Privacy Policy
Last updated: October 2025
Diasporarecords.com attaches the highest importance to the protection of your personal data. We are committed to maintaining a clear and transparent privacy policy that complies with the European Regulation (EU) 2016/679 known as the General Data Protection Regulation (GDPR), as well as the French Data Protection Act of January 6, 1978, as amended on June 22, 2018.
We may update this Privacy Policy from time to time if our methods of processing personal data change. If that happens, we will inform you within a reasonable period before the new version becomes effective, either by email or by a notice on our website.
A. Basic Information
1. Definitions
When used in this Policy, capitalized terms have the following meanings:
“Buyer” means any person who has created a user account on the website in order to purchase products offered for sale.
“Information” means any personal data relating to you, whether it directly or indirectly identifies you.
“Diasporarecords.com,” “we,” “us,” or “our” refers to the company identified in the Legal Notices section.
“Website” refers to our online store, available at www.diasporarecords.com, where Buyers can purchase products.
“Customer Account” refers to the personalized account created by a Buyer during registration.
“Policy” refers to this Privacy Policy.
“Prospect” refers to any person interested in our Services but not yet registered on the Website.
“Services” refers to the online sales and intermediation services we provide, as described in the General Terms of Use.
2. About Us
Diasporarecords.com is the commercial name of a French personal company registered by Grégoire de Azambuja Villanova Neto in the Paris Trade and Company Registry under number RCS Paris 453550469, with its headquarters at 84 rue Georges Lardennois, 75019 Paris, France.
3. How to Contact Us
For any question regarding the protection of your personal data, please contact us by email at: diasporarecords@gmail.com
4. When Does This Policy Apply?
This Policy applies whenever we collect and process your personal data, including:
- When you purchase products or use services on our Website, as described in section B (“Policy for Buyers”).
- When you browse our Website, as described in section C (“Cookies Policy”).
B. Policy for Buyers
This section applies to Information we collect and process when you are registered as a Buyer on our Website.
1. Information We Collect
We may collect different categories of personal Information, provided voluntarily or automatically:
Identity data: name, title, postal addresses (billing and delivery), telephone number, email address, and customer identification code.
Bank data: for transactions handled through PayPal, only necessary payment-related identifiers are transmitted securely to the payment processor. We do not store or access your full payment information.
Account data: login, encrypted password.
Usage data: data related to the operation of your account and actions performed on the Website (logins, order confirmations, timestamps, etc.).
Technical data: IP address, browser type, connection logs, device type, and time of access.
2. Purposes and Legal Bases for Processing
We use your personal data for specific purposes and for limited periods of time, according to the legal bases defined by the GDPR:
Performance of a contract: to provide our online sales services, process your orders, and manage your Customer Account.
Legal obligation: to comply with accounting and legal record-keeping requirements.
Legitimate interest: to ensure the proper functioning and security of the Website, provide customer support, and maintain proof of transactions.
Consent: when you voluntarily subscribe to communications such as newsletters or surveys.
Commercial and accounting records may be kept for up to ten (10) years as required by French law. Data used for customer relationship management is retained for the duration of the contractual relationship. Inactive Buyer accounts are deleted after three (3) years of inactivity, following two advance notifications sent one month before deletion.
C. Cookies Policy
This section explains how we use cookies when you browse our Website, whether as a Buyer or as a visitor.
1. What Are Cookies?
Cookies are small text files stored on your device by your web browser at the request of a website. They allow us to ensure that our Website functions properly and securely.
2. Cookies We Use
We only use strictly necessary cookies required for the operation of our Website and our Drupal Commerce shop, such as session management, cart persistence, and protection against CSRF attacks.
We do not use advertising, marketing, or third-party tracking cookies. We do not sell or share any personal data collected via cookies with third parties.
3. Managing Cookies
You can configure your browser to refuse non-essential cookies. However, certain essential cookies are required for the Website to function properly and cannot be disabled without affecting your user experience.
D. Information Applicable to All Users
1. Who Can Access Your Information?
Our internal team: members of our technical and support teams may access your data when necessary for customer assistance or Website maintenance.
Service providers: we may share limited data with trusted partners strictly for the purpose of providing our services (e.g., website hosting, payment processing through PayPal). These providers act under contract and in compliance with data protection rules.
Authorities: we may disclose information to administrative or judicial authorities if required by applicable law or regulation.
2. Data Storage Location
All personal data collected through Diasporarecords.com is hosted and stored securely in France.
3. Your Rights
Under the GDPR, you have the following rights concerning your personal data:
Right of access: obtain confirmation and a copy of the data we hold about you.
Right of rectification: correct inaccurate or incomplete data.
Right to object: oppose processing based on our legitimate interests.
Right to withdraw consent: withdraw your consent for any processing based on it, at any time.
Right to erasure (“right to be forgotten”): request the deletion of your personal data when legally possible.
Right to restriction: request that processing be temporarily limited in certain cases.
Right to data portability: receive your personal data in a structured, commonly used format or have it transferred to another controller.
Right to lodge a complaint: if you believe your rights have been violated, you may contact the Commission Nationale de l’Informatique et des Libertés (CNIL) via www.cnil.fr.
4. How to Exercise Your Rights
You may exercise your rights at any time by contacting us at diasporarecords@gmail.com. We will respond as soon as possible, and in any case within one month. If necessary, we may ask for proof of identity to ensure the security of your personal data.
Security
Our Website uses the HTTPS protocol to encrypt communications, ensure authentication, and protect the integrity of data exchanged between the Website and its users.
Online payments are processed exclusively through PayPal, which provides its own secure and encrypted payment interface (SSL). Diasporarecords.com does not store or have access to your full payment details.
