1. Data Controller

The website lilie.fr (the “Website”) is operated by LILIE (the “Controller”).

Contact:
The Controller is responsible for processing personal data in accordance with applicable European Union data-protection laws, including the General Data Protection Regulation (GDPR).

2. Categories of Data Collected

Depending on how the Website is used, the Controller may collect and process the following categories of personal data:

• Identification data (name, username)
• Contact details (email address, phone number)
• Account and authentication data
• Technical data (IP address, device and browser information)
• Usage data (navigation, interactions, preferences)
• Transactional or billing data where applicable

Data is collected directly from users when they interact with forms, create accounts, contact the Controller, or browse the Website.

3. Purposes of Processing

Personal data is processed for the following purposes:

• Providing and operating the Website and services
• Managing user accounts and authentication
• Responding to inquiries and support requests
• Improving performance, functionality, and user experience
• Ensuring security and preventing fraud
• Complying with legal and regulatory obligations
• Sending service communications or updates where permitted

4. Legal Bases

Processing is carried out on one or more of the following legal bases, depending on context:

• Consent of the data subject
• Performance of a contract or pre-contractual measures
• Legitimate interests of the Controller (e.g., security, service improvement)
• Compliance with legal obligations

5. Data Sharing

Personal data may be shared only where necessary with:

• Hosting and infrastructure providers
• Technical and maintenance service providers
• Analytics providers
• Payment processors where applicable
• Public authorities where required by law

All recipients are bound by confidentiality and data-protection obligations. Personal data is not sold or rented to third parties.

6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, or reporting obligations.

Retention periods vary depending on the nature of the data and applicable legal requirements.

7. Data Security

The Controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

8. International Transfers

Where personal data is transferred outside the European Economic Area, appropriate safeguards are implemented, such as standard contractual clauses or equivalent mechanisms in accordance with applicable regulations.

9. Your Rights

Individuals have the right to:

• Access their personal data
• Request rectification of inaccurate data
• Request erasure of their data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time where processing is based on consent

You may also lodge a complaint with your competent data-protection authority.

10. Cookies and Tracking Technologies

The Website may use cookies or similar technologies necessary for functionality, security, and performance measurement.

Users can manage preferences through browser settings or consent tools where available. Refusal of certain cookies may affect functionality.

11. Third-Party Services

The Website may integrate third-party tools or content. These providers process data in accordance with their own privacy policies, and the Controller encourages users to review those policies where relevant.

12. Updates to this Policy

This Privacy Policy may be updated from time to time to reflect legal, technical, or operational changes. The latest version will always be available on this page.

13. Contact and Data Protection Requests

For any questions regarding this Privacy Policy or to exercise your rights, you may contact: