Privacy Policy
Last updated: June 4, 2026
This privacy policy describes how the personal data of visitors and users of the website www.enricoserafini.com is collected, used and protected.
The website is dedicated to presenting the world, creations, collections and, where applicable, products and services offered under the Enrico Serafini brand.
1. Data controller
The controller of the personal data collected on the website is:
APENOR
A simplified joint-stock company (SAS) with a share capital of 12,500 euros
Registered office: 91, rue du Faubourg Saint-Honoré – 75008 PARIS
Registered with the Paris Trade and Companies Register under number 985.348.895
Email: contact@enricoserafini.com
Hereinafter referred to as "the Company".
2. Personal data that may be collected
2.1. Data submitted via a contact form
When you contact the Company through the website, the following data may be collected:
- last name and first name;
- email address;
- telephone number, when requested;
- company or organization, when provided;
- subject and content of your message;
- any information voluntarily provided in your request.
2.2. Data relating to a newsletter subscription
When this feature is offered and you subscribe to a newsletter or to commercial communications, the Company may collect:
- email address;
- last name and first name, when requested;
- proof and date of your consent;
- data relating to the sending of and interaction with communications, where the tool used allows it.
2.3. Browsing data and technical data
During your browsing, certain technical data may be collected, in particular:
- IP address;
- browser type, device and operating system;
- pages viewed, date and time of connection;
- data relating to cookies and the choices expressed;
- technical logs necessary for the security and proper functioning of the website.
2.4. Data related to an order or a customer relationship
This section applies only if the website subsequently allows online sales or the placing of orders.
In this case, the Company may collect the customer's identity and contact details, billing and delivery addresses, order data, exchanges with customer service as well as the elements necessary for invoicing and accounting.
Complete banking details are in principle processed directly by the secure payment provider and are not retained by the Company, subject to the system actually adopted.
3. Purposes and legal bases for processing
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Respond to requests sent via the contact form | Identity, contact details, message content | Legitimate interest and/or pre-contractual measures |
| Manage commercial exchanges or information requests | Identity, contact details, history of exchanges | Legitimate interest or pre-contractual measures |
| Send a newsletter or promotional communications | Email address, proof of consent | Consent where required |
| Ensure the security, maintenance and proper functioning of the website | IP address, technical logs, connection data | Legitimate interest |
| Measure audience and improve browsing | Browsing data and cookies | Consent, unless an exemption applies |
| Manage orders, if a shop is enabled | Customer, delivery and billing data | Performance of the contract and legal obligations |
4. Mandatory or optional nature of the data
The fields identified as mandatory in the forms are necessary to enable the Company to process your request or to provide the requested service. In the absence of completion of the mandatory fields, the Company may be unable to respond to your request or to provide a requested service. The other information is optional.
5. Recipients of the data
The data collected is intended for authorized persons within the Company, solely within the scope of their duties and for the purposes described in this policy.
It may also be transmitted to the service providers acting on behalf of the Company, to the extent necessary for their assignments:
- website host: Vercel Inc. (vercel.com);
- development provider: E. Djavid
- maintenance or security provider: Axiom Information;
- audience measurement provider: none (the website does not use any analytics tool);
Personal data is neither sold nor transferred to third parties for commercial purposes without an appropriate legal basis.
6. Data transfers outside the European Union
Certain technical service providers that may be used on the website, in particular for statistics, newsletters, the display of content from social networks, the broadcasting of videos or advertising, may process data from a country located outside the European Union.
Where such transfers exist, the Company ensures that they are governed in accordance with the applicable regulations, in particular by means of an adequacy decision, standard contractual clauses or appropriate safeguards.
Service providers concerned: Vercel Inc. (website hosting) and Web3Forms (delivery of contact-form messages). Where these providers process data outside the European Union, such transfers are governed by the European Commission's Standard Contractual Clauses.
7. Retention periods
| Data category | Planned retention period |
|---|---|
| Contact requests from a prospect | Period necessary for processing, then up to 3 years from the last relevant contact |
| Data relating to a customer | Duration of the contractual relationship then applicable legal periods |
| Data used for commercial prospecting purposes | Until withdrawal of consent or, at most, 3 years from the last relevant contact |
| Newsletter subscription | Until unsubscription or withdrawal of consent, depending on the system adopted |
| Cookie choices | In principle 6 months, depending on the management tool used |
| Technical security logs | Limited period, no longer than necessary for the security of the website |
8. Data security
The Company implements appropriate technical and organizational measures in order to protect personal data against unauthorized access, loss, alteration, disclosure or destruction.
These measures may in particular include securing administration access, the use of the HTTPS protocol, restricting access to authorized persons only, regularly updating technical components and backing up the website where applicable.
Despite the precautions taken, no computer system can guarantee absolute security.
9. Your rights
In accordance with the applicable regulations on the protection of personal data, you have, depending on the processing concerned:
- a right of access to your personal data;
- a right to rectification of inaccurate or incomplete data;
- a right to erasure of your data;
- a right to restriction of processing;
- a right to object, in particular to commercial prospecting;
- a right to portability, where applicable;
- the right to withdraw your consent at any time where the processing is based on it;
- the right to set directives concerning the fate of your data after your death, under the conditions provided for by French regulations.
You may exercise your rights by sending your request to:
APENOR
Address: 91, rue du Faubourg Saint-Honoré – 75008 PARIS
Email: contact@enricoserafini.com
In order to guarantee the confidentiality of your data, the Company may request proof of identity only where this is necessary to verify the identity of the requester.
10. Complaint to the CNIL
You also have the right to lodge a complaint with the French supervisory authority:
Commission Nationale de l'Informatique et des Libertés - CNIL 3 place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07 - France
11. Cookies and trackers
The website may use cookies or trackers necessary for its operation as well as, subject to your consent where required, audience measurement, external content or advertising cookies.
You can consult the detailed information relating to the cookies used on the website and change your choices at any time from the Cookie Policy page or from the "Manage my cookies" link accessible in the footer.
12. Changes to the privacy policy
The Company may modify this policy in order to take account of a regulatory, technical or functional change to the website. The applicable version is the one published on the website on the date of your consultation. The date of the last update is indicated at the top of this page.