The purpose of this privacy policy is to inform users of the site:

  • On how their personal data is collected. Any information allowing a user to be identified is considered personal data. As such, this may include: their first and last names, their age, their postal or email address, their location or even their IP address (non-exhaustive list);
  • On the rights they have regarding this data;
  • On the person responsible for processing the personal data collected and processed;
  • On the recipients of this personal data;
  • On the site's cookie policy.

This policy supplements the legal notices and the General Conditions of Sale which can be consulted by users at the following address:


In accordance with article 5 of European Regulation 2016/679, personal data are:

  • Processed in a lawful, fair and transparent manner with regard to the person concerned;
  • Collected for specific purposes (see Article 3.1 hereof), explicit and legitimate, and not subsequently processed in a manner incompatible with these purposes;
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
  • Accurate and, where necessary, kept up to date. All reasonable measures must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
  • Kept in a form allowing the identification of the persons concerned for a period not exceeding that necessary for the purposes for which they are processed;
  • Processed in a manner that ensures appropriate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing is only lawful if and to the extent that at least one of the following conditions is met:

  • The data subject has consented to the processing of his or her personal data for one or more specific purposes;
  • The processing is necessary for the performance of a contract to which the data subject is party or for the execution of pre-contractual measures taken at the request of the data subject;
  • The processing is necessary for compliance with a legal obligation to which the data controller is subject;
  • The processing is necessary to safeguard the vital interests of the data subject or of another natural person;
  • The processing is necessary for the performance of a mission of public interest or relating to the exercise of public authority vested in the controller;
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the person concerned is a child.


Article 3.1: Data collected

3.1.1 Data collected when placing an order for a purchase:

The data collected during the purchase is as follows: Name, First name, Postal address, Telephone number, Email address. Users who do not wish to provide this information will not be able to purchase on the website.

3.1.2 Data collected when browsing the site
When browsing, the Site may collect the following information: demographic data, device and software used, location, connection data, page viewed and link clicked, time connected to the site.

3.1.3 Data collected when subscribing to the newsletter

When registering for the newsletter, the email address is collected.

Article 3.2: Purposes of the data collected

The collection and processing of this data serves the following purpose(s): management of the customer area, tracking of orders, monitoring of the quality of services, sending of newsletters and welcome emails when registering for the newsletter, transmitting information to delivery and payment carriers, verifying the identity of people, improving the user experience, targeting advertising content, monitoring illegal or illicit activity, site management and improvement , send information.

They are kept by the data controller under reasonable security conditions, for a period of 13 months for navigation data and for the duration of the contractual relationship between the Site and the user.

The company may retain certain personal data beyond the time periods announced above in order to fulfill its legal or regulatory obligations.

3.3 Transfer of collected data

The Site transfers the data communicated by you to several partners. They may be located outside the European Union but implement guarantees concerning the use, protection and confidentiality of data:

  • Parcel delivery partners: Transmission of information necessary to send the user's order.
  • Google Analytics: Business statistics that enable reporting (USa Privacy Shield)
  • Facebook / Instagram / Pinterest: Product management, publication targeting via a pixel
  • Shopify: Store management and commercial reporting


Article 4.1: The data controller

Personal data is collected by NOLA Confiserie SARL with capital of €500, whose registration number is 949 530 406 RCS Créteil. The person responsible for processing personal data can be contacted as follows:

By mail to the address: 3T rue pasteur 94340 Joinville le pont

By email:

Article 4.2: The data protection delegate 

The data protection officer of the company or the manager is: Nola Confiserie, 3T rue pasteur 94340 Joinville le pont,

If you believe, after contacting us, that your “Computer and Liberties” rights are not respected, you can send information to the CNIL.


Cookies are encrypted files stored on your device (mobile or browser). There are different types of cookies that are used on our Site:

  • Techniques: They are present to facilitate your navigation and offer certain functionalities. They can be used to remember your basket or your language.
  • Social/advertising networks: They allow navigation of uses to be traced for advertising retargeting, ad distribution, etc., as soon as it is set up. They will only be posted after obtaining your consent. You can consult the privacy management policies on each of the social platforms that deposit cookies and exercise your right directly with them.
  • Statistics: Google Analtyics and Shopify Analytics tools allow audience analysis and generate a cookie to collect time spent on the site, demographic data, number of page views, your location (city) via your IP address, pages consulted for example.

Settings in your browser

It is possible to deactivate cookies generally or individually depending on your choices via the choice window offered by the Site. Refusing cookies may modify the display or use of the site.


Any user concerned by the processing of their personal data can avail themselves of the following rights, in application of European regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):

  • Right of access, rectification and right to erasure of data (set out respectively in Articles 15, 16 and 17 of the GDPR);

  • Right to data portability (article 20 of the GDPR);

  • Right to limitation (article 18 of the GDPR) and to object to data processing (article 21 of the GDPR);

  • Right not to be the subject of a decision based exclusively on an automated process;

  • Right to determine the fate of data after death;

  • Right to refer the matter to the competent supervisory authority (article 77 of the GDPR).

To exercise your rights, please send your letter to Nola Confiserie 3T rue pasteur 94340 Joinville le pont or by email to . In order for the data controller to grant his request, the user may be required to provide him with certain information such as: his last name, first name and email address.

Visit the website for more information on your rights.


The publisher of the Nola Confiserie site reserves the right to modify this Policy at any time in order to assure users of the site that it complies with the law in force.

Any modifications cannot have an impact on purchases previously made on the site, which remain subject to the Policy in force at the time of the purchase and as accepted by the user upon validation of the purchase.

The user is invited to read this Policy each time he uses our services, without it being necessary to formally notify him.

This policy came into effect on 05/16/2023.