This page explains what personal data AIR-FINS collects on www.air-fins.com, why, who it is shared with, how long it is kept and how to exercise your rights.
Last updated: October 11, 2026.

1.

AIR-FINS, Société par Actions Simplifiée, Saint-Nazaire Trade and Companies Register (RCS) no. 944515535, 4 impasse des Cormiers, 44320 Chaumes-en-Retz, France. Email: contact@air-fins.com.

2. The data we collect and how we use it

Your orders

Last name, first name, billing and shipping addresses, email, phone number, products ordered and amount. This data is used to prepare, ship and invoice your order, to keep you informed about it by email and to handle any return.

Your card details are entered in a secure form provided by our bank or by PayPal: AIR-FINS never sees or stores them.

Your customer account

If you create an account: your email, your password (stored encrypted, unreadable even to us), your addresses and your order history. It lets you track your orders without re-entering your details. Legal basis: your request to create an account.

Your requests (contact, partnership, repair)

What you write in the form: name, email, phone number if you give it, your message and, for a repair, photos of your fin. This data is used only to reply to you and follow up on your request. Photos are kept in a private area, accessible only to the AIR-FINS team, after the information they contain (location, device) has been removed. Legal basis: your request.

To block automated submissions (spam), the forms use Cloudflare Turnstile, which analyzes your IP address and technical information about your browser, without asking you to solve a puzzle. Legal basis: our legitimate interest in protecting the website.

Your cookie choices

When you make a choice in the cookie banner, we keep a record of it: a random identifier, the date, the version of this policy, your choices and your truncated IP address (its last digits are deleted). Legal basis: our obligation to be able to prove your consent.

AIR-FINS does not send a newsletter and never sells or rents your data.

3. Who receives your data

The AIR-FINS team, and only the service providers who need it to do their job:

• Payment: Crédit Agricole (CAWL solution) for card payments; PayPal (PayPal Europe S.à r.l. et Cie, S.C.A., Luxembourg) if you choose to pay with PayPal.
• Shipping: La Poste (Colissimo) and Chronopost, depending on the shipping method chosen. They receive your name, address, phone number and email to deliver the parcel and let you know when it will arrive.
• Email delivery: Scaleway (Scaleway SAS, Paris), which delivers the website’s emails (order confirmation, reply to a request), processed and stored in France. It does not track whether emails are opened or links clicked.
• Spam protection: Cloudflare, Inc. (Turnstile), on the forms.
• Website hosting: Nuxit, in France.
• Accounting: our chartered accountant, for invoices.

Cloudflare and PayPal may process data outside the European Union, notably in the United States. These transfers are governed by the EU–U.S. Data Privacy Framework or by the European Commission’s standard contractual clauses.

4.

• Orders and invoices: 10 years, the period required by the French Commercial Code for accounting records.
• Customer account: until you ask for it to be deleted, or deleted after 3 years without logging in.
• Requests and photos: automatically deleted 3 years after the request is closed.
• Records of your cookie choices: 13 months, then automatically deleted.
• Cart: 48 hours without activity.

5. Cookies

The website currently uses only cookies that are essential for it to work, which do not require your consent:

• airfins_consentement: remembers your cookie choices so you are not asked again.
• wp_woocommerce_session_…, woocommerce_cart_hash, woocommerce_items_in_cart: keep the contents of your cart. 48 hours at most.
• wordpress_logged_in_…, wordpress_sec_…: keep you logged in to your customer account. 2 days, or 14 days if you check “Remember me”.
• wp-wpml_current_language: remembers the website language (French or English). 1 day.

Other cookies are set only with your consent, purpose by purpose: audience measurement, advertising and social media, third-party content (YouTube or Vimeo videos, Instagram posts, which set their own cookies). Until you accept, none of this is loaded. Your choice is kept for 6 months, then asked again, and also whenever this policy changes.

You can change your mind at any time: manage cookies (also linked at the bottom of every page).

6. Your rights

In accordance with the GDPR (EU Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertés), you may at any time:

• access your data and obtain a copy;
• have it corrected or erased;
• object to its processing or ask for processing to be restricted;
• receive it in a readable format to pass it on elsewhere (portability);
• withdraw your consent, without affecting anything done before;
• give instructions on what happens to your data after your death.

Write to contact@air-fins.com or to 4 impasse des Cormiers, 44320 Chaumes-en-Retz, France. We reply within one month. We may ask you to prove your identity if there is any doubt.

If you believe your rights have not been respected, you can file a complaint with the CNIL, the French data protection authority (www.cnil.fr).

7. Security

The website is served over HTTPS. Access to the administration area is restricted to the AIR-FINS team, passwords are encrypted, and photos sent with a repair request are not publicly accessible.