Privacy Policy

This Privacy Policy applies to any person — internet user or Customer — who accesses the www.geturbrick.com website or the Geturbrick mobile application. It explains to you, in a transparent manner, how GETURBRUCK collects and processes your personal data, and the rights you have to maintain control over it.

A personal datum is any information that allows you to be identified, directly (name, first name, photo) or indirectly (email address, login identifier).

The term processing designates any operation carried out on this data: collection, recording, storage, consultation, modification, communication, deletion, etc.

We process your data in strict compliance with the Data Protection and Freedoms Act of 6 January 1978 as amended and the General Data Protection Regulation (GDPR), based on two principles:

• You remain master of your data
• Your data is processed in a transparent, confidential and secure manner

The data controller is the company GETURBRUCK, SAS with a capital of €1,000, registered with the RCS de Nanterre under the number 953 293 651, whose registered office is located in Colombes (92). It is represented by Merwan Laakad, in the capacity of President.

For any questions regarding your data:

• By email: contact@geturbrick.com
• Via our contact form
• By mail: address provided upon request

Your data is collected directly from you, when you register on the Site, place an Order, or communicate with our services (email, contact form). Navigation data may also be used, with your consent, to adapt our content and offers to your interests.

Your data is collected by GETURBRUCK for the following purposes:

• Order management — tracking of contracts, orders, deliveries and invoices. Legal basis: contract performance.
• Response to your requests — handling of questions about our products or delivery conditions. Legal basis: your consent.
• Newsletter and commercial offers — sending of the newsletter and personalized offers, if you have consented. Legal basis: your consent.
• Exercise of your rights — management of "Data Protection and Freedoms" requests. Legal basis: legal obligation.
• Site improvement — proper functioning, audience measurement, optimization of features. Legal basis: legitimate interest; your consent where required (cookies).

Whether the data requested is mandatory or optional is specified at the time of collection.

• Order management: name, first name, email, phone number, delivery and billing address, payment data (processed by our secure service providers).
• Response to your requests: name, first name, email.
• Newsletter: email, first name (optional).
• Site improvement (via cookies): pages visited, items added to basket, visit duration.

Within the limits of their responsibilities, the following may access your data:

• Authorized GETURBRUCK staff (administration, marketing, logistics)
• Technical sub-processors: Shopify (e-commerce platform and hosting), Cookiebot by Usercentrics (consent management), Google Analytics (audience measurement)
• Carriers (DPD, FedEx)
• Secure payment service providers
• Competent authorities, upon judicial request

Your data is never sold or rented to third parties.

Your data is retained for the strictly necessary duration for the purposes pursued:

• Order management: duration of relationship + 3 years; accounting documents: 10 years
• Information requests: 3 years from the last contact
• Newsletter: 3 years from the last contact or unsubscription
• Exercise of rights: 1 year (access / rectification), 3 years (objection)
• Cookies: maximum 13 months

In accordance with the GDPR and the Data Protection and Freedoms Act, you have the following rights:

• Access — obtain a copy of your data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data
• Withdrawal of consent at any time
• Restriction of processing
• Objection to processing
• Portability — retrieve your data in a structured format
• Definition of the fate of your data after your death

These rights are exercised by simple request:

• By email: contact@geturbrick.com
• By mail: address provided upon request

You may also lodge a complaint with the CNIL (cnil.fr).

The Site uses connection data (date, time, IP address, protocol, page consulted) and cookies — small files stored on your device — to:

• Identify you and remember your visits
• Measure audience and produce statistics
• Adapt content to your interests

You can accept, refuse or choose the types of cookies stored via our management banner powered by Cookiebot by Usercentrics. Information collected via cookies is retained for a maximum of 13 months, then deleted or anonymized.

For more information, consult the CNIL website.

We process your data primarily within the European Union. Given the nature of our activity (Shopify platform hosted in Canada / United States), data transfers outside the EU may nevertheless occur.

These transfers are governed by appropriate safeguards: standard contractual clauses approved by the European Commission and, where applicable, Data Privacy Framework (DPF) certification. These safeguards are provided upon request to contact@geturbrick.com.

GETURBRUCK and its sub-processors implement the technical and organizational measures necessary for the security of processing and the confidentiality of your data, in accordance with the GDPR and the Data Protection and Freedoms Act:

• Encryption of exchanges (HTTPS)
• Authentication by confidential identifiers and passwords
• Logging of connections
• Access to data restricted to strict necessity
• Hosting on secure platform (Shopify)