Courtesy translation. This English version is provided for information only. In case of discrepancy, the version française (French version) prevails.
In brief
- We only collect the data needed for your order and our exchanges.
- Your card details are handled by Stripe: we never have access to them.
- No audience measurement, no advertising, no tracking cookies.
- Your data is never sold.
Data controller
Harlone Watch, 47 rue Vivienne, 75002 Paris, France — contact@harlone-watch.com.
Data processed, purposes and retention
Your order
Data: name, email address, telephone, delivery address, numbers of the watches ordered, amount and date of payment. You enter them on Stripe’s payment page, and we access them from our Stripe account.
Purposes: processing and delivering your order, keeping you informed of production progress, handling after-sales service, withdrawal and warranties.
Legal basis: performance of the sales contract; our legal accounting obligations.
Retention: for the duration of the business relationship, then 5 years for evidential purposes; accounting records (invoices) are kept for 10 years, in accordance with Article L. 123-22 of the French Commercial Code.
Your messages
Data: your email address and the content of the messages you send to contact@harlone-watch.com.
Purpose: replying to your requests. Legal basis: our legitimate interest in replying to you. Retention: 3 years after the last exchange.
Website security and number reservations
When you click “Order”, we keep a non-reversible fingerprint of your IP address for the duration of the reservation (15 minutes at most), to prevent abuse (one person blocking numbers). It is deleted when the reservation ends. Our host also processes technical logs (including IP addresses) to keep the website secure and running properly.
Legal basis: our legitimate interest in protecting the website and ensuring a fair allocation of the 50 pieces.
Recipients
Your data is accessible only to authorised Harlone staff and to the following providers, solely for the purposes of their service:
- Stripe (Stripe Payments Europe, Limited, Ireland): payment and fraud prevention;
- Cloudflare (Cloudflare, Inc., United States): website hosting;
- Google (Google Ireland Limited): email;
- Colissimo (La Poste): delivery (name, address, telephone);
- for delivery outside the European Union: the customs authorities of the destination country, to which the carrier sends the information required for customs clearance.
Transfers outside the European Union
Some of these providers may process data in the United States. For delivery outside the European Union, your delivery details are necessarily sent to the destination country, as this transfer is necessary to perform your order (Article 49 GDPR). These transfers are covered by the safeguards provided for by the GDPR (the “Data Privacy Framework” adequacy decision or the European Commission’s standard contractual clauses).
Cookies
This website sets no advertising or audience measurement cookies. A single technical cookie is used:
- harlone_resa: remembers your current number reservation, so that it can be released if you return to the order page. Duration: about 15 minutes. Strictly necessary for the service you request, it is exempt from consent.
Stripe’s payment page, to which you are redirected, uses its own cookies, which are necessary for payment security and fraud prevention.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to its processing, as well as the right to set instructions regarding its fate after your death. To exercise these rights: contact@harlone-watch.com. We reply within one month.
You may lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.
Security
The website has no customer database: your order data stays with Stripe. Exchanges are encrypted (HTTPS) and access to our provider accounts is protected by two-factor authentication.