Privacy Policy

Last updated: June 17, 2026

The French version of this policy is the authoritative version.

This policy explains which personal data is collected on the astro.arnaudgeoffroy.be website, for what purpose, on what legal basis, with whom it is shared and what your rights are. It applies in accordance with the General Data Protection Regulation (GDPR) and Belgian law.

1. Data controller

Arnaud Geoffroy Astrophoto
Sole proprietorship
Company number: BE 1027.392.623
Address: 19a rue Amédé Bracke, 1950 Kraainem, Belgium
Email: contact@arnaudgeoffroy.be
Website: https://astro.arnaudgeoffroy.be

2. Data collected, purposes and legal bases

2.1 Order management

When you place an order, the following are collected: first and last name, delivery address, email address, phone number and order details.

  • Purpose: processing, production, delivery and follow-up of your order.
  • Legal basis: performance of the contract (Art. 6.1.b GDPR) and legal accounting and tax obligations (Art. 6.1.c GDPR).
  • Retention: 10 years, in accordance with Belgian accounting obligations.

2.2 Payment

Payment is securely processed by Stripe. Your card details are entered directly in Stripe's secure environment and are never stored by the Seller.

  • Legal basis: performance of the contract (Art. 6.1.b GDPR).

2.3 Audience measurement (cookie-free)

The site uses Umami, a privacy-friendly audience-measurement tool, to produce aggregated, anonymous traffic statistics (page views, source, country, device type). Umami uses no cookies and no persistent identifier that could track you, and does not allow you to be re-identified. No data is used for advertising or shared for that purpose.

  • Purpose: understanding site usage in order to improve it.
  • Legal basis: legitimate interest (Art. 6.1.f GDPR). As no cookie or persistent identifier is used, this measurement is exempt from consent.
  • Processor: Umami Software, Inc.
  • Retention: aggregated, anonymous data.

2.4 Push notifications

If you explicitly request it (by clicking "Subscribe" and then allowing notifications in your browser), the site may send you notifications to inform you of new publications. The technical subscription provided by your browser (a delivery address and encryption keys) is then stored on our own servers. This service is self-hosted: no data is shared with a third-party provider for this purpose.

  • Purpose: informing you of new images and news.
  • Legal basis: your consent (Art. 6.1.a GDPR), given via your browser's notification permission.
  • Hosting: our servers (OVH, France). No third-party notification provider.
  • Withdrawal: at any time via your browser's notification settings (revoking the permission).

2.5 Contact

If you contact us by email or via social media, your contact details and the content of your message are used solely to reply to you.

  • Legal basis: legitimate interest in answering your request (Art. 6.1.f GDPR).

2.6 Site functionality (local storage)

The site stores certain information in your browser's local storage (cart, liked images, notification preference). This information stays on your device, is not tracking cookies and is not shared with third parties.

3. Cookies and trackers

The site uses no tracking cookies or advertising trackers, and therefore displays no consent banner. Audience measurement (Umami) works without cookies or persistent identifiers. The only information stored on your device is kept in the browser's local storage and is strictly necessary for the site to work (cart, liked images, notification preference); it does not require consent.

4. Recipients and processors

Your data is never sold. It is shared only with the providers necessary to deliver the service:

  • WhiteWall (GmbH, Germany) — production and shipping of the prints.
  • Stripe — secure payment processing.
  • Umami (Umami Software, Inc.) — cookie-free audience measurement.
  • OVH (OVHcloud, France) — technical hosting of the site and of notification subscriptions.

5. Transfers outside the European Union

Our audience-measurement tool (Umami) may process some data outside the European Union, in particular in the United States. These transfers are covered by appropriate safeguards (European Commission standard contractual clauses). Push notifications are handled on our own servers in France, with no transfer outside the EU.

6. Your rights

Under the GDPR, you have the following rights: access, rectification, erasure, restriction of processing, objection, portability, and withdrawal of your consent at any time (without affecting processing already carried out).

To exercise your rights, contact: contact@arnaudgeoffroy.be.

7. Complaint

If you believe that the processing of your data does not comply with the regulations, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA):

Data Protection Authority
Rue de la Presse 35, 1000 Brussels
contact@apd-gba.be — www.autoriteprotectiondonnees.be

8. Changes to this policy

This policy may be updated to reflect technical or legal developments. The applicable version is the one in force on the date of your visit.

9. Contact

Email: contact@arnaudgeoffroy.be
Address: 19a rue Amédé Bracke, 1950 Kraainem, Belgium