Light painting
Light painting
Light painting
Light painting
Fabric table lamp
Floor lamp
Travertine table lamp
Linen table lamp
Fabric table lamp
Fabric pendant lightPrivacy policy
Translation provided for information: only the French version of this document is legally binding.
We collect as little data as possible, and only to serve you.
Last updated: 11 November 2026
Data controller
AUBE, a company currently being registered, 138, avenue Victor Hugo, 75016 Paris, France, reachable at bonjour@aube-design.fr.
Data collected and purposes
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Process and deliver your orders, handle after-sales service | Identity, contact details, address, order contents | Performance of the contract | Duration of the relationship, then 10 years of archiving for accounting records |
| Keep your customer account (sign-in by a code received by e-mail, display of your orders, pre-filling of your next orders) | E-mail and, if you provide them: first name, surname, telephone, delivery address; fingerprints of sign-in codes and sessions | Performance of the contract (at your request) | Until you delete your account, which you can do yourself at any time, or after 3 years without signing in; sign-in codes 24 hours, sessions 30 days |
| Recording a reservation (made up to 18 October 2026) | Identity, e-mail, telephone (optional), postcode, reserved piece | Pre-contractual measures at your request | 3 years after the last contact |
| Reply to your messages and professional enquiries | Identity, contact details, content of the message | Legitimate interest in replying to you | 3 years after the last contact |
| Notifying you when orders open (“Notify me”) and telling you about new pieces (letter, preview) | E-mail, first name (for “Notify me”), pieces you are interested in | Consent | Until you unsubscribe; after that, only your address is kept on an opt-out list so that we no longer write to you, and your first name is deleted |
| Asking for your opinion after you receive your order: a single email from AUBE, and Google's verified-buyer survey if you accepted it on the confirmation page (Google Customer Reviews programme) | Name, email, order number; for Google: email, order number, delivery country and estimated delivery date | Legitimate interest (learning about your experience, improving our pieces); for Google, your consent in the cookie banner, then in its window | With the order; we do not publish any reviews ourselves |
| Process a withdrawal and acknowledge receipt | Identity, contact details, order references | Legal obligation | Duration of the relationship, then 5 years |
| Protect the forms against abusive submissions | Encrypted, non-reversible fingerprint of the IP address | Legitimate interest (website security) | 24 hours |
| Measuring site traffic anonymously (page views, current visitors, carts in progress) | Pages viewed, referring page, language, type of device and browser, country of connection, cart contents; no identity data, and the IP address is not stored | Legitimate interest (audience measurement, which you can decline below) | 12 months |
| Measuring the site’s audience with Google Analytics, if you accept it | Random identifier of your browser (cookie), pages viewed, referring page, type of device and browser, country of connection, cart additions and purchases (products, amount); no identity data | Consent (cookie banner) | Cookies: 13 months at most; data: 14 months at most |
| Measuring the effectiveness of our advertising with Google Ads, if you accept it | Random identifier of your browser (cookie), ad click identifier, purchases made after an ad (amount); no identity data | Consent (cookie banner) | Cookies: 13 months at most |
| Measuring the effectiveness of our advertising on Pinterest, if you accept it | Random identifier of your browser (cookie), ad click identifier, pages viewed and referring page, add-to-cart events, checkout starts and purchases (products, amount), submission of a reservation, a “Notify me” request, a sign-up to the letter or the waiting list, or a professional request (the type of form only, never its content), IP address and browser type; no identity data | Consent (cookie banner) | Cookies: 12 months |
| Keep a record of e-mails sent | Recipient address, subject, date, sending result | Legitimate interest (proof of sending, in particular of acknowledgements of receipt) | 3 years |
Recipients
Your data are intended for AUBE and, where strictly necessary, for its service providers. They are neither sold nor rented.
| Service provider | Role | Data concerned | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting and delivery of the website | Technical connection data (IP address, browser), for the time needed to serve the pages and protect the website | Global network, company based in the United States |
| Supabase, Inc. | Database and form processing | Form contents (reservations, messages, sign-ups, withdrawals) | Data hosted in the European Union (Ireland), company based in the United States |
| PostHog, Inc. | Anonymous audience measurement | Pages viewed, type of device, cart contents, without identity data | Data hosted in the European Union (Germany), company based in the United States |
| Google Ireland Limited | Audience measurement and measurement of advertising effectiveness, with your consent (Google Tag Manager, Google Analytics, Google Ads); verified-buyer review survey after an order, if you accept it (Google Customer Reviews) | Cookie identifiers, pages viewed, device type, purchases made (amount), IP address at the time of connection; for the review survey: email, order number, country and estimated delivery date | Company based in Ireland; possible transfers to Google LLC in the United States, governed by the EU-U.S. Data Privacy Framework |
| Pinterest Europe Limited | Measurement of the effectiveness of our advertising on Pinterest, with your consent (Pinterest tag). We are joint controllers with Pinterest for the collection and transmission of this data; Pinterest then uses it under its sole responsibility, in accordance with its privacy policy | Cookie identifiers, click identifier, pages viewed, device type, cart additions, checkouts started, purchases (products, amount) and type of form submitted, IP address at the time of connection | Company based in Ireland; possible transfers to Pinterest, Inc. in the United States, governed by the EU-U.S. Data Privacy Framework |
| Resend, Inc. | Sending e-mails (confirmations, acknowledgements of receipt, letter) | E-mail address, name, content of the e-mail | Company based in the United States |
| Stripe Payments Europe Limited | Online payment (bank card, Apple Pay, Google Pay) | Name, email address, telephone, delivery address, order amount and card details, entered directly with Stripe: we never have access to them | Company established in Ireland; possible transfers to Stripe, LLC in the United States, covered by the safeguards provided for by the GDPR |
Where data may be accessible from a country outside the European Union, such transfers are covered by the safeguards provided for by the GDPR, in particular the standard contractual clauses adopted by the European Commission.
The carrier will be added to this list as soon as it is in place, before orders open.
Cookies and local storage
Fonts are hosted on our own servers. Without your consent, only one third-party service is called when pages load: PostHog’s audience measurement, set up to place no cookies and store nothing on your device. It counts page views and carts without knowing who you are: the visit identifier is calculated on its servers, encrypted and renewed every day, and your IP address is not stored.
This measurement is not enabled if your browser asks not to be tracked (“Global Privacy Control” or “Do Not Track” settings). You can also decline it here, for this browser; your choice is kept in its local storage.
Measurement and advertising cookies are placed only with your consent, given in the cookie banner, and you can accept one without the other: audience measurement, with the cookies of Google Analytics (name beginning with “_ga”), and advertising, with those of Google Ads (name beginning with “_gcl”) and Pinterest (“_pin_unauth”, “_epik”, “_derived_epik”). Until you have accepted something, Google Tag Manager is not loaded and nothing is sent to Google or Pinterest; if you accept audience measurement only, the Pinterest tag is not loaded. Google cookies are kept for no more than 13 months, Pinterest cookies for 12 months.
If you have accepted advertising and are logged in to Pinterest in this browser, Pinterest may also read its own cookies and link this information to your Pinterest account, in accordance with its privacy policy.
After a payment, if you have accepted Google's cookies, the confirmation page also offers you Google's review survey (“Google Customer Reviews”): your email, your order number, the country and the estimated delivery date are then sent to Google, and its survey is only emailed to you if you accept it in its window. Without consent in the banner, nothing is offered or sent.
Your choice is kept for 6 months in your browser’s local storage; you can change it at any time here, or with the “Cookies” link at the bottom of every page. If your browser asks not to be tracked (Global Privacy Control or Do Not Track), no measurement or advertising cookies are placed and the question is not asked.
Only the contents of your cart and, if you sign in to your account, your session token and your details (to prefill your orders) are kept in your browser’s local storage. This storage is strictly necessary for the service you request and therefore does not require your consent; it is cleared when you sign out. You can clear it at any time from your browser settings.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions on what happens to your data after your death. To exercise them, write to bonjour@aube-design.fr. From your account, you can also correct your details and delete your account yourself. Each newsletter contains an unsubscribe link.
If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the CNIL (www.cnil.fr).
Security
The website is served over an encrypted connection (HTTPS). Payments are processed by a specialised provider: we never have access to your bank details.