Privacy policy
Version dated 9 October 2026
Preparation version: identification, delivery and mediation information must be completed before opening sales.
1. Controller
ATOUT-NAUTIC — SAS — 30 rue de la Croix Guillaume, 35800 Dinard, France — Capital : 1 000 € — SIRET : 91411894800019 — RCS Saint-Malo — TVA / VAT : FR16914118948 — contact@atoutnautic.com. ATOUT-NAUTIC is the data controller. Contact contact@atoutnautic.com to exercise your rights.
2. Data and purposes
Contact forms collect name, email, subject and message to answer enquiries. Checkout collects identity, address, country, email, optional details, configuration and quantity to prepare orders and documents. Dates, references, terms acceptance and PDF hashes provide traceability. No card numbers are requested.
3. Legal bases
Enquiries and order preparation are pre-contractual steps requested by the individual. Real orders will rely on contract performance and accounting obligations. Security and abuse prevention rely on legitimate interest, subject to your rights. Use of the form does not imply marketing consent.
4. Recipients and hosting
ATOUT-NAUTIC and providers needed to process the order (OVH hosting and email, Stripe payments) process data for their respective roles. Orders and documents are stored in private hosting directories. Payment details are entered directly on Stripe. Data is not sold. Safeguards for any transfers outside the European Economic Area remain to be documented by the operator.
5. Retention
Planned policy: enquiries with no commercial follow-up, up to three years from the last exchange, with earlier deletion when unnecessary. Real accounting documents: ten years where legally required. Order data is retained for the relationship and relevant statutory periods, then archived with restricted access. Demo data must be deleted after testing and before publication. Abuse counters should be purged after twenty-four hours. The operator must implement the deletion procedure.
6. Cookies and security
Only a technical session cookie is used to secure forms, retain the cart during checkout and control PDF access. It is HttpOnly and SameSite=Lax; Secure is enabled with HTTPS. It expires at the end of the browser session. No advertising trackers, third-party analytics or external fonts are included. Archives and email secrets are outside the public directory. Abuse prevention uses a hash of the IP address rather than storing its plain value in counters.
7. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability and exercise objection rights. Write to contact@atoutnautic.com; requests are normally handled within one month, subject to lawful justified extensions. Proportionate identity verification may be requested where necessary. You may complain to the CNIL (cnil.fr) or your competent supervisory authority.
8. External links
The existing monitoring portal and press material are separate destinations. Data processing within the monitoring portal must be documented separately by its operator; this website does not reproduce that service.
Sources : Service Public · Vente à distance · Service Public · Garanties · CNIL · Conservation