Privacy policy

Last updated: June 2026

SAS SIGNS (hereinafter "SIGNS", "we", "our") operates the SIDERA PARIS store via the website sideraparis.com (hereinafter the "Site"), including all related information, content, features, tools, products and services.

SIGNS attaches great importance to the protection of privacy and to the data relating to its customers and prospects, but also to its employees, partners and service providers, and accordingly ensures that it adopts and complies with the principles applicable to the protection of personal data across all of its activities, such as the French Data Protection Act (Loi Informatique et Libertés) No. 78-17 of 6 January 1978 as amended, the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the related standards and recommendations of the French Data Protection Authority (Commission Nationale Informatique et Libertés, or "CNIL").

This Privacy Policy describes, in a clear, simple and comprehensive manner, how we collect and process, in our capacity as Data Controller, the personal data of users of the Site, and the means available to them to control such use and exercise their related rights.

Each user is also invited to read our section on the cookies used on the Site (article 10).

This Privacy Policy is binding on you as of its publication and may be amended or supplemented at any time, in particular in order to comply with any legislative or regulatory changes. Consequently, SIGNS invites you to consult the Privacy Policy before using the Site and on a regular basis thereafter, in order to be aware of any updates.

1. Data Controller

SAS SIGNS, with share capital of 1,000 euros, whose registered office is at 28 rue Galilée, 75016 PARIS, registered with the Paris Trade and Companies Register under number 989 377 726, and whose VAT identification number is FR23 989 377 726.

To find out more about SAS SIGNS and its contact details: consult the legal notice.

2. Personal data collected and processed

We may collect your personal data in the following ways:

  • When you provide it to us directly, in particular when you create an account, place an order, complete a contact form, subscribe to our newsletter, participate in a survey, contact our customer service or communicate with us by any other means;
  • When you browse our Site, certain data being collected automatically by means of cookies or other trackers, subject to your consent where required;
  • When paying for your orders, certain data necessary to carry out the transaction may be collected and processed directly by our payment services provider;
  • Through certain third parties or service providers, where necessary for the provision of our services, in particular our payment, delivery, audience analysis or customer service providers.

Where certain data is necessary for the provision of a service, the mandatory nature of its communication is indicated to you at the time of collection.

We may collect and process the following categories of personal data:

  • Identification and contact data: surname, first name, e-mail address, telephone number, billing address, delivery address;
  • User account data: username, password in secure form, security questions, account preferences and settings;
  • Order and transaction data: order number, date and amount of the transaction, details of the products purchased, billing address, delivery address, payment confirmation, e-mail and telephone number associated with the order;
  • Payment data: certain data necessary for payment, such as the cardholder's name, card number, expiry date and card security code, are processed by our payment services provider. We do not retain bank card data, except where strictly necessary;
  • Data collected via forms: information that you provide in our contact, registration, information request, complaint or any other dedicated forms;
  • Browsing data and technical data: IP address, cookie identifiers, pages viewed, date and time of connection, type of device, browser used, operating system and other information relating to your browsing on the Site;
  • Data relating to communications with us: content of messages, requests, complaints, reviews, responses to satisfaction surveys and, more generally, any information transmitted during your exchanges with our customer service.

3. Purposes for processing your personal data

In the course of using the Site, the user is required to provide certain personal data. If the user does not wish to provide the information requested, they may be unable to access certain sections or features offered on the Site.

Whether the personal data requested is mandatory or optional is specified at the time of collection.

The personal data collected is processed for specified, explicit and legitimate purposes. Depending on the case, your personal data may be used for the following purposes:

  • To ensure the operation, maintenance and improvement of the Site and its features, in particular to analyse the use of the Site, measure its audience, improve its operation, adapt its content and optimise the user experience;
  • To create and administer your account, in particular to enable you to access your personal area and manage your information, preferences and settings;
  • To manage your orders, in particular to process your purchases, confirm your order, arrange delivery of the products or services ordered, manage payment of your orders, secure transactions, manage invoicing and process any refunds;
  • To carry out analyses, statistics and studies, in particular in order to better understand the use of the Site and improve our offers, products, services and business;
  • To carry out marketing and commercial prospecting activities, in particular to send you, where you have consented to it or where applicable regulations so permit, newsletters, promotional offers, information on our products or services, or personalised communications;
  • To personalise content, offers and communications, in particular in order to provide you with information, recommendations or advertisements tailored to your preferences and your use of the Site, subject to your consent where required;
  • To ensure the security of the Site and prevent fraud, in particular to detect, prevent and address security incidents, abusive uses, attempted fraud or unauthorised access;
  • To manage the customer relationship, in particular to respond to your requests, questions, complaints or enquiries addressed to our customer service;
  • To comply with our legal and regulatory obligations, in particular in matters of accounting, taxation, invoicing, retention of supporting documents, handling of requests to exercise rights and responses to competent authorities;
  • To prevent and manage disputes and litigation, in particular to ensure the defence of our rights and interests.

4. Retention period of personal data

We retain your personal data only for the period strictly necessary to achieve the purposes for which it was collected, subject to the legal possibilities for archiving and the obligations to retain certain data (in particular, in the event of litigation or pre-litigation, or to respond to requests from authorised authorities), and/or to anonymise the personal data. The retention period may vary depending on the purpose pursued. SIGNS applies in particular the retention periods set out below (without prejudice to the archiving periods and retention obligations mentioned above):

  • For personal data relating to orders and warranties: personal data is retained for a maximum period of ten (10) years from the placing of the order by the Customer;
  • For personal data relating to exchanges with customer service and personal data used for commercial prospecting purposes, in particular in the context of marketing activities or newsletter subscription: personal data is retained for a maximum period of three (3) years from the last contact initiated by you;
  • For the handling of requests to exercise rights: personal data is retained for the period necessary to process the request and then archived for a period of five (5) years from the expiry of the maximum legal period within which SIGNS must respond to the user.

After these periods, the data is either deleted or anonymised.

5. Recipients of personal data

Your data may only be disclosed to the following recipients or categories of recipients, within the limits of their respective functions and to the extent that such transmission is strictly necessary to fulfil the purposes set out in Article 3:

  • Authorised staff members of SIGNS, or more generally our authorised personnel within our group of companies;
  • Service providers in charge of the services available on the Site (for example IT management, payment processing, data analysis, customer service, cloud storage, order fulfilment and shipping);
  • Commercial and marketing partners, in order to provide you with marketing services and to send you advertisements;
  • The host of our Site: Shopify Inc., whose registered office is located at 150 Elgin Street, 8th Floor, Ottawa, Ontario K2P 1L4, Canada.

Where Shopify acts to provide us with the services necessary for hosting, operating, securing and administering our Site, Shopify acts as a Processor within the meaning of the applicable regulations on the protection of personal data.

We use certain advanced features or enhanced services offered by Shopify. In this context, Shopify may process certain personal data resulting from your interactions with our Site, with Shopify and, where applicable, with other merchants using Shopify's services, in particular to provide, develop, secure, personalise and improve its services. For these specific processing activities, Shopify may act as a separate Data Controller.

In this context, Shopify is responsible for the processing of personal data that it carries out for its own purposes, in particular with regard to the handling of requests to exercise rights relating to such processing. To find out more about how Shopify processes your personal data and the rights available to you, you can consult Shopify's privacy policy and the privacy portal made available by Shopify.

When you visit our Site, open or click on the e-mails we send you, or interact with our services or advertisements, we, or third parties with whom we work, may automatically collect certain information using online tracking technologies.

We may also disclose personal data in order to respond to legal or regulatory requests, court decisions, subpoenas or legal proceedings, if compliance with applicable regulations so requires, as well as in the event that SIGNS transfers all or part of its assets to a third-party company.

6. Security of your personal data

SIGNS takes care to protect and secure your personal data in order to ensure its confidentiality, integrity and availability, and to prevent it from being distorted, damaged, destroyed, lost, disclosed or accessed by unauthorised third parties.

To this end, SIGNS implements appropriate technical and organisational measures designed to ensure that your personal data is kept under appropriate security conditions, for the period necessary to achieve the purposes pursued, in accordance with applicable regulations.

However, although SIGNS takes all reasonable measures to protect your personal data, no electronic transmission or storage technology is entirely infallible. SIGNS cannot therefore guarantee absolute security of data transmitted or stored via the Site.

We therefore recommend that you do not use unsecured channels to send us sensitive or confidential information.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, SIGNS will take the necessary measures in accordance with applicable regulations, in particular by notifying, where appropriate, the competent supervisory authority and/or the data subjects concerned.

7. Websites and hyperlinks

The Site may contain links to websites, platforms or online services operated by third parties.

When you click on these links, you leave our Site. The third-party sites concerned are not operated or controlled by SIGNS. They have their own privacy policies, cookie policies, security measures and terms of use. We therefore invite you to read these documents carefully before providing personal data on such third-party sites.

The presence of a link to a third-party site on our Site does not mean that SIGNS approves or guarantees the content, products, services or practices of that site, unless expressly stated otherwise.

Consequently, SIGNS cannot be held liable for the content, operation, security or privacy practices of these third-party sites, nor for the use that may be made of the information you provide to them.

8. Your rights

In accordance with applicable regulations and within the conditions and limits provided for therein, each user has all or part of the following rights:

  • Right of access, in order to request confirmation as to whether or not data concerning them is being processed and, where it is, access to such data and to certain information about the processing (Art. 15 GDPR);
  • Right of rectification of inaccurate or incomplete data (Art. 16 GDPR);
  • Right of erasure of one's data (in the cases provided for in Art. 17 GDPR);
  • Right to withdraw consent to the processing of one's data (only where the processing is based on consent as its legal basis) (Art. 7 GDPR);
  • Right to restriction of the processing of one's data (in the cases provided for in Art. 18 GDPR);
  • Right to object to the processing of one's data (only where the processing is based on SIGNS's legitimate interest as its legal basis, and subject to the user providing grounds relating to their particular situation) (Art. 21.1 GDPR);
  • Right to object to the processing of one's data for prospecting purposes, including profiling (Art. 21.2 GDPR);
  • Right to portability of the data that the user has themselves provided (only where the processing is based on consent as its legal basis) (Art. 20 GDPR);
  • Right to determine the fate of the user's data after their death and to choose to whom SIGNS should, or should not, communicate their data to a previously designated third party (Art. 85 of the French Data Protection Act (Loi Informatique et Libertés)).

If the user wishes to exercise any of the aforementioned rights, they may contact SIGNS by one of the means provided for below, specifying their identity and the precise subject of their request (proof of identity may be requested in the event of doubt as to the identity of the applicant).

In accordance with applicable legislation, you may designate an authorised representative to request the exercise of your rights on your behalf. Before accepting such a request from an agent, we will require the agent to provide proof of the authorisation you have given them to act on your behalf, and we may ask you to verify your identity directly with us.

We will not penalise you for exercising any of these rights. We may need to verify your identity before we can process your requests, within the limits provided for or authorised by applicable legislation. We will respond to your request as soon as possible, and in any event within one (1) month of receipt of your request. If necessary, this period may be extended by two (2) months, taking into account the complexity and number of requests we receive. In such a case, you will be informed of this extension and the reasons for the delay.

In the event that we are unable to comply with your request, we will inform you of the reasons and you will have the option of lodging a complaint with a supervisory authority and/or bringing a legal action.

In particular, if after contacting SIGNS and despite SIGNS's efforts, you consider that all your rights have not been respected, you may lodge a complaint with the competent supervisory authority. In France, this is the Commission Nationale Informatique et Libertés (the "CNIL"): https://www.cnil.fr/fr/plaintes.

9. Transfers of personal data outside the European Union

Please note that we may transfer, store and process your personal data outside the country in which you reside.

If such transfers are necessary to provide you with our products or services, SIGNS undertakes that the recipient will be located in a country benefiting from an adequacy decision of the European Commission, or that measures will be put in place to ensure that users' personal data transferred to such countries benefits from adequate protection safeguards in accordance with the provisions of the GDPR.

10. Cookies

When browsing the Site, cookies may be placed on your device (computer, mobile, tablet), subject to the choices you have expressed and which you may change at any time.

A cookie is a small text file containing information relating to browsing on a website, the main purpose of which is to improve its use and to enable the delivery of personalised services.

Some of these browsing tracking tools are used only for purposes strictly necessary for the operation of the Site and are therefore exempt from consent, as they are necessary to ensure access to and stable operation of the Site. Others are subject to the user's consent.

These cookies may be session cookies (in which case the cookie will be automatically deleted when the browser is closed) or persistent cookies (in which case the cookie will remain stored on the device until its expiry date).

The cookies used on the Site are managed via the Shopify consent banner, which is GDPR-compliant and accessible at any time from the footer of the Site.

Deleting all the cookies used by the browser, including those used by other websites, may lead to the alteration or loss of certain settings or information.

The configuration of each browser is different. It is the user's responsibility to follow the instructions of their browser publisher (Safari, Chrome, Firefox, Edge, Opera).

For more information on the processing of your personal data through these cookies, please consult the CNIL website.

11. Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of the rights available to you, please send us an e-mail at hello@sideraparis.com or write to us at the following address: 28 rue Galilée, 75016 Paris.

12. Governing law and competent jurisdiction

This Privacy Policy is governed by French law, subject to any mandatory provisions of the law of any other country in which the Customer resides.

In the event of a dispute, and should an amicable settlement not be reached, the competent court shall be that determined in accordance with the applicable rules of procedure.