Personal data
Find here the information about the processing of your personal data.
ControllerThe Ether Company SAS
CommitmentNo sale of customer data
Exercising your rightscommande@aeternum.fr
Data controller and scope
The Ether Company SAS, which operates the site aeternum.fr under the name Aeternum, determines the purposes and means of the processing necessary to operate the store. In this capacity, it acts as the data controller.
Data protection contact point
The Ether Company SAS – Aeternum, 40 rue Alexandre Dumas, 75011 Paris, France – commande@aeternum.fr – 09 79 10 29 48.
This policy applies to Site visitors, customers, account holders, recipients of marketing communications, and anyone who contacts Aeternum. It supplements the Legal notice and the General Terms and Conditions of Sale.
For certain features offered directly to the Customer, including Shop or Shop Pay, Shopify may act as an independent data controller. The corresponding operations are also governed by Shopify’s consumer privacy policy.
Data collected
Aeternum limits the collection of information to what is useful for browsing, managing the business relationship, and complying with its obligations.
Identity and contact detailsFirst name, last name, and contact details
Email address, telephone number, billing and delivery addresses, country, and, where applicable, company name.
Customer accountCredentials and preferences
Login information, account history, address books, and saved preferences. Aeternum does not access passwords in plain text; their technical management is handled by Shopify.
Orders and deliveriesProducts, amounts, and tracking
Cart contents, orders, discounts, invoices, returns, refunds, carrier, pickup point, and tracking information.
PaymentTransaction status and reference
Method used, amount, status, reference, and information necessary to combat fraud. Aeternum does not receive the full bank card number or its security code.
Communications with AeternumMessages and requests
Content of emails, forms, attachments, order-related requests, complaints, and response history.
Technical dataNavigation and security
IP address, device type, browser, pages viewed, visit source, technical identifiers, security logs, and cookie-related choices.
Marketing communicationPreferences and interactions
Subscription or unsubscribing, campaigns received, and technical interactions enabling newsletter administration.
Regulatory verificationAge of majority when necessary
Proof of age may be requested for a product whose sale is restricted to adults. Only the information necessary for verification is used.
Sensitive information
Aeternum does not request any information relating to health, religious beliefs, sex life, sexual orientation, or any other special category of data. Users are asked not to include such information in their messages. When information of this nature is received without being requested and is not necessary to process the request, it is deleted as soon as possible.
Purposes and legal bases
Each processing activity is based on a legal basis appropriate to the objective pursued.
| Purpose | Data concerned | Legal basis | Details |
|---|---|---|---|
| Browsing, cart, and account | Technical identifiers, account, preferences, and cart. | Performance of pre-contractual measures or the contract; legitimate interest for security. | Enables you to browse the Site, retain your cart, and access the requested features. |
| Ordering, payment, and delivery | Identity, contact details, order, payment, address, and tracking. | Performance of the contract. | Includes preparation, shipping, tracking, returns, and refunds. |
| Billing and legal obligations | Order, invoice, payment, and identity. | Legal obligation. | Compliance with accounting, tax, customs, and retention obligations. |
| Customer service and complaints | Contact details, communications, order, and relevant documents. | Performance of the contract and legitimate interest in processing requests and defending Aeternum’s rights. | Enables us to respond, resolve an issue, and retain evidence of communications. |
| Security and fraud prevention | Technical data, transaction, account, and order. | Legitimate interest and applicable legal obligations. | Detection of abnormal access, suspicious payments, abuse, and attempted fraud. |
| Newsletter and offers | Email address, purchase history, and preferences. | Consent where required; legitimate interest in cases permitted by law. | Every marketing message includes a simple way to unsubscribe. |
| Audience measurement and personalization | Navigation, cookie identifiers, and interactions. | Consent for trackers that are not strictly necessary. | These processing activities remain disabled until the required choice has been made. |
| Age verification | Items strictly necessary for verification. | Legal obligation and legitimate interest in securing the sale. | Applies only to products subject to an age restriction. |
Fields marked as mandatory are necessary to provide the service or fulfill the order. Otherwise, Aeternum may be unable to create the account, process the payment, ship the order, or respond to the request. The other fields remain optional.
Certain payment providers or Shopify may apply an automated risk score to prevent fraud. If an order is blocked or canceled following an automated check, the Customer may contact Aeternum to request a human review of the situation.
Recipients and service providers
Aeternum does not sell or rent its customers’ data. It is transferred only when necessary for the requested service, order fulfillment, Site security, or compliance with a legal obligation.
Authorized personnelThe Ether Company SAS
Only individuals whose duties require access to the relevant information may consult it.
PlatformShopify
Store hosting, customer account, cart, order, security, technical operation, and Shopify services selected by the Customer.
PaymentsFinancial service providers
Shopify Payments, banking institutions, PayPal, Klarna, Apple Pay, Bancontact, and the providers available at checkout.
DeliveriesCarriers
Colissimo, Mondial Relay, Chronopost, and their local partners, limited to the information necessary for delivery and tracking.
Technical functionsSpecialized service providers
Messaging, newsletter, customer service, hosting, maintenance, security, audience measurement, and marketing tools authorized by consent.
Legal obligations and defense of rightsAdvisors and authorized authorities
Accountants, legal advisors, insurers, public authorities, judicial authorities, or legally authorized bodies.
Each service provider receives only the data necessary for its assignment. When acting as a processor, it is bound by contractual obligations of confidentiality, security, and use limited to the instructions received.
International transfers
The store uses Shopify International Limited, established in Ireland. However, Shopify may process certain data in Canada, the United States, or other countries where its group and subcontractors operate.
Shopify indicates that transfers to Shopify Inc. in Canada are based in particular on the adequacy decision adopted by the European Commission for the Canadian organizations concerned. Transfers to a country that does not benefit from an adequacy decision are governed by the European Commission’s standard contractual clauses or another mechanism recognized by applicable law.
Detailed information about Shopify’s role, its processors, and its transfers is available in its data processing agreement and in the documentation on international transfers.
Other service providers, including certain payment services or tools authorized by the Client, may also process data outside the European Economic Area. Aeternum then ensures that the transfer is based on an adequacy decision, standard contractual clauses, or a recognized safeguard.
Retention periods
The data remain accessible for as long as necessary for their current use, then may be placed in an intermediate archive with restricted access when a legal obligation or the defense of a right requires it.
| Category | Duration or criterion | Reason | Outcome upon expiry |
|---|---|---|---|
| Orders and customer relationship | During the customer relationship, then for the applicable limitation periods. | Performance of the contract, claims, and defense of rights. | Deletion, anonymization, or archiving limited to the evidence required. |
| Invoices and accounting records | Ten years from the close of the relevant financial year. | Accounting and tax obligations. | Deletion upon expiry of the statutory period, unless proceedings are ongoing. |
| Electronic contracts of at least €120 | Ten years from delivery. | Legal obligation to retain proof of the contract. | Deletion or anonymization after the applicable period. |
| Customer account | During its use, then up to three years after the last activity, except for data related to an order subject to a longer retention period. | Account and customer relationship management. | Deletion or anonymization of data that no longer needs to be retained. |
| Marketing and newsletter | Until consent is withdrawn or three years after the last active contact. | Management of marketing preferences. | Unsubscription and minimal retention of proof of objection when necessary. |
| Customer service | Duration of request processing, then up to three years; five years when a dispute or risk of litigation justifies it. | Request tracking and evidence of correspondence. | Deletion or restricted archiving. |
| Payment data | Transaction data necessary for disputes may be retained by service providers for thirteen months, or fifteen months for a deferred debit card. | Payment processing and any potential dispute. | Aeternum does not retain the full card number or security code. |
| Fraud and security | Duration of the analysis, then up to five years if the information is necessary to establish or defend a right. | Protection of the Site and prevention of abuse. | Deletion or archiving with restricted access. |
| Proof of age | Time required to verify and process the order, then only in the event of an obligation or dispute. | Compliance with the legal restriction applicable to the product. | Deletion of documents that are no longer necessary. |
A legal proceeding, a request from an authority, or a legal obligation may require the sole necessary information to be retained for longer.
Your rights and how to exercise them
Depending on the legal basis and the circumstances, any data subject may request access to their data, its rectification, erasure, restriction of processing, portability of the data provided, or object to processing based on legitimate interest. They may withdraw their consent at any time when processing is based on it and define instructions concerning the fate of their data after their death under the conditions provided for by French law.
How to submit a request
By email to commande@aeternum.fr or by mail to The Ether Company SAS – Aeternum, 40 rue Alexandre Dumas, 75011 Paris, France. The request must make it possible to identify the relevant account or order and specify the right being exercised.
Aeternum responds within one month of receiving the request. This period may be extended by two months when the request is complex or numerous; the individual will then be informed. Proof of identity is requested only in the event of reasonable doubt about the identity of the requester, and only the information necessary for this verification is requested.
If the response provided does not appear satisfactory, a complaint may be filed with the French Data Protection Authority, 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07.
Security and confidentiality
Aeternum and its service providers implement technical and organizational measures intended to protect data against unauthorized access, loss, alteration, and disclosure. These include, in particular, encryption of communications, access restrictions based on roles, platform and payment security, backups, and monitoring of security events.
The user must protect access to their email address and account, not disclose their authentication codes, and promptly report any suspicious use. As no transmission over the internet can offer absolute security, Aeternum adapts its measures to the nature of the information and the identified risks.
Minors
The Site is not intended to knowingly collect data concerning children. Orders must be placed by a person with the required legal capacity. When Aeternum learns that data concerning a minor has been transmitted without a valid legal basis, it takes the necessary steps to delete it.
Last updated: August 26, 2026.
For any questions, contact us
At your service
We usually respond the same day or within 24 hours (excluding weekends and holidays). All information remains strictly confidential and is not shared.
Be sure to check our FAQ, your answer might be there!
Note
We can of course answer any questions related to a product purchased on Aeternum, but we cannot commit to products bought elsewhere. Also, we do not offer services (clairvoyance, mediumship, etc.).
