Your data
Privacy policy
An online shop needs some information to work: your address so we can ship, your email so we can reply. Here is exactly what we collect, why, for how long, and what you are entitled to ask of us.
Updated on 7 October 2026. Data controller: SKEUDVA, SASU.
Our commitments
The essentials, in plain English
- Nothing is soldYour data is not sold, rented or exchanged. It is used to process your order and to reply to you, nothing more.
- Only what is necessaryWe only ask for what is needed to ship a parcel and issue an invoice. No advertising profiling on our part.
- Never your bank detailsPayment is handled by a specialist provider: we neither see nor store your card number.
- You stay in controlAccess, correction, deletion: an email is enough, and we reply within one month at most.
- Hosted in FranceThe site and its database are hosted by o2switch, in France.
- One address, a real personFor any question about your data: contact@analoggwerz.com.
The details
What we process, and why
Each block describes a specific use: the data concerned, what legally allows us to process it, and the period after which it is deleted.
Processing and delivering your orders
Without this information, we cannot prepare a parcel, ship it or issue the corresponding invoice.
- Data
- First and last name, delivery and billing addresses, email, phone number, order details and amount.
- Legal basis
- Performance of the contract of sale (Art. 6(1)(b) GDPR).
- Retention period
- For as long as processing takes, then 10 years for accounting records and invoices, as required by law.
Taking payment
Payment is processed by WooPayments, which relies on Stripe (card, Apple Pay, Google Pay, Klarna). Bank details go directly through it: they are neither seen nor stored by Analog Gwerz. We only keep the payment confirmation. To detect fraud, Stripe, Google Pay and hCaptcha place security trackers on the pages where payment is offered.
- Data
- Amount, date, transaction status, last four digits of the card where applicable.
- Legal basis
- Performance of the contract and legal obligation (accounting, fraud prevention).
- Retention period
- 10 years for accounting obligations. The payment data itself is kept by the provider under its own policy.
Managing your customer account
Creating an account is optional: it lets you find your orders and saves you re-entering your addresses.
- Data
- Email, password (encrypted, unreadable to us), saved addresses, order history.
- Legal basis
- Performance of the contract, at your request.
- Retention period
- Until you ask for deletion, or after 3 years without any login.
Replying to your messages
Pre-purchase questions, order tracking, after-sales service: we keep these exchanges for as long as they may be usefully referred to.
- Data
- Email (or the ID of the social network used), message content, order reference if any.
- Legal basis
- Legitimate interest in replying and in following up the customer relationship.
- Retention period
- 3 years from the last exchange.
Sending you the newsletter
Only if you have asked for it, from the home page, the footer or the “Every item is one of a kind” box. It announces new arrivals, and your first sign-up gives you a 5% discount code. It is sent through MailerLite, and every message includes an unsubscribe link that works immediately.
- Data
- Email address, sign-up date, open and click statistics.
- Legal basis
- Your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).
- Retention period
- Until you unsubscribe, and at most 3 years without any interaction.
Letting you know when an item comes back
On a sold product page, “Let me know if you find another one” saves your address and the model requested, so we can write to you if a similar item arrives at the workshop.
- Data
- Email address, model and link of the requested item, date of the request.
- Legal basis
- Your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).
- Retention period
- Until the alert is sent, or until you ask for it to be deleted.
Reviewing a trade-in proposal
The trade-in form collects a description of your gear and up to six photos, so we can make you an offer or give you a straight answer. The photos are stored on the site’s server, in France. The workshop sees them in the email that notifies it of your proposal.
- Data
- Name, email, phone (optional), description, asking price, photos sent.
- Legal basis
- Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
- Retention period
- 3 years from the last exchange, as with messages.
Measuring audience and advertising
The site uses tags from Google (Analytics and Ads), statistics from WordPress.com (Jetpack), the tag from Pinterest and visit tracking from MailerLite to understand where visitors come from and measure how well campaigns perform. None of them loads until you agree in the banner. This is explained in detail in our cookie policy, which also explains how to refuse these trackers.
- Data
- Cookie identifier, pages viewed, referral source, technical browser data, truncated IP address.
- Legal basis
- Your consent, for trackers that are not needed for the site to work.
- Retention period
- 13 months maximum for the cookies concerned, 25 months maximum for the statistics derived from them.
Running and securing the site
Some technical data is essential: it lets the basket work, keeps the site fast and allows intrusion attempts to be blocked.
- Data
- IP address, server connection logs, technical session and basket cookies.
- Legal basis
- Legitimate interest in keeping the site secure and working properly.
- Retention period
- 12 months for connection logs, and the length of the session for technical cookies.
Who is responsible for your data
The data controller is the company SKEUDVA, a single-shareholder simplified joint-stock company (SASU) with share capital of €10,000, registered with the Saint-Brieuc Trade and Companies Register (RCS) under number 108 540 881, whose registered office is at 7 La Ville ès Brets, 22150 Plouguenast-Langast, and which runs the Analog Gwerz shop.
For any question or request about your data: contact@analoggwerz.com. Given its size and activity, the company is not required to appoint a data protection officer: your requests are handled directly by its president.
Who receives your data
Your data is never sold, rented or transferred. It is only passed on to the service providers strictly necessary for running the shop, each within the limits of its task:
- o2switch : hosting of the site and its database, in France.
- WooPayments : secure processing of card payments (payment solution built into WooCommerce, published by Automattic and running on Stripe’s infrastructure).
- Boxtal, the shipping broker our parcels go through: it receives the information needed for delivery (name, address and, depending on the shipping method, phone or email) and passes it on to the carrier chosen for your parcel, according to the offer selected at the time of shipping.
- MailerLite : sending the newsletter, to subscribers only.
- Google : audience measurement and advertising campaigns, through the trackers described in the cookie policy, and Google Pay for payments that use it.
- Automattic (WordPress.com): Jetpack and WooCommerce visit statistics, once you have agreed.
- Pinterest : measuring visits and purchases coming from Pinterest, once you have agreed.
- hCaptcha (Intuition Machines): anti-fraud check at payment.
These providers act as processors: they are contractually bound to use your data only for the service entrusted to them.
Transfers outside the European Union
The site is hosted in France, and shipping goes through Boxtal, a French company. However, Google, Pinterest, hCaptcha and WooPayments (the latter published by the American company Automattic, like Jetpack statistics, and running on Stripe) may process some data outside the European Union, particularly in the United States. MailerLite is established in the European Union (Lithuania) but may use providers located outside the EU.
These transfers are covered by the safeguards provided for by the GDPR: the European Commission’s standard contractual clauses and, for the US providers concerned, certification under the Data Privacy Framework.
Your rights
The GDPR gives you rights that you can exercise at any time, free of charge, by writing to contact@analoggwerz.com :
- Access : obtain a copy of the data we hold about you.
- Rectification : correct inaccurate or incomplete information.
- Erasure : ask for your data to be deleted, except data the law requires us to keep (invoices, in particular).
- Restriction : freeze the use of your data while something is being checked.
- Objection : object to processing based on our legitimate interest, and unconditionally to any direct marketing.
- Portability : get your data back in a reusable format.
- Withdrawal of consent : at any time, without affecting what was done before.
- Post-mortem instructions : decide what happens to your data after your death.
We reply within one month. Proof of identity may be requested if there is reasonable doubt about who made the request.
If you are not satisfied with a reply, you can refer the matter to the CNIL : 3 place de Fontenoy, TSA 80715, 75334 Paris cedex 07 (www.cnil.fr). Naturally, we would rather sort the problem out directly: write to us first.
Security
The whole site is served over HTTPS : exchanges between your browser and the server are encrypted. Access to the administration area is restricted, customer account passwords are stored in encrypted, non-reversible form, and the site and its plugins are kept up to date.
Since no system is infallible, we undertake, in the event of a data breach likely to result in a high risk to you, to inform you and the CNIL under the conditions laid down by the GDPR.
Published reviews and comments
Reviews and comments shown on the site appear under the pseudonym or first name chosen by their author : any email address provided is never published. The texts are neither rewritten nor corrected.
If you wrote a review and would like it removed, or published in a more anonymous form, write to us at contact@analoggwerz.com: it will be done, no questions asked.
Automated decisions and profiling
No decision producing legal effects concerning you is made by automated means. We do not profile our customers.
Minors
The shop is intended for adults or for people who have the permission of their legal representative. We do not knowingly collect data about children under 15. If you notice otherwise, let us know and the data will be deleted.
Changes to this policy
This policy may change, for example if we switch tool or provider. The date of the last update is shown at the top of the page. If a substantial change affects your rights, we will let you know by appropriate means.