Privacy Policy
This page explains which personal data Lutèce collects on lutece-aer.com, why, who it is shared with and how to exercise your rights.
Data controller
LUTECEAER (Lutèce), 47 rue Vivienne, 75002 Paris, France. Contact: contact@luteceaer.com.
What we collect and why
Request to find a piece
Your email address, your WhatsApp number if you give it, and the description of the piece you are looking for, to reply to you and search for the piece. Legal basis: pre-contractual steps taken at your request.
Contact form
Your name, email address, subject, order number, phone number and message (only the email address is required), to answer your request. Legal basis: pre-contractual steps or the performance of your order, otherwise our legitimate interest in answering the messages we receive.
Online withdrawal
Your full name, order number, the items concerned and your email address, to record your withdrawal and acknowledge its receipt. Legal basis: our legal obligations (French Consumer Code, articles L221-21 and D221-5).
Customer account, favourites and orders
Your identity, contact details, addresses, favourites and orders, to manage your account and purchases. Legal basis: performance of the contract, and our legal accounting obligations.
If you write to us on WhatsApp, your number and messages are processed to reply to you. WhatsApp is a Meta service, subject to its own privacy policy.
Website operation and audience measurement
Our hosting provider records technical logs (IP address, requested page, date) to run and secure the website. We measure the audience with Vercel Web Analytics, without cookies: visits are counted in aggregate, using a code computed from the request and deleted after 24 hours. Legal basis: our legitimate interest in running the website and knowing its traffic.
Who receives your data
Your data is reserved for Lutèce. It is processed on our behalf by the following providers, strictly within the scope of their service:
- Google (Gmail): receiving the requests sent through the forms;
- Vercel: website hosting, technical logs and audience measurement;
- Shopify: catalogue, customer accounts, favourites, orders and payment;
- Meta (WhatsApp): conversations on WhatsApp;
- DHL: delivery of orders.
We never sell or rent your data.
Transfers outside the European Union
Some of these providers are based in the United States or process data there (notably Vercel, Google and Meta). These transfers rely on the safeguards provided by the GDPR: the European Commission's adequacy decision (Data Privacy Framework) for certified companies, otherwise the Commission's standard contractual clauses.
Retention period
- Search requests and messages: as long as needed to handle them, then no more than 3 years after our last exchange.
- Customer account: as long as the account is open. Orders and invoices: 10 years, under our accounting obligations.
- Technical logs: from a few days to a few weeks, as set by our hosting provider. Audience measurement code: 24 hours.
Cookies and local storage
The website uses no advertising cookies and no third-party trackers. It only stores what it needs to work: a cookie that remembers your language, your cart and favourites saved in your browser and, if you sign in, secure session cookies. These strictly necessary items do not require your consent, and neither does the cookie-free audience measurement.
Your rights
You can access, rectify or erase your data, restrict or object to its processing, or ask for its portability. Write to us at contact@luteceaer.com: we reply within one month. If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Last updated on 27 October 2026.
