing, including card payments made through PayPal;
- Boxtal and the carriers it works with — shipping rates, labels and delivery: name, address, telephone number and e-mail are passed to the chosen carrier;
- Cloudflare Turnstile — anti-robot verification of public forms.
Our business management software (Dolibarr) runs on our own server and is not a third party. These providers are bound by confidentiality and security obligations. Your data is never sold.
5. Retention periods
- Customer account: for the duration of the commercial relationship, then three years after the last contact.
- Order data: five years (commercial limitation period).
- Invoices: ten years, under article L. 123-22 of the French Commercial Code.
- Baskets and guest sessions: thirty days.
- Connection and security logs: twelve months.
After these periods, data is deleted or anonymised, save for any legal retention obligation.
6. Your rights
Under the GDPR you have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to give instructions about your data after your death. You may exercise them from the "Privacy" section of your account, or by writing to contact@specialmarine.fr.
You also have the right to lodge a complaint with the French data protection authority, the CNIL — www.cnil.fr.
7. Security
We implement appropriate technical and organisational measures: encrypted connections (HTTPS), password hashing, access controls, logging, encrypted backups and anti-robot protection of forms. As no system is infallible, we cannot guarantee absolute security.
8. Cookies
The use of cookies and trackers is described in our cookie policy.