Privacy Policy | MyMazalBag

1. Data Controller

The service is published by:

Anthony Magail – Sole proprietor
SIRET: 883 531 488 00019
Address: 934 Chemin des Âmes du Purgatoire, 06600 Antibes, France
Email: [Contact email to be confirmed]

The data controller for personal data is Anthony Magail.

2. Collected Data

As part of using the service, the following data may be collected:

Account data
Email address
First name or last name
Password (encrypted)
Order-related data
Raffle tickets purchased
Postal address (for shipping the prize if won)
Payment data (processed directly by Stripe, not stored by the site)
Technical data
IP address
Connection data
Browsing data (via analytics tools)

3. Purposes of Processing

Data is used to:

Create and manage user accounts
Enable the purchase of tickets and participation in raffles
Organize prize draws and contact winners
Ensure the security and proper functioning of the platform
Send transactional emails (purchase confirmation, password reset, notifications)
Improve the service through usage statistics

4. Legal Basis

Processing is based on:

Contract performance (service provision)
Legitimate interest (security, service improvement)
Legal obligations (accounting)

5. Hosting and Processors

Data may be processed by the following providers:

OVH – Application and database hosting (France / EU)
Amazon Web Services (AWS) – Sending transactional emails
Stripe – Payment processing (bank data is processed directly by Stripe)
Traffic analytics tools (audience measurement)

These providers act as processors and comply with applicable data protection regulations.

6. Retention Period

Data is retained:

As long as the user account is active
Until the account is deleted by the user
Order-related data may be retained in accordance with legal obligations (up to 10 years)

7. Security

Technical and organizational measures are implemented to protect personal data against unauthorized access, loss, or disclosure.

Passwords are stored in encrypted form.

8. User Rights

In accordance with the GDPR, you have the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object
Right to data portability

To exercise your rights, contact: [Contact email to be confirmed]

You may also lodge a complaint with the CNIL.

9. Cookies and Analytics

The site uses technical cookies necessary for its operation and analytics tools to measure audience and analyze service usage.

10. Changes

This privacy policy may be updated at any time. The last updated date appears at the top of this page.