Data Privacy Policy
In the course of its operations and in providing products and services (as defined in the Terms of Use), Filumena collects and processes the personal information of users of the website www.filumena.net (hereafter referred to as “the user”).
This Privacy Policy provides users with a concise overview of how Filumena processes personal data.
Filumena places great importance on protecting the privacy and confidentiality of user information. The company is committed to processing data in accordance with applicable laws, in particular Law No. 78-17 of January 6, 1978 on Information Technology, Data Files, and Civil Liberties (hereafter “Data Protection Law”) and the General Data Protection Regulation (EU Regulation 2016/679) (hereafter “GDPR”).
Definitions
Personal data: any information relating to an identified or identifiable person, directly or indirectly, by reference to an identifier or one or more factors specific to that person.
Processing of personal data: any operation performed on personal data, regardless of the method used—such as collection, storage, organization, adaptation, extraction, consultation, use, transmission, dissemination, integration, encryption, erasure, or destruction.
Cookie: a text file created when a user visits a website, storing information such as the name of the server that generated it, a unique identifier, and an expiration date. This information may be stored on the user’s device.
Data controller: FILUMENA ART S.A.S.U, a single-member joint stock company with share capital of €5,000, registered as 902 505 445 RCS Nanterre, SIRET 902 505 445 00020, headquartered at 19 rue du Président Franklin Roosevelt, 92340 Bourg-la-Reine, France.
Data Collection and Processing
Data collected
When a user accesses this website and/or voluntarily submits information, their personal data will be processed. Filumena informs users that this data will be handled in accordance with GDPR and Law No. 78-17 of January 6, 1978, relating to:
- Access data;
- Personal data not classified as “special” under Article 9 of GDPR (identification, contact, payment data, IP address, purchase data);
- Special categories of personal data under Article 9 of GDPR (data indirectly related to religious beliefs, purchases of religious articles or devotional objects).
The mandatory or optional nature of data (for registration or product/service delivery) is clearly indicated at the time of collection with an asterisk (*).
Additionally, some data may be collected automatically through user activity on the website (see section Cookies).
Purpose of data processing
Personal data collected by Filumena is necessary to perform contracts with users or to pursue legitimate business interests while respecting user privacy. Some data may be processed only with user consent.
The purposes include:
- Commercial and accounting management;
- Customer relationship and marketing management;
- Fraud and abuse prevention (spam, impersonation, etc.);
- Improving website user experience;
- Integration with social media, advertising, statistics, contact management, messaging, email delivery, affiliate management, content display from other platforms, and product review handling;
- More generally, any purpose described in Decision No. 2012-209 of June 21, 2012, defining standards for automated processing of personal data for user and customer management.
Data recipients
Personal data is processed for Filumena’s commercial and accounting operations. It may be transferred to Filumena’s subsidiaries or authorized third-party service providers for data processing.
Data may also be transferred to countries inside or outside the European Union. Filumena ensures adequate safeguards and compliance with applicable data protection laws.
Filumena does not sell, rent, or disclose personal data to third parties for marketing without explicit user consent.
Data may only be shared with third parties for non-marketing purposes in the following cases:
- With the user’s consent;
- Upon request from competent legal authorities, court orders, or legal disputes.
Detailed information on data processing
Analytics
These services allow Filumena to monitor and analyze website performance.
-
Plausible Analytics
Open-source analytics tool compliant with GDPR and cookie-free. Installed and managed directly by Filumena.
Data processed: website usage data
Location: see “Hosting Services” below
Privacy: No third-party data transfer -
Mautic
Open-source web analytics application, fully GDPR-compliant, managed internally by Filumena.
Data processed: website usage data
Location: see “Hosting Services” below
Contact management and email delivery
These services manage user names, emails, phone numbers, and related data for communication.
-
Sendinblue
Email management service provided by Sendinblue – 7 rue de Madrid, 75008 Paris, France
Data processed: email address, phone number, name
Location: France – Privacy Policy -
Mailjet
Email management service provided by Mailjet – 4 rue Jules Lefebvre, 75009 Paris, France
Data processed: email address, phone number, name
Location: France – Privacy Policy
Payment management
These services allow Filumena to process payments securely.
- PayPal (PayPal Inc.) – Privacy Policy
- Braintree (Braintree Inc.) – Privacy Policy
- Stripe (Stripe Inc.) – Privacy Policy
Only necessary data for completing transactions is shared.
Hosting services
-
Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
Privacy Policy: https://www.hetzner.com/legal/privacy-policy -
Hostinger UAB
Jonavos g. 60C, 44192 Lithuania
Privacy Policy: https://www.hostinger.com/legal/privacy-policy
Email marketing (Filumena)
Filumena uses user data to promote its products and services.
Data processed: email address, name
Newsletter subscription (Filumena)
By subscribing to our newsletter, the user’s email address is added to a list for receiving news and updates related to Filumena and its subsidiaries.
Data processed: email address, name
Online sales of products and services (Filumena)
Personal data is used to deliver services or sell products, including payment and delivery.
Data processed: payment information depending on chosen payment method.
Data retention period
Personal data is retained as long as necessary for the purposes for which it was collected—typically for the duration of the customer relationship and five years thereafter, unless extended by user consent.
Data needed for legal or fiscal compliance is stored as required by law and may be disclosed to authorities when legally mandated.
Where applicable, users can request data portability or withdraw consent at any time.
Requests should be sent to:
📧 privacy@filumena.net
📬 FILUMENA ART S.A.S.U – Privacy Policy
19 rue du Président Franklin Roosevelt, 92340 Bourg-la-Reine, France
Requests are handled within 30 working days.
Users may unsubscribe from newsletters using the link in any email.
For complaints, users can contact the CNIL (www.cnil.fr).
Cookies
Filumena’s cookie policy is available here.
Security
Filumena implements strong technical and organizational measures to protect personal data, including:
- Firewalls
- Antivirus and intrusion detection systems
- SSL/HTTPS/VPN encryption
- Tier 3 and PCI DSS-compliant hosting providers
- Secure access controls and password rotation for authorized staff and third parties
Security-related questions can be sent to privacy@filumena.net.
Updates to this policy
Filumena reserves the right to modify this Privacy Policy to comply with new regulations.
Users will be notified at least 30 days in advance, when possible, via the website or email.
Contact
For any inquiries regarding this Privacy Policy, please contact:
📧 privacy@filumena.net
📬 FILUMENA ART S.A.S.U – Privacy Policy
19 rue du Président Franklin Roosevelt, 92340 Bourg-la-Reine, France
Version
Effective date: October 09, 2025