Privacy policy
This policy describes how we process your personal data in accordance with the General Data Protection Regulation (GDPR — EU 2016/679).
Last updated · 11 June 2026
Data controller
VéloMalin, [ADDRESS]. Data Protection Officer (DPO): dpo@velomalin.com.
Data collected and purposes
Order data (identity, address, email): performance of the sales contract.
Browsing data (analytics cookies): site improvement, only after consent.
Newsletter (email): commercial communications, based on your consent.
Retention period
Order data: 5 years (accounting obligations). Marketing data: until consent is withdrawn, and at most 3 years after the last contact.
Your rights
You have the right to access, rectify, erase, port, restrict and object. To exercise them: dpo@velomalin.com. You may also lodge a complaint with the CNIL (www.cnil.fr).