Last updated on 20/07/2026
Preamble
This Privacy Policy describes how PECHAVY ENERGIES ALTERNATIVES, operating the brand MAISON PECHAVY (hereinafter "MAISON PECHAVY", "we", "us", or "our"), collects, uses, stores, and protects the personal data of users (hereinafter "you" or "the User") of its website accessible at www.maisonpechavy.fr (hereinafter "the Website").
MAISON PECHAVY is committed to processing your personal data in compliance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter "GDPR") and the French Data Protection Act No. 78-17 of 6 January 1978, as amended.
By using the Website or placing an order, you acknowledge that you have read this Policy and accept the processing of your personal data under the conditions described below.
Article 1 — Data Controller
The data controller for the personal data collected on the Website is:
PECHAVY ENERGIES ALTERNATIVES, a simplified joint-stock company (SAS) with a capital of €150,000, whose registered office is located at 612 Avenue du Bruilhois, Le Treil, 47520 LE PASSAGE, France, registered under SIRET number 750 580 565 00018, RCS Agen 750 580 565, VAT number FR03750580565. Operated brand: MAISON PECHAVY.
Represented by its Publication Director: Carine Pechavy, Managing Director.
Email: contact@maisonpechavy.fr - Telephone: +33 (0)5 53 47 00 25.
For any questions regarding the processing of your personal data or to exercise your rights, you can contact us:
By email: contact@maisonpechavy.fr (Subject: "Personal Data")
By post: MAISON PECHAVY — 612 Avenue du Bruilhois, Le Treil, 47520 LE PASSAGE, France
Article 2 — Data Collected
We collect the following categories of data, depending on your interactions with our Website:
2.1 Data you provide directly to us
Identity data: title, first name, last name, date of birth (if applicable)
Contact details: postal address (delivery and billing), email address, telephone number
Customer account data: username, encrypted password, preferences
Order data: ordered products, amounts, order history, payment methods (banking details are not stored by us, see Article 4)
Professional data (B2B clients): company name, SIRET number, intra-community VAT number, contact person's job title
Communication data: messages exchanged with our customer service, reviews, and comments
2.2 Data collected automatically
Browsing data: IP address, browser type and version, pages viewed, visit duration, traffic source
Technical data: device type, operating system, screen resolution, language
Advertising data: advertising identifiers, interactions with our advertisements on Meta platforms (Facebook, Instagram) and other networks
Cookies and trackers: see Article 7 for details
2.3 Data collected from third parties
We may receive data about you from our advertising partners (Meta, Google) in an aggregated or hashed format, as part of measuring the performance of our marketing campaigns.
Article 3 — Purposes and Legal Bases of Processing
Your data is processed for the following purposes, based on the specified legal grounds:
3.1 Order Management and Customer Relations
Purpose: processing, shipping, and tracking your orders; managing after-sales service; processing returns and refunds; managing your customer account
Legal basis: performance of the sales contract concluded with you
Retention period: duration of the commercial relationship + 5 years (commercial statutory limitation period); 10 years for accounting and tax documents (legal obligation)
3.2 Commercial Prospecting and Marketing
Purpose: sending newsletters, promotional offers, and information about our new products
Legal basis: consent (for prospects) or legitimate interest (for existing customers, regarding similar products)
Retention period: 3 years from the last contact or withdrawal of consent
3.3 Targeted Advertising on Meta Platforms and Other Networks
Purpose: delivering personalised and relevant advertisements on Facebook, Instagram, and other platforms; measuring campaign performance; creating lookalike audiences; advanced conversion matching
Legal basis: consent (via the cookie banner)
Transmitted data: email address, phone number, first name, last name, city, postcode, country, date of birth, external ID — all hashed using SHA-256 prior to transmission
Retention period: maximum of 13 months for advertising cookies, in accordance with CNIL recommendations
3.4 Website Improvement and Statistics
Purpose: analysing website traffic, improving user experience, detecting malfunctions
Legal basis: legitimate interest or consent, depending on the tools used
Retention period: maximum of 25 months for audience measurement data
3.5 Compliance with Legal Obligations
Purpose: keeping invoices, complying with accounting, tax, and customs obligations; fraud prevention
Legal basis: legal obligation
Retention period: 10 years (accounting documents); variable duration depending on the nature of the obligation
Article 4 — Data Recipients
Your personal data may be communicated to the following categories of recipients, strictly to the extent necessary for the processing purposes:
4.1 Internal Services of MAISON PECHAVY
Authorised personnel of PECHAVY ENERGIES ALTERNATIVES (sales, customer service, logistics, accounting, management) access your data within the limits of their assignments.
4.2 Technical Providers and Subcontractors
Website Host: 772424.com — hosting e-commerce website data
E-commerce Solution: PrestaShop — e-commerce platform publisher
Payment Platforms: PayPal, Stripe, Apple Pay, Up 2 Pay — secure transaction processing; we do not store full banking details
Carriers and Logistics Providers: Colissimo, Chronopost, UPS, Mondial Relay — delivery of your orders
Accounting and Management Solution: Sage — accounting and commercial management
Emailing Solution: Mailchimp (Intuit Inc.) — sending newsletters and marketing communications
4.3 Advertising Partners
Meta Platforms Ireland Limited: delivering advertisements on Facebook and Instagram, measuring performance, and creating audiences via the Meta Pixel and Conversions API (CAPI)
Google Ireland Limited: audience analysis tools (Google Analytics) and advertising (Google Ads), subject to your consent
4.4 Authorities and Authorised Third Parties
Your data may be disclosed to administrative or judicial authorities when required by law (tax services, law enforcement, customs authorities for international deliveries).
Article 5 — Data Transfers Outside the European Union
When using certain service providers, particularly our advertising partners Meta and Google, your personal data may be transferred to countries located outside the European Union, notably the United States.
These transfers are governed by appropriate safeguards provided under the GDPR:
Adequacy decisions by the European Commission (specifically the EU-US Data Privacy Framework for transfers to the United States)
Standard Contractual Clauses (SCCs) approved by the European Commission
Supplementary technical and organisational measures ensuring a level of protection equivalent to that required within the European Union
You can obtain a copy of these safeguards by contacting us at contact@maisonpechavy.fr.
Article 6 — Data Security
MAISON PECHAVY implements appropriate technical and organisational measures to guarantee the security and confidentiality of your personal data, including:
Encryption of communications via the HTTPS protocol (SSL certificate)
Encryption of passwords using a secure hashing algorithm
Strict access control to data by authorised personnel
Regular and secure backups
Staff awareness and training on data protection
Selection of service providers who guarantee a level of security compliant with the GDPR
In the event of a data breach likely to result in a high risk to your rights and freedoms, MAISON PECHAVY undertakes to inform you as soon as possible, in accordance with Article 34 of the GDPR.
Article 7 — Cookies and Trackers
The Website uses cookies and similar technologies to improve your browsing experience, measure audience, and offer tailored advertisements.
7.1 Categories of cookies used
Strictly necessary cookies: essential for the functioning of the Website (shopping cart, login, security). They do not require your consent.
Audience measurement cookies: allow us to analyse Website traffic and improve our services. Consent required.
Advertising cookies: allow us to offer you personalised advertisements on third-party platforms (Meta, Google). These include the Meta Pixel and trackers for automatic advanced matching. Consent required.
Social media cookies: activated when you interact with embedded content (shares, likes). Consent required.
7.2 Managing your consent
During your first visit to the Website, a consent banner allows you to accept, refuse, or customise your cookie preferences.
You can change your choices at any time by clicking the "Manage Cookies" link located at the bottom of each page of the Website.
Refusing non-essential cookies does not prevent you from browsing the Website but may alter certain features.
7.3 Cookie retention period
The lifespan of cookies is limited to a maximum of 13 months, in accordance with CNIL recommendations. Beyond this period, your consent will be requested again.
Article 8 — Your Rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:
Right of access: obtain confirmation that your data is being processed, as well as a copy of that data
Right to rectification: have inaccurate or incomplete data corrected
Right to erasure ("right to be forgotten"): obtain the deletion of your data, subject to legal retention obligations
Right to restriction of processing: request the suspension of your data processing in certain cases
Right to data portability: retrieve your data in a structured, commonly used format to transfer it to another controller
Right to object: object to the processing of your data for commercial prospecting purposes at any time, without having to justify your request
Right to withdraw consent: when processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal
Right to define post-mortem directives: concerning the instructions for your data after your death
To exercise these rights, please contact us:
By email: contact@maisonpechavy.fr (Subject: "Exercise of my GDPR rights")
By post: MAISON PECHAVY — 612 Avenue du Bruilhois, Le Treil, 47520 LE PASSAGE, France
We undertake to respond to your request within a maximum of one (1) month from its receipt. This period may be extended by two months depending on the complexity or volume of requests.
In order to guarantee the confidentiality of your data, we may ask you to provide proof of identity before processing your request.
Right to lodge a complaint with the CNIL: if you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France — www.cnil.fr.
Article 9 — Minors
The Website is not intended for individuals under the age of 15. We do not knowingly collect personal data from minors under 15 without the prior consent of their legal guardians.
If you notice that a minor has shared personal data with us without parental authorisation, please contact us at contact@maisonpechavy.fr so we can delete it.
Article 10 — Changes to the Privacy Policy
MAISON PECHAVY reserves the right to modify this Privacy Policy at any time, particularly to reflect changes in laws, regulations, or our practices.
Any substantial change will be notified to you by appropriate means (banner on the Website, email, etc.), and the update date at the top of this document will be refreshed.
We invite you to consult this Policy regularly to stay informed of any updates.
Article 11 — Contact
For any questions regarding this Privacy Policy or the processing of your personal data, you can contact us:
PECHAVY ENERGIES ALTERNATIVES — MAISON PECHAVY
Address: 612 Avenue du Bruilhois, Le Treil, 47520 LE PASSAGE, France
Email: contact@maisonpechavy.fr
Telephone: +33 (0)5 53 47 00 25