GDPR · French law

PRIVACY
POLICY

Dacodac Performance — www.dacodacperformance.com

Last updated2026
RegulationRGPD · UE 2016/679
AuthorityCNIL — France (French DPA)
This document complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act of 6 January 1978, as amended.
This Privacy Policy describes how Dacodac Performance collects, uses, stores and protects your personal data when you visit www.dacodacperformance.com or make a purchase. By using the site, you acknowledge that you have read this policy.
01

DATA CONTROLLER

The controller of the personal data collected on this site is:

NameDacodac Performance
Address28 rue Parmentier, 83310 Cogolin, France
E-mailcontact@dacodacperformance.com
Websitewww.dacodacperformance.com

The controller is referred to below as “Dacodac Performance” or “we”.

02

DATA COLLECTED

Dacodac Performance collects two categories of personal data:

A — Data collected automatically (browsing data)

On each visit to the site, the following information may be collected automatically:

DataPurpose
IP addressSecurity, fraud detection, geographical statistics
Browser type and versionTechnical optimisation of the site
Operating systemCompatibility and performance
Pages viewed, time spentAudience analysis, UX improvement
Referring URLIncoming traffic analysis
Visit timestampsUsage statistics
Cookie data (see art. 7)Site operation, analytics

B — Data collected when you purchase or make contact

DataPurpose
Surname, first nameIdentification, invoicing
E-mail addressOrder confirmation, communication
Telephone number (if provided)Contact if needed in connection with the order
Payment informationPayment processing (not stored by Dacodac Performance)
Billing addressInvoicing, accounting and tax obligations
Vehicle information (ECU files)Carrying out the bespoke service
Course access dataManaging access to learning content
Data minimisation: Dacodac Performance undertakes to collect only the data strictly necessary for the purposes pursued, in line with the minimisation principle in article 5 GDPR. No special category data within the meaning of article 9 GDPR is collected.
03

PURPOSES AND LEGAL BASES FOR PROCESSING

Each processing operation rests on an identified legal basis under article 6 GDPR:

Purpose of processing Legal basis (art. 6 GDPR)
Processing and tracking orders Performance of the contract (art. 6(1)(b))
Issuing invoices and accounting archives Legal obligation (art. 6(1)(c)) — 10-year retention (French Commercial Code)
Order-related communication (confirmation, delivery…) Performance of the contract (art. 6(1)(b))
Fraud prevention and security Legitimate interest (art. 6(1)(f))
Site improvement and anonymised audience statistics Legitimate interest (art. 6(1)(f))
Sending marketing communications (newsletters, offers) Consent (art. 6(1)(a)) — withdrawable at any time
Non-essential cookies (analytics, advertising) Consent (art. 6(1)(a)) — via the cookie banner
Compliance with legal obligations (responding to authorities) Legal obligation (art. 6(1)(c))
Right to object: Where processing is based on legitimate interest, you may object at any time. Where it is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
04

RETENTION PERIODS

Data is kept for the period strictly necessary for the purposes for which it was collected, in line with applicable legal and regulatory obligations:

Data categoryRetention period
Order and invoicing data10 years from the close of the accounting year (legal obligation — French Commercial Code, art. L.123-22)
Active customer account dataDuration of the commercial relationship + 3 years after the last contact or purchase
Marketing prospect data3 years from the last contact or opt-in, unless you object or withdraw consent
Connection logs / browsing data12 months maximum (CNIL recommendation)
Data relating to bespoke ECU filesDuration of the relationship + 3 years (for technical support purposes)
Cookies subject to consent13 months maximum (CNIL recommendation)
Data from rights requests (access, erasure…)5 years from the closure of the request (proof of compliance)

Once these periods expire, data is securely deleted or irreversibly anonymised.

05

DATA RECIPIENTS

Dacodac Performance may share your data with third parties in the following cases:

Processors and technical providers (solely for the purposes set out in art. 3):

ProviderRolePrivacy policy
Cloudflare, Inc. Site hosting, delivery and security cloudflare.com/privacypolicy
Google (Google Analytics, Google Ads) Audience statistics and advertising measurement policies.google.com/privacy
Stripe Payments Europe, Ltd. Secure payment processing stripe.com/privacy
Content hosts / CDN Site availability and performance Each provider's own policy

These processors are selected with care and are contractually bound to protect your data and use it only for the purposes set by Dacodac Performance, in accordance with article 28 GDPR.

Competent authorities: Dacodac Performance may disclose your data to French or European judicial, administrative or tax authorities where legally obliged or upon formal request.

Sale or transfer of the business: If all or part of the Dacodac Performance business is sold, customer personal data could form part of the assets transferred. You would be informed beforehand and would have the right to object to that transfer.

Dacodac Performance never sells, rents or transfers your personal data to third parties for those third parties' own commercial purposes.

06

DATA TRANSFERS OUTSIDE THE EUROPEAN UNION

Some providers used by Dacodac Performance, in particular Google, may process your data outside the European Union, notably in the United States.

These transfers are covered by appropriate safeguards under Chapter V GDPR, namely:

You may obtain a copy of the safeguards in place for these transfers by contacting Dacodac Performance at contact@dacodacperformance.com.
07

COOKIES AND TRACKERS

A cookie is a small text file placed on your device when you visit a website. In line with the recommendations of the CNIL and article 82 of the French Data Protection Act, your consent is required before any cookie that is not strictly necessary for the operation of the site is placed.

Cookies used on this site:

Cookie name Type Duration Purpose
_session_id Essential Session Managing the user session
cart Essential 2 weeks Retaining the shopping basket
_secure_session_id Essential Session Session security
_ga, _gid, _gat Analytics 13 months / 24h Google Analytics — audience measurement (with IP anonymisation)
storefront_digest Essential Indefinite Access control if the site is password protected

Essential cookies: these are indispensable to the proper operation of the site and do not require your consent (art. 82(2) of the French Data Protection Act).

Analytics and marketing cookies: these are placed only with your prior consent, given through the cookie banner shown on your first visit. You may withdraw that consent at any time.

How to manage your cookies:

Disabling essential cookies may affect how the site works and prevent an order from being completed.
08

YOUR GDPR RIGHTS

Under the GDPR (articles 15 to 22) and the French Data Protection Act, you have the following rights over your personal data:

RIGHT OF ACCESS

To confirm whether data about you is being processed and to obtain a copy of it (art. 15 GDPR).

RIGHT TO RECTIFICATION

To have inaccurate data corrected or incomplete data about you completed (art. 16 GDPR).

RIGHT TO ERASURE

To request deletion of your data in the cases provided by law (art. 17 GDPR — the “right to be forgotten”).

RIGHT TO RESTRICTION

To request temporary suspension of the processing of your data in certain situations (art. 18 GDPR).

RIGHT TO OBJECT

To object to processing based on legitimate interest, or to processing for direct marketing (art. 21 GDPR).

RIGHT TO PORTABILITY

To receive your data in a structured format and transmit it to another controller (art. 20 GDPR).

WITHDRAWAL OF CONSENT

To withdraw your consent at any time for processing based on it, without retroactive effect (art. 7 GDPR).

POST-MORTEM DIRECTIONS

To give directions on what happens to your data after your death (French Data Protection Act, art. 85).

How to exercise your rights: Send your request by e-mail to contact@dacodacperformance.com, stating which right you wish to exercise and enclosing a copy of proof of identity.

Dacodac Performance undertakes to respond to your request within one month of receiving it. That period may be extended by a further two months where the complexity or number of requests justifies it, in which case you will be informed.

Right to lodge a complaint (art. 77 GDPR): If you consider that your rights are not being respected, you have the right to lodge a complaint with the CNIL (the French data protection authority), or with the supervisory authority of your own country of residence: www.cnil.fr — 3 Place de Fontenoy, 75007 Paris.
09

DATA SECURITY

Dacodac Performance implements all appropriate technical and organisational measures to protect your personal data against loss, destruction, alteration, unauthorised access or disclosure, in accordance with article 32 GDPR.

These measures include in particular:

Data breach (arts. 33–34 GDPR): In the event of a breach likely to result in a high risk to your rights and freedoms, Dacodac Performance undertakes to inform you as soon as possible, as legally required, and to notify the CNIL within 72 hours.

As no system is infallible, Dacodac Performance cannot guarantee absolute security. Transmitting information over the internet carries inherent risks which the Customer accepts by using the site.

10

MINORS

The site www.dacodacperformance.com and the services offered are not intended for persons under 18. Dacodac Performance does not knowingly collect personal data concerning minors.

If a parent or legal guardian becomes aware that their child has provided us with personal data without their consent, they are invited to contact us at contact@dacodacperformance.com so that the data can be deleted as quickly as possible.

11

CHANGES TO THIS POLICY

Dacodac Performance reserves the right to update this Privacy Policy at any time, in particular to keep pace with changes in the law, with CNIL recommendations, or with changes in its own practices.

In the event of a substantial change, you will be informed by e-mail if you are a customer, and/or by a notice visible on the site. The date of last update appears at the top of this document.

Continuing to use the site after changes are published constitutes acceptance of the new version of the Privacy Policy.

Dacodac Performance keeps a history of versions of this Privacy Policy, which can be provided on request.

12

CONTACT AND COMPLAINTS

For any question about this Privacy Policy, to exercise your rights, or to report a problem concerning your personal data, contact Dacodac Performance:

E-mailcontact@dacodacperformance.com
CourrierDacodac Performance — 28 rue Parmentier, 83310 Cogolin, France
Response time1 month at most from receipt of your request

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL :

CNIL — Site webwww.cnil.fr
Adresse postale3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07
Telephone01 53 73 22 22
Droit applicable : This Privacy Policy is governed by French law and by Regulation (EU) 2016/679 (GDPR). In the event of a dispute, the French courts have sole jurisdiction. This English text is a translation provided for convenience; in the event of any discrepancy, the French version prevails.
FR EN DE PL
🌐 Language