Politique de confidentialité

1. Controller

The controller responsible for the processing of your personal data within the meaning of Art. 4 (7) GDPR is:

Sichuan Zishu Chengfeng Building Materials Co., Ltd.
No. 54-1, South Third Section of Second Ring Road, High-tech Zone
Chengdu, Sichuan 610066
People’s Republic of China
Email: inquiries@culturestone.eu

Further information about the operator is available in our Legal Notice.

2. Representative in the European Union (Art. 27 GDPR)

As we are established outside the European Union but offer services to individuals in the EU, we have appointed the following representative pursuant to Article 27 GDPR:

Synertrade FR SAS
9 rue du Bat d’Argent
69001 Lyon, France
Email: info@syner-sarl.cn

You may contact our EU representative directly on any matter relating to the processing of your personal data or the exercise of your rights under the GDPR.

3. Data protection officer

We are not legally required to appoint a Data Protection Officer. For any privacy-related questions, please contact us using the details in Section 1 or our EU representative in Section 2.

4. Server log files

When you visit this website, our hosting provider automatically collects and stores information that your browser transmits to us in server log files. This includes:

• IP address (shortened / pseudonymized where technically feasible)
• Date and time of the request
• Requested URL and HTTP status code
• Amount of data transferred
• Referrer URL
• Browser, operating system, and language

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in a secure, stable, and functioning website.
Retention: log data is deleted after 30 days, unless retention is required to investigate a concrete security incident.
Recipients: our hosting provider (see Section 5) processes this data on our behalf under a Data Processing Agreement pursuant to Art. 28 GDPR.

5. Hosting

This website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, United States of America. The hosting provider processes server log data and any data submitted through the site on our behalf under a Data Processing Agreement in accordance with Art. 28 GDPR. As Netlify is located in the United States, data transfers to Netlify are subject to Standard Contractual Clauses (see Section 10).

6. Cookies and similar technologies

This website currently sets only strictly necessary cookies required for the basic functioning of the site. No tracking, analytics, or advertising cookies are used. Strictly necessary cookies do not require consent under § 25 (2) TTDSG / Art. 5 (3) ePrivacy Directive.

Should we introduce non-essential cookies in the future, we will obtain your prior explicit consent via a consent banner in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. You will be able to withdraw your consent at any time with effect for the future.

7. Contact by email or telephone

If you contact us via the email or telephone links provided on this site, the personal data you transmit (e.g. your name, contact details, and the content of your message) will be stored and processed solely for the purpose of handling your inquiry.

Legal basis: Art. 6 (1) (b) GDPR where your inquiry relates to the performance of a contract or pre-contractual measures; otherwise Art. 6 (1) (f) GDPR (our legitimate interest in responding to inquiries).
Retention: we retain this data for as long as necessary to process your inquiry and thereafter in accordance with applicable statutory retention obligations.

8. Web fonts

All web fonts used on this site are self-hosted on our servers within the European Union. No connection to Google Fonts or any similar third-party font service is established when you load a page, and no font-related data is transmitted to third parties.

9. Product imagery and content management system

Product images and editorial assets shown on this website are stored in and delivered via Cloudinary, Inc., 101 Spear Street, Floor 5, San Francisco, CA 94105, USA. Our content management system (Strapi), which manages the catalogue data, is operated by us on a separate virtual private server.

When your browser loads an image, your IP address and standard HTTP request metadata (browser type, referrer, timestamp) are transmitted to that server. We operate this server ourselves; no third-party image CDN is used.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in delivering product imagery efficiently and in enabling our commercial team to update the catalogue.
Retention: standard web-server access logs on the CMS server are deleted after 30 days.
International transfer: see Section 10 below.

10. International transfers

Two categories of transfer to countries outside the European Economic Area may occur in connection with this website:

(a) Transfers to the United States. Our website is hosted by Netlify, Inc. and product imagery is delivered via Cloudinary, Inc., both established in the United States. Where your browser loads pages or images from our site, your IP address and request metadata are transferred to servers operated by these providers. The European Commission has issued an adequacy decision for the EU–US Data Privacy Framework; where applicable, this framework provides the legal basis for such transfers. Where not covered by the adequacy decision, transfers rely on Standard Contractual Clauses.

(b) Transfers to the People’s Republic of China. Where you contact us and your inquiry is handled by our team at the address shown in Section 1, the content of your inquiry may be accessed and processed in mainland China. The European Commission has not issued an adequacy decision for the People’s Republic of China.

Such transfers are safeguarded by:

• EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914 of 4 June 2021) between the EU data exporter and the data importer, supplemented where required by a transfer impact assessment and additional technical and organizational measures.
• For one-off replies to pre-contractual inquiries you have initiated: Art. 49 (1) (b) GDPR (transfer necessary for the performance of a contract or pre-contractual measures taken at your request). This basis is used only for occasional, non-systematic transfers.

A copy of the relevant safeguards may be requested from us at the address in Section 1 or from our EU representative in Section 2.

11. Your rights under the GDPR

Under the GDPR, you have the following rights in respect of your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / “right to be forgotten” (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7 (3) GDPR)

To exercise any of these rights, please contact us using the details in Section 1 or our EU representative in Section 2. We will respond without undue delay and in any event within one month of receipt of the request, in accordance with Art. 12 (3) GDPR.

12. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR).

13. Your rights under the PIPL

If you are located in the People’s Republic of China, the Personal Information Protection Law (PIPL) applies to the processing of your personal information. In particular, you have the right to access, correct, copy, and port your personal information, to request deletion, to withdraw consent, and to request an explanation of our processing rules. To exercise these rights, please contact us using the details in Section 1.

14. Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR on this website.

15. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes to our processing activities or to the legal framework. The current version is always available on this page and is identified by the date of its last update at the top of the document.