1. Introduction and commitment
ESB - Bois de Chauffage , mindful of individual rights, particularly with regard to automated processing and in a spirit of transparency with its customers, has implemented a policy covering all such processing, the purposes pursued by these, and the means of action available to individuals so that they can best exercise their rights.
Scope
This privacy policy applies to all processing of personal data carried out by ESB - Bois de Chauffage as part of its activities, in particular via its website esbboisdechauffage.com.
2. Data Controller
The data controller for personal data is:
Information from the person in charge
ESB - Firewood
Address: La Sournas, 41800 Saint-Martin-Des-Bois, FRANCE
Email: contact@esbboisdechauffage.com
Phone : +(33) 06 87 62 05 70
SIRET: 887 927 234 00013
Intra-Community VAT number: FR15 887927234
3. Personal data collected
We collect different categories of personal data for the purposes specified below:
| Data category | Examples | Legal basis | Purpose |
|---|---|---|---|
| Identification data | Name, surname, address, email, telephone | Contract execution | Delivery, invoicing, customer support |
| Order data | Purchase history, preferences | Contract execution | Order management, after-sales service |
| Payment details | Banking information (encrypted) | Contract execution | Order payment |
| Navigation data | IP address, cookies, preferences | Consent / Legitimate interest | Audience analysis, website improvement |
4. Purposes of the processing
Your data is processed for the following purposes:
- Order fulfillment: Processing, delivery and invoicing of your purchases
- Customer service: Responding to your requests, technical support
- Legal compliance: Compliance with legal and regulatory obligations
- Marketing and communication: Sending commercial information (with your consent)
- Transaction security: Fraud prevention and payment security
- Service improvement: Statistical analysis to improve our website and services
5. Shelf life
We retain your personal data only for as long as necessary for the purposes for which it was collected:
| Data type | Shelf life | Legal basis |
|---|---|---|
| Active customer data | 3 years after last activity | Legitimate interest |
| Accounting data | 10 years (legal obligation) | Article L123-22 Commercial Code |
| Analytical cookies | 13 months maximum | Consent (Decree No. 2019-536) |
| Prospect data | 3 years after last contact | Consent |
6. Data Recipients
Your data may be transmitted to the following recipients:
List of recipients
- Delivery providers: For the delivery of your orders
- Payment processors: For the secure processing of transactions
- Hosting provider: For hosting and backup
- Google Analytics: For audience analysis (anonymized data)
- Legal authorities: Upon justified legal request
All our service providers are subject to strict confidentiality agreements.
7. Data transfers outside the EU
Your data is primarily stored within the European Union. In the event of a transfer outside the EU, we ensure that:
- The country benefits from an adequacy decision by the European Commission
- Standard EU contractual clauses are being put in place
- Appropriate safeguards are provided in accordance with the GDPR
8. Data Security
We implement technical and organizational measures to protect your data:
Security measures
- SSL/TLS certificate for data encryption
- Secure 3D Secure payments and encryption
- Restricted access to sensitive data (strong authentication)
- Daily encrypted backups
- Staff training in data protection
- Intrusion protection (firewall, antivirus)
- Logging of access to sensitive data
9. Cookies and trackers
Our site uses different types of cookies:
| Cookie type | Purpose | Duration | Legal basis |
|---|---|---|---|
| Essential cookies | Technical operation of the site | Browser session | Legitimate interest |
| Analytical cookies | Google Analytics audience measurement | 13 months maximum | Consent |
| Marketing cookies | Personalized advertising, retargeting | 13 months maximum | Consent |
| Preference cookies | Remembering your choices | 13 months maximum | Consent |
Cookie management
You can manage your cookie preferences at any time via our cookie management page or directly in your browser settings.
10. Your data protection rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data.
How to exercise this right? Contact us by email at contact@esbboisdechauffage.com with a copy of your identity document.
You have the right to obtain the rectification of personal data concerning you that is inaccurate.
How to exercise this right? Log in to your account or contact our customer service.
You have the right to obtain the erasure of personal data concerning you ("right to be forgotten").
Exceptions: This right does not apply when processing is necessary for compliance with a legal obligation.
You have the right to obtain restriction of processing when you contest the accuracy of the data.
You have the right to receive personal data concerning you in a structured, commonly used and machine-readable format.
You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you.
11. How to exercise your rights?
Contact for exercising your rights
To exercise your rights, please contact our data protection officer:
By email: contact@esbboisdechauffage.com
By mail: ESB - Firewood, La Sournas, 41800 Saint-Martin-Des-Bois, FRANCE
Documents required: Copy of your ID for verification
Response time: maximum 1 month in accordance with the GDPR
Free of charge: Exercising your rights is free of charge (except for manifestly unfounded or excessive requests).
12. Complaint to the supervisory authority
If you believe your rights have not been respected after contacting us, you can file a complaint with the CNIL:
National Commission for Information Technology and Freedoms (CNIL)
Address: 3 Place de Fontenoy, TSA 80715 - 75334 PARIS CEDEX 07
Phone : 01 53 73 22 22
Website: www.cnil.fr
Online complaint form: https://www.cnil.fr/fr/plaintes
13. Changes to the Privacy Policy
We reserve the right to modify this policy to comply with legal or technical developments.
Change history
Notification of changes: Changes will be posted on this page with the new update date.
Date of last update: 12/02/2026
History:
- 12/02/2026: Complete update for multilingual compliance
- 25/01/2024: First publication of the policy