Data Privacy Policy

In the course of its operations and in providing products and services (as defined in the Terms of Use), Filumena collects and processes the personal information of users of the website www.filumena.net (hereafter referred to as “the user”).

This Privacy Policy provides users with a concise overview of how Filumena processes personal data.

Filumena places great importance on protecting the privacy and confidentiality of user information. The company is committed to processing data in accordance with applicable laws, in particular Law No. 78-17 of January 6, 1978 on Information Technology, Data Files, and Civil Liberties (hereafter “Data Protection Law”) and the General Data Protection Regulation (EU Regulation 2016/679) (hereafter “GDPR”).


Definitions

Personal data: any information relating to an identified or identifiable person, directly or indirectly, by reference to an identifier or one or more factors specific to that person.

Processing of personal data: any operation performed on personal data, regardless of the method used—such as collection, storage, organization, adaptation, extraction, consultation, use, transmission, dissemination, integration, encryption, erasure, or destruction.

Cookie: a text file created when a user visits a website, storing information such as the name of the server that generated it, a unique identifier, and an expiration date. This information may be stored on the user’s device.

Data controller: Filumena, a single-member joint stock company with share capital of €5,000, registered with the Chamber of Commerce and Industry of Melun under number 902505445, headquartered at 2 rue du Haut Changis, 77210 Avon, France.


Data Collection and Processing

Data collected

When a user accesses this website and/or voluntarily submits information, their personal data will be processed. Filumena informs users that this data will be handled in accordance with GDPR and Law No. 78-17 of January 6, 1978, relating to:

  • Access data;
  • Personal data not classified as “special” under Article 9 of GDPR (identification, contact, payment data, IP address, purchase data);
  • Special categories of personal data under Article 9 of GDPR (data indirectly related to religious beliefs, purchases of religious articles or devotional objects).

The mandatory or optional nature of data (for registration or product/service delivery) is clearly indicated at the time of collection with an asterisk (*).

Additionally, some data may be collected automatically through user activity on the website (see section Cookies).


Purpose of data processing

Personal data collected by Filumena is necessary to perform contracts with users or to pursue legitimate business interests while respecting user privacy. Some data may be processed only with user consent.

The purposes include:

  • Commercial and accounting management;
  • Customer relationship and marketing management;
  • Fraud and abuse prevention (spam, impersonation, etc.);
  • Improving website user experience;
  • Integration with social media, advertising, statistics, contact management, messaging, email delivery, affiliate management, content display from other platforms, and product review handling;
  • More generally, any purpose described in Decision No. 2012-209 of June 21, 2012, defining standards for automated processing of personal data for user and customer management.

Data recipients

Personal data is processed for Filumena’s commercial and accounting operations. It may be transferred to Filumena’s subsidiaries or authorized third-party service providers for data processing.

Data may also be transferred to countries inside or outside the European Union. Filumena ensures adequate safeguards and compliance with applicable data protection laws.

Filumena does not sell, rent, or disclose personal data to third parties for marketing without explicit user consent.

Data may only be shared with third parties for non-marketing purposes in the following cases:

  • With the user’s consent;
  • Upon request from competent legal authorities, court orders, or legal disputes.

Detailed information on data processing

Analytics

These services allow Filumena to monitor and analyze website performance.

  • Plausible Analytics
    Open-source analytics tool compliant with GDPR and cookie-free. Installed and managed directly by Filumena.
    Data processed: website usage data
    Location: see “Hosting Services” below
    Privacy: No third-party data transfer

  • Mautic
    Open-source web analytics application, fully GDPR-compliant, managed internally by Filumena.
    Data processed: website usage data
    Location: see “Hosting Services” below


Contact management and email delivery

These services manage user names, emails, phone numbers, and related data for communication.

  • Sendinblue
    Email management service provided by Sendinblue – 7 rue de Madrid, 75008 Paris, France
    Data processed: email address, phone number, name
    Location: France – Privacy Policy

  • Mailjet
    Email management service provided by Mailjet – 4 rue Jules Lefebvre, 75009 Paris, France
    Data processed: email address, phone number, name
    Location: France – Privacy Policy


Payment management

These services allow Filumena to process payments securely.

Only necessary data for completing transactions is shared.


Hosting services


Email marketing (Filumena)

Filumena uses user data to promote its products and services.
Data processed: email address, name


Newsletter subscription (Filumena)

By subscribing to our newsletter, the user’s email address is added to a list for receiving news and updates related to Filumena and its subsidiaries.
Data processed: email address, name


Online sales of products and services (Filumena)

Personal data is used to deliver services or sell products, including payment and delivery.
Data processed: payment information depending on chosen payment method.


Data retention period

Personal data is retained as long as necessary for the purposes for which it was collected—typically for the duration of the customer relationship and five years thereafter, unless extended by user consent.
Data needed for legal or fiscal compliance is stored as required by law and may be disclosed to authorities when legally mandated.


Where applicable, users can request data portability or withdraw consent at any time.

Requests should be sent to:
📧 [email protected]
📬 Filumena SAS – Privacy Policy
19 rue du Président Franklin Roosevelt, 92340 Bourg-la-Reine, France

Requests are handled within 30 working days.

Users may unsubscribe from newsletters using the link in any email.
For complaints, users can contact the CNIL (www.cnil.fr).


Cookies

Filumena’s cookie policy is available here.


Security

Filumena implements strong technical and organizational measures to protect personal data, including:

  • Firewalls
  • Antivirus and intrusion detection systems
  • SSL/HTTPS/VPN encryption
  • Tier 3 and PCI DSS-compliant hosting providers
  • Secure access controls and password rotation for authorized staff and third parties

Security-related questions can be sent to [email protected].


Updates to this policy

Filumena reserves the right to modify this Privacy Policy to comply with new regulations.
Users will be notified at least 30 days in advance, when possible, via the website or email.


Contact

For any inquiries regarding this Privacy Policy, please contact:
📧 [email protected]
📬 Filumena SASU – Privacy Policy
19 rue du Président Franklin Roosevelt, 92340 Bourg-la-Reine, France


Version

Effective date: October 09, 2025