Data Protection Guarantees

Mrj shop (SASU) processes personal data in strict compliance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. We collect only what is necessary to fulfil an order and to support the customer afterwards.

Order processing rests on performance of the sales contract; accounting retention rests on a legal obligation; fraud prevention rests on our legitimate interest; marketing emails rest exclusively on your prior consent.

We never request data that is not required for these purposes, and we never make marketing consent a condition of purchase.

Card details are never transmitted to, stored by or visible to Geneva Dial. Payments are captured directly by PCI-DSS certified providers over TLS-encrypted connections, with 3-D Secure strong customer authentication where applicable.

Customer accounts and order data: 3 years from the last interaction. Invoices and accounting records: 10 years, as required by French commercial law. Prospect data: 3 years from collection or last contact. Connection logs: 12 months.

Where a service provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses and by additional technical safeguards such as encryption in transit and at rest.

You may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent at any time, by writing to contact@genevadial.com. We reply within 30 days and may ask for proof of identity when a request is ambiguous.

You also have the right to lodge a complaint with your national supervisory authority — in France, the CNIL (www.cnil.fr).

In the unlikely event of a personal data breach that is likely to result in a risk to your rights, we notify the competent supervisory authority within 72 hours and inform affected customers directly without undue delay.