Privacy Policy

Aegis IA Locale — BeamReactor Shop
Last updated: March 2026

1. Data Controller

The data controller for your personal data is:

2. Data Collected and Purposes

For order management, we collect only strictly necessary data:

• First and last name — Client identification, invoice issuance
• Email address — order confirmation, tracking, order-related communications
• Postal address — billing and equipment delivery
• Phone number (optional) — contact for delivery or installation
• Payment data — processed exclusively by our secure payment provider; we store no card numbers or banking data

We collect no browsing data for advertising or behavioural profiling purposes.

3. Legal Bases for Processing

• Contract performance (Art. 6.1.b GDPR) — order processing, delivery, invoicing
• Legal obligation (Art. 6.1.c GDPR) — retention of invoices and accounting records for 10 years (French Commercial Code)
• Legitimate interest (Art. 6.1.f GDPR) — fraud prevention, IT security
• Consent (Art. 6.1.a GDPR) — newsletter (optional, revocable at any time)

4. Retention Periods

• Order data and invoices: 10 years from the end of the financial year (statutory accounting obligation)
• Active customer account data: retained while the account is active
• Inactive account data: deleted 6 months after last activity (with prior notification)
• Newsletter data: retained until unsubscription
• Anonymised statistical logs: 12 months rolling
• Technical logs with identified IP: 7 days

5. Sharing of Your Data

Your data is not shared with any advertising network, social media platform, or third parties for commercial purposes.

It may be transmitted only to technical service providers strictly necessary for order fulfilment:

• Secure payment provider (processing bank transactions)
• Carrier (name and address for equipment delivery only)

These providers act as data processors and are bound by confidentiality obligations compliant with the GDPR.

6. Cookies

The BeamReactor Shop uses only:

• Session cookies — necessary for the proper functioning of the shopping cart and authentication
• Preference cookies — memorising the chosen language and display skin

No advertising, tracking, or profiling cookies are placed on your device.

7. Data Security

We implement appropriate technical and organisational measures to protect your data:

• Encrypted transmission (HTTPS/TLS)
• Passwords hashed with individual salting
• SQL injection protection by design
• Intrusion detection
• Regular encrypted backups

Hosting is performed within the European Union. Your data does not leave EU territory.

8. Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) — obtain a copy of data concerning you
• Right of rectification (Art. 16) — correct inaccurate or incomplete data
• Right to erasure (Art. 17) — request deletion, subject to statutory retention obligations
• Right to restriction (Art. 18) — restrict processing of your data
• Right to portability (Art. 20) — receive your data in a structured, machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interest
• Withdrawal of consent — withdraw consent at any time (newsletter)

To exercise your rights, contact us via our contact form.
We will process your request within a maximum of 30 days.

You also have the right to lodge a complaint with the CNIL (French data protection authority) at www.cnil.fr, or with your national supervisory authority.

9. Policy Updates

Any substantial changes to this policy will be announced on the site. Registered users will be notified by email within a reasonable period before changes take effect.

Document established on 2026-03-03 — Version 1.0