1. Purposes, data processed, and legal bases
The entity responsible for processing personal data is the sole proprietorship Karving12, whose contact details are provided in the website's legal notice.
Personal data collected on the Karving12 website is processed exclusively for the following purposes:
- respond to requests made via the contact form
- manage orders, billing, and sales tracking
- handle administrative and accounting management
- analyze overall website traffic
- ensure the security of the site and prevent abuse or attempts at fraud
Processed data
Depending on how the site is used, the data that may be processed includes:
- identity (last name, first name)
- contact details (email address, postal address)
- order and billing information
- technical connection and browsing data (IP address, log data, browser information), collected automatically by the website's hosting and technical tools
Karving12 only collects data that is strictly necessary for the purposes described above.
Legal basis for processing
The processing of personal data is based on the following legal grounds, in accordance with the GDPR:
- performance of a contract
- compliance with legal obligations
- the legitimate interest of the data controller
- user consent when required
2. Contact form
The Karving12 website provides a contact form that allows users to submit a request for information.
Data collected
The data collected via the form are:
- full name
- email address
- message content
No other personal data is requested.
Use of data
The data transmitted via the form is used solely for:
- respond to messages and requests for information
- monitor exchanges
They are never used for unsolicited commercial purposes or passed on to third parties.
Storage and preservation
Messages are sent by email to the website's contact address:
contact@karving12.com
Data is not intentionally stored in the site's database. However, temporary technical data may be processed by the tools necessary for the transmission of messages.
Legal basis for processing
Treatment is based on:
- user consent
- Karving12's legitimate interest in responding to messages received
3. Creating a user account
Not applicable.
The Karving12 website does not offer user account creation.
No personal data is collected or stored for this purpose.
4. Orders and billing – WooCommerce
The Karving12 website offers online sales of products via the WooCommerce solution.
Data collected during orders
When placing an order, the following data is collected:
- full name
- email address
- billing address
- shipping address (if applicable)
- order information
The order is placed without creating a user account.
When fulfilling orders, certain personal data strictly necessary for delivery is transmitted to the carrier responsible for shipping.
This data is used exclusively for the purposes of shipping and tracking the order.
Billing
Invoicing is managed by a standalone application separate from WordPress and WooCommerce: Tiime Invoice.
The data required for invoicing is transmitted in accordance with legal requirements.
Legal basis for processing
Treatment is based on:
- the performance of the sales contract
- compliance with legal accounting and tax obligations
5. Newsletter
Not applicable.
The Karving12 website does not offer a newsletter service.
No personal data is collected or processed for this purpose.
6. Reviews and testimonials
Not applicable at this stage.
The Karving12 website does not collect or publish customer reviews or testimonials via an automated system.
7. Visitor statistics
The Karving12 website does not use any voluntary traffic statistics tools such as third-party analytics services.
However, technical navigation data may be collected automatically by the tools necessary for the operation of the site (hosting, security, cookie management).
Legal basis for processing
Treatment is based on:
- on user consent when required
- or on legitimate interest limited to technical and security requirements
8. Cookies and trackers
The Karving12 website uses a cookie management tool that allows users to manage their preferences.
Types of cookies
- Functional cookies: necessary for the proper functioning of the site
- Statistical cookies: used only when measurement tools are activated and after consent has been given.
To date, no third-party statistical tracking tools are enabled.
Consent management
During their first visit, users can accept, refuse, or configure non-essential cookies via the banner provided for this purpose.
These choices can be changed at any time.
9. Media and embedded content
The site may include embedded content from third-party platforms, including videos.
This content may collect data, use cookies or tracking tools, in accordance with its own privacy policy.
The display of this content may be subject to the user's consent via the cookie management tool.
10. Payment Service Provider (PSP)
Payments are processed by an external payment service provider: PayPal.
Karving12 never has access to users' banking information and does not store it.
Legal basis for processing
Treatment is based on:
- the performance of the sales contract
- compliance with legal obligations related to secure payment
11. Recipients and data transfers
The data is intended exclusively for Karving12 and strictly necessary technical service providers.
Recipients
- manager of the Karving12 website,
- technical service providers (hosting, maintenance),
- payment and billing service providers,
- carrier responsible for delivering orders (in particular DHL), only for data strictly necessary for shipping (name, delivery address, contact details).
Transfers outside the European Union
Some service providers, particularly international carriers, may be located outside the European Union.
Data transfers are governed by appropriate safeguards provided for by applicable regulations, in particular through the use of standard contractual clauses or mechanisms recognized by the European Commission.
12. Data security
Karving12 implements appropriate technical and organizational measures to protect personal data.
These measures include, in particular:
- access security
- regular updates
- professional hosting
- devices to protect against unauthorized access
13. Data retention periods
Data is retained only for as long as necessary for the purposes pursued.
Contact information
Kept during the processing of the request and follow-up correspondence.
Order and billing information
Kept for the legal period in force, currently 10 years.
Technical data
Kept for a limited and proportionate period of time.
14. Your rights (GDPR)
You have the following rights:
- right of access
- right of rectification
- right to erasure
- right to restriction of processing
- right to object
- right to portability, where applicable
Exercising your rights
Contact: contact@karving12.com
You may also contact the CNIL in the event of a complaint.
15. Policy update
This policy may be amended at any time to remain compliant with legal or technical developments.
Last update: January 2026