Personal data
Privacy policy
How Valentia collects, uses, retains and protects personal data relating to the website, bookings, shop, partners and analytics tools.
Last updated: July 2026
Data controller
This privacy policy explains how VALENTIA SAS collects, uses and protects personal data processed in connection with the valentia.art website.
The data controller is VALENTIA SAS, a French simplified joint-stock company registered with the Paris Trade and Companies Register under number 977 492 776.
Contact: contact@valentia.art.
Data protection contact: Guillaume M., who can be reached at the same address.
Data collected
- Identification and contact data: surname, first name, email address, telephone number and postal address where necessary.
- Data relating to accounts, bookings, orders, contact requests and customer relationship management.
- Professional data provided by partners, including information needed to present their activity and verify their ability to offer experiences or products on VALENTIA.
- Payment data required to process transactions; VALENTIA does not retain complete bank card details.
- Technical data required for the website’s operation, security, audience measurement or compliance with legal obligations.
Purposes of processing
- Providing the services available on the website: accounts, bookings, orders, partner relations and support.
- Processing payments, invoices, any refunds and accounting obligations.
- Responding to requests received through forms, emails or user areas.
- Sending communications required to operate the service and, where applicable, authorised marketing communications.
- Securing the website, preventing fraud, improving the service and complying with applicable legal obligations.
Legal bases
- Performance of a contract or steps taken before entering into a contract, particularly for bookings, orders, accounts and partner relations.
- Compliance with legal obligations, particularly accounting, tax, invoicing and evidence-retention obligations.
- VALENTIA’s legitimate interests, particularly website security, fraud prevention, service improvement, request follow-up and internal management.
- Consent, particularly for certain marketing communications and advertising or analytics trackers that are not strictly necessary.
Recipients of the data
Data is accessible only to persons and service providers who need it for the purposes described in this policy.
- VALENTIA SAS and its authorised personnel.
- Partners, artisans or cultural sites concerned by a booking or order.
- Technical, payment, hosting, email, analytics or advertising service providers strictly necessary for the services offered.
- Administrative, judicial, tax or regulatory authorities where required by law.
Payments
Payments are processed through Stripe. VALENTIA does not store complete bank card details.
Available payment methods may include bank cards, Apple Pay and Google Pay, depending on the devices, browsers and availability conditions of the relevant providers.
Stripe may process certain data required for fraud prevention, payment security, regulatory obligations and payment operations.
Partner documents
When registering or validating certain partners, VALENTIA may request information or supporting documents to verify their professional activity, the consistency of the proposed offering and, where necessary, their ability to receive members of the public.
These materials are used solely to assess and validate the application, manage the partner relationship and comply with applicable obligations.
Retention periods
- Account data: for the lifetime of the account, then for up to 3 years after the last activity or account closure, unless a contrary legal obligation applies.
- Order, booking, invoice and payment data: for up to 10 years where it is subject to accounting, tax or evidentiary obligations.
- Contact data and incoming requests: for up to 3 years after the last exchange.
- Newsletter data: until consent is withdrawn or for 3 years after the last active contact.
- Partner documents: for the duration of the contractual relationship, then for up to 5 years after it ends where necessary for evidence, dispute management or compliance with legal obligations.
- Technical and security logs: for up to 12 months, unless longer retention is required in the event of an incident, fraud, dispute or legal obligation.
- Audience measurement and attribution data: for a limited period proportionate to the intended purpose, according to the settings of the tools used and applicable obligations.
Cookies and trackers
The website may use cookies or trackers required to operate the service, particularly for authentication, security, the shopping basket, language selection, user sessions or the proper technical operation of the website.
The website may also use audience measurement or advertising trackers to assess the performance of content and campaigns.
Where these trackers are not necessary to operate the service, they are subject to the user’s prior consent where required by law.
Users may also manage certain trackers through their browser settings or the opt-out tools offered by the relevant providers.
Transfers outside the European Union
Some service providers used by VALENTIA may be located outside the European Union or belong to international groups.
Where data is transferred outside the European Union, VALENTIA ensures that it relies on safeguards provided for by applicable law, including adequacy decisions, standard contractual clauses or protection mechanisms offered by the relevant providers.
Security
VALENTIA implements technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
These measures include access controls, authentication mechanisms, restrictions on access to sensitive data, secure payment processing and development practices intended to reduce security risks.
However, no transmission or storage of data can be guaranteed to be completely secure.
Your rights
Under applicable law, you may request access to, rectification or erasure of your data, restriction of or objection to its processing, or portability of your data where those rights apply.
You may also withdraw your consent where processing is based on consent.
To exercise your rights, write to: contact@valentia.art.
Proof of identity may be requested where necessary to prevent data from being disclosed to an unauthorised person.
You also have the right to lodge a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr.
Changes to this policy
VALENTIA may amend this privacy policy to reflect changes to the website, the services offered, the tools used or applicable law.
The applicable version is the version published on the website on the date it is viewed.