Data controller
The data controller is AUBRYMEDIA AUBRY MEDIA, 280 avenue de Verdun, 06700 Saint-Laurent-du-Var, France. For questions or requests about your data, email contact@spoolairsoft.com.
Data we use
Depending on how you use the website, we may process:
- data needed for an order or customer account: identity, email, delivery address, phone number and order history;
- data you voluntarily send by email or through a withdrawal request;
- technical data needed for security, the cart, authentication and website operation.
Spool does not store card details. They are processed by the payment provider selected at checkout.
Purposes and legal bases
- processing orders, payments, delivery, after-sales service and withdrawal requests: performance of the contract;
- issuing and keeping invoices and records: legal obligation;
- answering a message or support request: legitimate interest or pre-contractual measures;
- sending marketing communications when requested: consent, which can be withdrawn at any time.
Recipients and transfers
Data is accessible only to Spool and the providers needed to deliver the service: hosting and infrastructure, payment, delivery, transactional email and support. They use the data only for the requested services and under their data protection commitments.
Some technical providers may process data outside the European Union. When this happens, the transfer is protected by a GDPR-recognised mechanism, such as standard contractual clauses or an adequacy decision.
The Spool assistant is optional. Messages entered in the widget are sent to our server and then to the artificial intelligence provider needed to generate a reply. Do not enter personal or confidential data.
Retention periods
- order and billing data: for the commercial relationship, then archived for the applicable legal period, including ten years for accounting records;
- customer account data: until deletion or the applicable inactivity period;
- support and withdrawal requests: for the time needed to process them and then for evidence or dispute management;
- marketing data: three years from the last contact or purchase, unless opposed.
Cookies and local storage
The website does not use advertising cookies. Technical cookies needed for the cart, authentication, locale and security may be set without consent when strictly necessary for the requested service.
The assistant conversation history may remain in your browser local storage. You can delete it from your browser settings. No advertising cookie is installed for this feature.
Your rights
You may request access, correction, deletion, restriction or portability of your data. You may also object to processing based on legitimate interest and withdraw consent at any time.
To exercise your rights, email contact@spoolairsoft.com with the subject of your request. Proof of identity may be requested when needed to prevent disclosure to a third party.
You may also lodge a complaint with the French data protection authority, the CNIL.