Privacy policy
Version dated 9 October 2026
Preparation version: identification, delivery and mediation information must be completed before opening sales.
1. Controller
ATOUTNAUTIC, address to complete, is the intended data controller. Questions and rights requests: contact@atoutnautic.com. Full identity and postal address must be completed before publication.
2. Data and purposes
Contact forms collect name, email, subject and message to answer enquiries. Checkout collects identity, address, country, email, optional details, configuration and quantity to prepare orders and documents. Dates, references, terms acceptance and PDF hashes provide traceability. No card numbers are requested.
3. Legal bases
Enquiries and order preparation are pre-contractual steps requested by the individual. Real orders will rely on contract performance and accounting obligations. Security and abuse prevention rely on legitimate interest, subject to your rights. Use of the form does not imply marketing consent.
4. Recipients and hosting
In this local version, data stays on the development computer in non-public folders. After deployment, ATOUTNAUTIC and strictly necessary providers (OVH hosting, email and Stripe after activation) may process data within their roles. Processing agreements, locations and safeguards for any transfers outside the EEA must be checked and completed before service activation. No sale of personal data is planned.
5. Retention
Planned policy: enquiries with no commercial follow-up, up to three years from the last exchange, with earlier deletion when unnecessary. Real accounting documents: ten years where legally required. Order data is retained for the relationship and relevant statutory periods, then archived with restricted access. Demo data must be deleted after testing and before publication. Abuse counters should be purged after twenty-four hours. The operator must implement the deletion procedure.
6. Cookies and security
Only a technical session cookie is used to secure forms, retain the cart during checkout and control PDF access. It is HttpOnly and SameSite=Lax; Secure is enabled with HTTPS. It expires at the end of the browser session. No advertising trackers, third-party analytics or external fonts are included. Archives and email secrets are outside the public directory. Abuse prevention uses a hash of the IP address rather than storing its plain value in counters.
7. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability and exercise objection rights. Write to contact@atoutnautic.com; requests are normally handled within one month, subject to lawful justified extensions. Proportionate identity verification may be requested where necessary. You may complain to the CNIL (cnil.fr) or your competent supervisory authority.
8. External links
The existing monitoring portal and press material are separate destinations. Data processing within the monitoring portal must be documented separately by its operator; this website does not reproduce that service.
Sources : Service Public · Vente à distance · Service Public · Garanties · CNIL · Conservation