Privacy policy

Last updated: 24 June 2026.

The purpose of this privacy policy is to inform you, clearly and transparently, of how GALAND VANILLE collects, uses and protects your personal data when you visit its website www.galand-vanille.com or place an order on it.

We attach great importance to respecting your privacy. All our practices comply with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French law no. 78-17 of 6 January 1978, known as the “Informatique et Libertés” law.

1. Data controller

The controller of the data collected on the website is:

• GALAND VANILLE, simplified joint-stock company (SAS) with share capital of 10 000 €
• Registered office: 128 rue La Boétie, 75008 Paris, France
• SIREN: 931 101 224 — SIRET (registered office): 931 101 224 00018
• APE/NAF code: 4639B
• RCS: Paris 931 101 224 (registered on 19 July 2024)
• Intra-community VAT number: FR 19 931 101 224
• “Galand Vanille” trademark registered with the INPI under no. 3300705
• President and publication director: Mr Paul Galand
• Telephone: +33 (0)6 27 33 49 69
• Email: contact@galand-vanille.com

GALAND VANILLE has not appointed a data protection officer (DPO). For any question relating to the processing of your personal data or to exercise your rights, you can write to us directly at contact@galand-vanille.com.

2. Personal data collected

We only collect the data strictly necessary for the purposes described below. Depending on how you use the website, we may process the following categories of data:

• Identity data: title, last name and first name.
• Contact details: email address, telephone number.
• Delivery and billing addresses: full postal address needed for shipping and for issuing the invoice.
• Order data: products ordered, amount, date, purchase history, order number and parcel tracking number.
• Payment data: payment is made by bank card (Carte Bleue, Visa, Mastercard via Société Générale) or Apple Pay. Your bank card data is processed directly and securely by the payment service provider; it is neither collected nor stored by GALAND VANILLE.
• Customer account data: if you create an account, your login credentials and the associated information (order history, saved addresses).
• Newsletter subscription data: your email address, when you consent to receive our marketing communications.
• Browsing data and cookies: IP address, browser and device type, pages viewed, connection data and session identifiers, collected via cookies and trackers (see the “Cookies and trackers” section).

3. Purposes and legal bases of processing

Your data is processed for specific purposes, each based on a legal basis provided for by the GDPR:

• Performance of the sales and delivery contract (processing your order, shipping, parcel tracking, invoicing, handling returns and the right of withdrawal) — legal basis: performance of the contract to which you are a party.
• Management of your customer account (creation, access and administration of your personal area) — legal basis: your consent when creating the account and our legitimate interest in making your purchases and the tracking of your orders easier. Creating an account is optional and is not required to place an order.
• Customer service and business relationship (responding to your requests, questions and complaints) — legal basis: performance of the contract or the legitimate interest of GALAND VANILLE in responding to its customers.
• Direct marketing and sending of the newsletter (offers, new products, information about our vanillas) — legal basis: your consent, which you can withdraw at any time.
• Compliance with our legal obligations (accounting and tax obligations, retention of invoices) — legal basis: legal obligation to which GALAND VANILLE is subject.
• Security and improvement of the website (fraud prevention, audience measurement, browsing optimization) — legal basis: legitimate interest of GALAND VANILLE, and your consent for cookies that are not strictly necessary.

4. Recipients of the data

Your personal data is intended for the authorized internal departments of GALAND VANILLE and is never sold to third parties. It may be disclosed, to the extent necessary, to the following recipients:

• GALAND VANILLE, the data controller, and its authorized staff.
• Shopify International Limited (Dublin, Ireland), which hosts the website and the online shop and acts as a processor within the meaning of the GDPR.
• The payment service provider, for the secure processing of your payments by bank card (via Société Générale) and Apple Pay.
• The carrier Colissimo / La Poste (registered Colissimo, Colissimo International), for the delivery and tracking of your parcels.
• Where applicable, our emailing service providers (sending the newsletter and transactional emails) and audience measurement providers, acting as processors.
• The administrative or judicial authorities, when required by law.

Each of our processors is contractually bound to guarantee a level of protection and security that complies with the GDPR.

5. Data transfers outside the European Union

Some of our service providers, in particular Shopify, may process or host data outside the European Union. In this case, these transfers are strictly regulated in order to guarantee a level of protection equivalent to that required within the European Union.

These safeguards are based in particular on the standard contractual clauses adopted by the European Commission and/or, where applicable, on the provider’s certification under the EU–US Data Privacy Framework or on any other transfer mechanism recognized by the applicable regulations. You can obtain a copy of the safeguards in place by writing to us at contact@galand-vanille.com.

6. Retention periods

Your data is kept only for as long as is necessary for the purposes for which it was collected, and is then archived or deleted:

• Order data and invoices: kept for 10 years from the end of the financial year, under our accounting and tax obligations.
• Data of prospects and inactive customers: kept for 3 years from your last contact with us (last purchase, click or request).
• Customer account data: kept for as long as your account is active; it is deleted when you ask for your account to be deleted.
• Cookies and trackers: the lifetime of cookies does not exceed 13 months; the data collected via these cookies is kept for a maximum of 25 months.

7. Your rights over your data

In accordance with the GDPR and the “Informatique et Libertés” law, you have the following rights over your personal data at any time:

• Right of access: obtain confirmation that your data is being processed and receive a copy of it.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: request the deletion of your data, within the limits provided for by law.
• Right to object: object to the processing of your data, in particular for direct marketing purposes.
• Right to restriction: request the temporary suspension of the processing of your data.
• Right to data portability: retrieve the data you have provided to us in a structured, machine-readable format.
• Right to set post-mortem instructions: decide what happens to your data after your death.

You can also withdraw your consent at any time when the processing is based on it (for example by unsubscribing from the newsletter via the link in each email).

To exercise these rights, simply write to us at contact@galand-vanille.com or by post to: GALAND VANILLE, 128 rue La Boétie, 75008 Paris, France. Proof of identity may be requested if there is reasonable doubt as to your identity.

If, after contacting us, you consider that your rights have not been respected, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

8. Cookies and trackers

When you browse www.galand-vanille.com, cookies and trackers may be placed on your device. They fall into three categories:

• Strictly necessary cookies: essential for the website and the shop to work (cart management, logging in to your account, payment security). They do not require your consent.
• Audience measurement cookies: help us understand how the website is used in order to improve it (pages visited, traffic statistics).
• Marketing cookies: allow us to offer you suitable content and offers and to measure the effectiveness of our campaigns.

Audience measurement and marketing cookies are only placed after your consent has been obtained, expressed via the cookie management banner displayed on your first visit. No cookie that is not strictly necessary is activated until you have given your agreement.

Withdrawing your consent is as easy as giving it. At any time, you can accept, refuse or customize cookies, and change your choices later by reopening the preference center via the permanent link “Manage my cookies” available at the bottom of every page of the website.

You can also configure your browser (Chrome, Safari, Firefox, Edge…) to block or delete cookies. However, refusing certain cookies may affect the proper functioning of some features of the website.

9. Data security

GALAND VANILLE implements appropriate technical and organizational measures to protect your personal data against any loss, alteration, disclosure or unauthorized access. In particular, the website is secured by an HTTPS (SSL/TLS certificate) encryption protocol, and payments are processed via banking service providers that comply with the security standards in force (PCI-DSS standard). Access to your data is strictly limited to authorized persons bound by confidentiality.

10. Changes to this policy

This privacy policy may change, in particular to take account of legal, regulatory or technical developments. The date of the last update appears at the top of this document. The applicable version is the one in force and published on the website at the time of your visit. We invite you to consult it regularly. In the event of a substantial change, we will inform you by any appropriate means.

11. Contact and mediation

For any question relating to this policy or to the exercise of your rights, you can contact us:

• By email: contact@galand-vanille.com
• By telephone: +33 (0)6 27 33 49 69
• By post: GALAND VANILLE, 128 rue La Boétie, 75008 Paris, France

In accordance with Articles L.612-1 and L.616-1 of the French Consumer Code, in the event of a dispute relating to an order that could not be resolved directly with our customer service, you have the right to use a consumer mediator free of charge with a view to an amicable settlement.

The competent consumer mediator is: currently being appointed. Their contact details (name, postal address and website) will be updated here as soon as they have been appointed.

You may also use the European Online Dispute Resolution platform (RLL/ODR) set up by the European Commission, available at: https://ec.europa.eu/consumers/odr.