Privacy Policy

Protecting your personal data matters to us. This policy explains what data we collect, why, and what rights you have.

1. Data controller

The data controller is GOLDEN PRINT, 14 Route d'Espas, 32370 Manciet. Contact: info@2mnumerique.fr — 05 33 13 02 01.

2. Data processed, purposes, legal bases and retention

For each processing activity below: the data concerned, what it is used for, its legal basis under Article 6 GDPR, who receives it and how long we keep it. Retention periods follow the CNIL standard on the management of commercial activities (deliberation no. 2021-131 of 23 September 2021) and, for audience measurement, its recommendation on cookies and other trackers (deliberation no. 2020-092 of 17 September 2020), both in French.

Customer account

Data: last name, first name, email address, password (never stored in plain text), phone number and addresses if you provide them.
Purpose: creating and managing your customer area: orders, quotes, invoices, addresses, tracking and help requests.
Legal basis: performance of the contract or of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
Recipients: our departments; our management system, when you place an order or save a quote.
Retention period: for the duration of the business relationship; an account left inactive for 2 years is deleted.

Orders, invoicing and claims

Data: identity, company, billing and delivery addresses, phone number, email address, order contents, uploaded files, your internal reference, your claims.
Purpose: preparing your quotes, producing, delivering and invoicing your orders, handling your claims.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR); for invoicing and keeping accounting records, compliance with our legal obligations (Art. 6(1)(c)).
Recipients: our departments; our management system (quotes, orders, invoices, production and shipping tracking); the carriers in charge of delivery, for delivery data.
Retention period: order and customer relationship data: for the duration of the business relationship, then 3 years from its end (last purchase, end of warranty or last contact from you); invoices and accounting records: 10 years (Article L.123-22 of the French Commercial Code).

Card payment

Data: the information needed to pay for the order. Your card details are entered on the secure payment page of our payment service provider: they do not pass through our servers and we do not store them; we only receive the result of the payment.
Purpose: collecting payment for your order.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Recipients: our payment service provider; our departments and our management system, for the result of the payment.
Retention period: the result of the payment is kept with the order and its accounting records: 10 years (Article L.123-22 of the French Commercial Code).

Bank transfer

Data: name of the account holder making the transfer, amount, date and transfer reference, as shown on our bank statement.
Purpose: matching your transfer with your order.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR); keeping our accounts (Art. 6(1)(c)).
Recipients: our departments; our bank; our management system.
Retention period: accounting records: 10 years (Article L.123-22 of the French Commercial Code).

Emails about your account and orders

Data: email address, name and message content: order confirmation, bank details for a transfer, shipping, account creation, email address verification, forgotten password.
Purpose: keeping you informed about your account and your orders.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Recipients: our departments; our email sending service.
Retention period: as long as the account or order data they relate to.

Contact form

Data: first name, last name, email address, phone number, company (optional) and your message.
Purpose: replying to your message.
Legal basis: our legitimate interest in replying to the requests sent to us (Art. 6(1)(f) GDPR); pre-contractual measures when your message concerns an order or a quote (Art. 6(1)(b)).
Recipients: our departments (your message is stored and forwarded to us by email).
Retention period: if you are a customer, as long as order data; otherwise, 3 years from your last contact.

Quote request

Data: your name and, where applicable, your company name; email address and phone number; the content of your message and the details of your project; attached files; technical data (IP address, referring page) for security and monitoring purposes.
Purpose: processing your quote request, contacting you again and establishing a possible business relationship.
Legal basis: your consent (Art. 6(1)(a) GDPR) and the performance of pre-contractual measures taken at your request (Art. 6(1)(b)).
Recipients: our departments; our management system.
Retention period: as long as necessary to process the request, then archived for a maximum of 3 years from the last contact, for prospecting and business follow-up purposes, before being deleted.

Live chat

Data: your messages, the name and email address you choose to give, and connection data (IP address, browser).
Purpose: answering your questions live.
Legal basis: your consent (Art. 6(1)(a) GDPR): the chat window is only loaded after you agree (section 5).
Recipients: our departments; Tawk.to, which provides the chat service.
Retention period: conversations are kept by Tawk.to, under its privacy policy.

Audience measurement

Data: pages viewed and technical browsing data, linked to a cookie identifier.
Purpose: producing visit statistics for the shop.
Legal basis: your consent (Art. 6(1)(a) GDPR): the tool is only loaded after you agree (section 5).
Recipients: Google (Google Analytics).
Retention period: cookies kept for 13 months at most; collected information kept for 25 months at most.

Customer reviews

Data: last name, first name, email address, order reference and date, products ordered, quantities and prices.
Purpose: inviting you, after your order, to review it.
Legal basis: our legitimate interest in collecting our customers' opinions (Art. 6(1)(f) GDPR); you may object at any time (section 4).
Recipients: Société des Avis Garantis, which sends the invitation and collects the reviews.
Retention period: under the privacy policy of Société des Avis Garantis (in French).

3. Recipients and transfers

Your data is never sold or transferred to third parties for commercial purposes. It is only disclosed to the recipients listed in section 2, each for its own part. Our host, o2switch (Clermont-Ferrand, France), may technically have access to it as a data processor.

Certain third-party services (see section 5) process browsing data as data processors: Tawk.to (live chat) and Google (Google Maps, Google Analytics audience measurement). These processing activities may involve a data transfer outside the European Union (in particular to the United States), governed by appropriate contractual safeguards (standard contractual clauses). These tools are only activated after your consent.

4. Your rights

In accordance with the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights:

Right of access to your data;
Right to rectification;
Right to erasure (the "right to be forgotten"), except for data the law requires us to keep (accounting records);
Right to restrict or object to the processing of your data, including review invitations;
Right to the portability of your data.

Where processing is based on your consent, you may withdraw it at any time, without affecting what was done before.

To exercise these rights, write to us at info@2mnumerique.fr. You can also file a complaint with the CNIL (the French data protection authority, www.cnil.fr).

5. Cookies and trackers

This site uses essential technical cookies required for it to work properly (session, security).

It also offers third-party services that are only activated after your consent, via the banner shown on your first visit (“Accept all”, “Reject all” or “Customise”). Your choice is kept for 6 months. You can change it at any time using the “Manage cookies” link at the bottom of every page:

Functional — Tawk.to: displaying the live chat window.
Audience measurement — Google Analytics: visit statistics for the shop (cookies kept for 13 months at most).
Third-party content — Google Maps: displaying maps embedded in pages.

If you do not consent, none of these tools are loaded. We use no advertising tools. The list of cookies, their purpose and duration are given in our cookie policy. You can also object via your browser, or write to us at info@2mnumerique.fr. Learn more: Google, Tawk.to.

Last updated: October 2026.