Privacy Policy
Ecorose takes the protection of personal data seriously — that of its visitors, its customers, and the children welcomed to its workshops. This page explains what data is collected, why, how long it is kept, and how to exercise your rights.
Data controller
Rosanna Bueler
5 rue Saint-Louis, 34000 Montpellier, France
hello@eco-rose.com
What we collect and why
Contact form
Personal information: name, email address, message content.
Purpose: responding to your enquiry.
Legal basis: legitimate interest in replying to messages received.
Retention: three years from our last exchange.
Buying a digital guide
Personal Information: name, email address, transaction reference, purchase history.
Purpose: processing the order, delivering the file, customer support and accounting obligations.
Legal basis: performance of the contract and legal obligation.
Retention: three years after the last purchase for customer relationship purposes, ten years for accounting records.
Booking a zero-waste workshop
Personal Information: name, email address, chosen time slot.
Purpose: managing the booking, running the workshop, sending practical information.
Legal basis: performance of the contract.
Retention: three years after the workshop.
Booking a birthday workshop
Personal Information: about the parent or legal guardian: name, email address, telephone number where provided.
Data about participating children: first name, age, and any allergy, intolerance or particular requirement reported by the parent.
Purpose: organising the workshop and keeping participating children safe.
Legal basis: performance of the contract, and legitimate interest in participant safety.
Retention: information about children is deleted within thirty days of the workshop. The parent’s contact details are kept for three years.
Data concerning children is collected from the parent or legal guardian, limited to what is strictly necessary, and never used for commercial purposes.
Photographs
No photograph of a child is taken or published without the prior, written and separate consent of the parent or legal guardian.
Legal basis: consent.
Retention: until consent is withdrawn, which may be done at any time by emailing hello@eco-rose.com.
Audience measurement
Ecorose uses no audience measurement tool that sets cookies. Traffic statistics come from the hosting provider’s server logs; they are aggregated and do not identify individuals.
Required information
Fields marked with an asterisk in our forms are necessary to handle your enquiry, order or booking. Without them, it cannot be completed. All other fields are optional.
Who has access
Your data is never sold, rented or shared with third parties for commercial purposes.
It is accessible to Rosanna Bueler and to the following providers, acting as processors:
- IONOS SARL — website and email hosting (European Union);
- Stripe Payments Europe Limited — payment processing (Ireland);
- Calendly LLC — workshop scheduling (United States);
- Google Ireland Limited — business calendar synchronisation (data hosted in the United States).
The site’s forms are hosted on Ecorose’s own WordPress installation: data entered there is stored within the European Union.
Transfers outside the European Union
Website hosting, email and payment processing all take place within the European Union.
A transfer to the United States occurs solely in connection with scheduling and calendar synchronisation, through Calendly and Google. The data involved is limited to name, email address and the booked time slot. These transfers are governed by the standard contractual clauses adopted by the European Commission and, where relevant, by the EU–US Data Privacy Framework.
No payment data and no data relating to a child is transferred outside the European Union.
Security
The site is served entirely over HTTPS. Access to the administration area is restricted and protected by authentication. Files and the database are backed up regularly.
Your rights
You have the following rights over your personal data and that of your child:
- access — obtain a copy of the data concerned;
- rectification — correct inaccurate or incomplete information;
- erasure — ask for data to be deleted, subject to legal retention obligations;
- restriction — ask for a processing activity to be suspended;
- objection — object to processing based on legitimate interest;
- portability — receive your data in a structured, machine-readable format;
- withdrawal of consent — at any time, in particular for photographs;
- post-mortem instructions — decide what happens to your data after your death (a right specific to French law).
To exercise any of these, write to hello@eco-rose.com. We will respond within one month. Proof of identity may be requested where there is reasonable doubt.
If, after contacting us, you consider your rights have not been respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr. If you live in another EU country, you may also contact your national supervisory authority.
Cookies
How cookies are set and managed is described in the cookie policy.
Changes to this policy
This policy may be updated to reflect legal or technical developments. The date below indicates the version in force.
In force since 17 September 2026