1. Who we are
This website is operated by PNJ, a French company registered under SIREN 523 826 048, whose registered address is:
PNJ is the data controller within the meaning of the General Data Protection Regulation (GDPR — Regulation EU 2016/679). Julien Bel is the designated person responsible for data protection.
2. Data we collect
Data you provide directly
- Contact form : first name, last name, email address, message content
- Newsletter subscription : email address
Data collected automatically
- Navigation data : pages visited, time spent, referral source
- Technical data : browser type, operating system, IP address (anonymised)
- Cookies : see section 8 for full details
We do not collect payment information. All purchases are processed directly on Amazon's platform, which applies its own privacy policy.
3. Why we collect it
- Responding to your messages via the contact form
- Sending newsletters and promotional offers (with your consent)
- Improving our website through audience analytics
- Measuring advertising performance via Meta Pixel and Google Analytics
- Complying with legal obligations applicable to our activity
4. Legal basis
- Consent — newsletter subscription, advertising cookies, analytics cookies
- Legitimate interest — improving website performance, responding to enquiries
- Legal obligation — accounting records, legal compliance
You may withdraw your consent at any time without this affecting the lawfulness of processing based on consent before withdrawal.
5. Data sharing
We do not sell your personal data to any third party. We may share your data with the following service providers, solely for the purposes described above:
- Google Analytics (Google LLC) — audience measurement. Data may be transferred to the United States under Standard Contractual Clauses.
- Meta Pixel (Meta Platforms) — advertising performance measurement. Data may be transferred to the United States under Standard Contractual Clauses.
- Email service provider — newsletter sending
All processors are bound by data processing agreements and are required to process your data only on our documented instructions.
6. Retention period
- Contact messages : 3 years from last contact
- Newsletter subscribers : until unsubscription or 3 years of inactivity
- Analytics data : 26 months (Google Analytics default)
- Accounting records : 10 years as required by French law
7. Your rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access — obtain a copy of the data we hold about you
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restriction — limit how we process your data
- Right to portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interest
- Right to withdraw consent — at any time for consent-based processing
To exercise any of these rights, contact us at contact@luna-essentials.net. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Cookies
This website uses cookies. Please refer to our Cookie Policy for full details on the cookies we use, their purpose, and how to manage your preferences.
