Privacy Policy

Data Controller

• NOEMA, SARL publishing the Antiks service
• Email: contact@antiks.fr
• Registered office: 173 rue de Courcelles, 75017 Paris, France

What data we collect

• Account data: name, email, password (hashed with bcrypt)
• Catalog data: photos, descriptions, prices of furniture and antiques
• Police book data: identity of sellers/buyers, object descriptions, prices (regulatory requirement under French law)
• Billing data: name, email, company, invoice numbers, amounts, VAT
• Technical data: activity logs, IP address, session cookies, CSRF tokens
• Website analytics (Plausible): pages viewed, referring site, country, device and browser type, clicks on trial, demo and contact buttons. No cookies, no advertising trackers, IP addresses are not stored; aggregated statistics only
• Website forms (contact, fair submission or verification, event alerts): name, email, phone, message, kept 3 years after the last contact (alerts: until you unsubscribe)
• Demo booking (Setmore): name, email, phone, chosen time slot, kept 3 years after the last contact

Third-party recipients

Data security

• Passwords hashed with bcrypt
• Marketplace credentials encrypted with Fernet (AES-128-CBC + HMAC-SHA256)
• Communications encrypted via HTTPS
• Data isolation per user
• Police book with SHA-256 hash chain (guaranteed integrity)

Your rights (GDPR)

Under the GDPR (Articles 15 to 22), you have the following rights:

• Access: obtain a copy of all your data
• Rectification: correct inaccurate data
• Erasure: request deletion (except legal obligations: invoices 10 years, police book 6 years)
• Portability: receive your data in JSON format
• Objection: object to processing based on legitimate interest
• Restriction: request processing to be frozen
• Withdraw consent: at any time for consent-based processing

To exercise these rights: send an email to contact@antiks.fr with proof of identity.

Response time: 30 days maximum.

Complaint: you may file a complaint with the CNIL (www.cnil.fr).

Third-party data rights (police book)

Individuals whose data is recorded in a user's police book have the same rights of access and rectification. However, police book data cannot be deleted (minimum 6-year legal retention requirement).

Data transfers outside the EU

• Anthropic API (USA): furniture photos and descriptions for AI generation - standard contractual clauses
• International marketplaces (eBay USA, Ricardo Switzerland, Etsy USA, etc.): listings, photos, prices
• Browser push services (Google, Apple, Mozilla - USA): notification endpoints
• EmailJS (servers in the USA): website form content, standard contractual clauses
• Setmore (Google Cloud): online demo bookings

Website analytics (Plausible) stay in France: no visit data leaves our server.

Etsy API Disclosure

This application uses the Etsy API but is not endorsed or certified by Etsy, Inc. The term 'Etsy' is a trademark of Etsy, Inc.

Data accessed via the Etsy API is used solely for the purpose of managing the user's Etsy listings through Antiks. No Etsy data is shared with third parties or used for purposes other than those described in this privacy policy.

Changes to this policy

This policy may be updated. Users will be notified by email of any substantial changes.