Privacy policy

Who is responsible for your data

Next-Concept SAS, 24, avenue Clemenceau, 67630 Lauterbourg, France

E-mail: info@vincent-hellmann.com · Telephone: +49 173 309 4034

What happens when you simply visit

Anyone opening these pages leaves the usual technical details with the server: the address of the page requested, the date and time, the browser and the operating system. They are needed to deliver the site and serve the security of its operation. The basis is our legitimate interest in undisturbed operation (Art. 6(1)(f) GDPR).

Visitor counting without a cookie

We count visits using software we run ourselves, on our own server. No cookie is set, nothing is stored on or read from your device, and nothing is passed to third parties. How two views on the same day are recognised as one visit without recognising you is explained below, under “Visitor statistics”.

Shopping cart

What you put in the cart is kept in your browser's local storage so it does not empty itself between pages. It stays on your device, reaches us only when you place the order, and can be cleared at any time in your browser settings.

Enquiries and getting in touch

Anyone writing to us or sending an enquiry provides a name, an e-mail address and the content of the message; a bespoke request adds the details and any files you attach, such as a sketch or a photo. We use these details solely to answer the enquiry and to handle a possible order (Art. 6(1)(b) GDPR). They are kept for as long as the matter runs, and beyond that only where retention periods require it.

Orders in the shop

For an order we need a name, an address, an e-mail address and the delivery details. They serve the performance of the contract (Art. 6(1)(b) GDPR). Accounting records are kept for ten years, as required by article L123-22 of the French commercial code.

Payment

Payment is made through PayPal or by invoice and bank transfer. Which route you choose also decides who gets to see your payment details.

With PayPal, the details needed for payment are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal is independently responsible for that processing; PayPal's privacy terms apply. We never see your card details.

With payment by invoice, no payment service is involved. You receive the invoice by e-mail and transfer the amount to our bank; we pass nothing to third parties for it. What arrives on the statement — name, IBAN and reference — belongs to the accounts and is kept for as long as the statutory retention periods require.

Shipping

For delivery we pass the name and delivery address to the carrier engaged — no more than that, and only what the delivery requires.

Customer account

You do not need an account to order. If you open one, you sign in with a one-time code sent by e-mail or with a passkey stored on your device; we keep no passwords. The account serves to find your orders and documents again (Art. 6(1)(b) GDPR) and can be deleted at any time on request.

Newsletter

Anyone subscribing to the newsletter confirms the subscription through a link sent by e-mail — without that confirmation nothing is ever sent. The basis is consent (Art. 6(1)(a) GDPR); it can be withdrawn at any time with one click at the foot of every mailing.

Customer testimonials

A testimonial is published only with express agreement. The text appears with the name the customer gives.

Google Customer Reviews

After an order we offer you the chance to take part in Google Customer Reviews. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Taking part is voluntary. Only if you expressly agree during the order process do we transmit your e-mail address, the order number and the expected delivery details to Google. Some time after delivery, Google sends you an e-mail asking you to rate your order. If you do not agree, nothing is transmitted and the order proceeds unchanged.

Your rating feeds into the aggregated seller rating that may be displayed by Google. The basis for the transfer is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time with effect for the future — informally to info@vincent-hellmann.com or through the unsubscribe link in Google's e-mail. The lawfulness of processing carried out up to that point is unaffected.

Google's script is loaded only on the confirmation page, at the moment the question is put to you; your IP address may then be transmitted to Google.

Data may also be transmitted to Google LLC in the United States. Google is certified under the EU-US Data Privacy Framework; the European Commission's standard contractual clauses apply in addition.

What Google does with the data is set out in Google's privacy policy: https://policies.google.com/privacy

Processors

We use service providers for hosting the site, sending e-mail and shipping. They act only on our instructions and are bound by a processing agreement under Art. 28 GDPR.

Your rights

You have the right to

• access the data held about you
• have inaccurate details corrected
• have data erased, unless a retention duty stands in the way
• restrict processing
• data portability
• object to processing based on legitimate interest
• withdraw consent you have given, with effect for the future

An informal message to info@vincent-hellmann.com is enough. You may also turn to the supervisory authority; in France this is the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.