Privacy Policy
The protection of your personal data is a priority for Matelas Expert. This privacy policy describes the data we collect, how we use it, and the rights you have under the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is:
Zoomzen SAS
76 Bd du Couchant, 92000 Nanterre, France
SIRET: 819 864 091 00015
Contact: [email protected]
Zoomzen SAS, as data controller, is responsible for the processing of personal data carried out on the Matelas Expert website (matelas-expert.fr).
2. Data Collected
Automatically Collected Data
When you visit our site, we automatically collect:
- Browsing Data: IP address (anonymized), browser type, operating system, pages viewed, duration of visit, traffic source.
- Technical Data: screen resolution, device type, browser language.
- Interaction Data: clicks on affiliate links, scroll depth, time spent on each page.
This data is collected automatically through cookies and similar technologies. It is used exclusively to improve the site and measure audience trends.
Voluntarily Provided Data
If you contact us by email, we collect:
- Email address
- Name (if provided)
- Content of the message
Data Not Collected
We do not collect any banking data. Transactions are processed directly on the partner merchant sites that have their own privacy policies.
We also do not collect:
- Social security numbers or national ID numbers
- Location data (GPS)
- Biometric data
- Data relating to health, political opinions, or religious beliefs
3. Purpose of Processing
| Purpose | Legal Basis | Retention Period |
|---|---|---|
| Audience measurement and site improvement | Legitimate interest | 14 months |
| Responding to your contact requests | Consent | 3 years after the last contact |
| Tracking affiliate performance | Legitimate interest | 6 months |
| Security and fraud prevention | Legitimate interest | 12 months |
Details on Each Purpose
Audience measurement: We use Google Analytics to understand how visitors interact with our site. This helps us identify popular content, improve navigation and optimize the user experience. Data is anonymized before processing.
Contact requests: When you email us, we use your data solely to respond to your inquiry. We do not add your email to any mailing list or share it with third parties.
Affiliate tracking: We track affiliate link clicks to measure the performance of our partnerships and ensure accurate commission attribution. This involves cookies placed by our affiliate partners (Amazon, Awin).
4. Cookies
What is a cookie?
A cookie is a small text file placed on your device when you visit a website. It allows for the storage of information related to your browsing. Cookies allow us to recognize your device and store certain information about your preferences or previous actions.
Cookies Used on Our Site
Strictly Necessary Cookies (exempt from consent):
- Session cookies: ensure the proper functioning of the site
- Security cookies: protect against CSRF attacks and spam
Audience Measurement Cookies (subject to consent):
- Google Analytics (IP anonymization enabled): measures traffic and visitor behavior. Duration: up to 14 months.
- Google Analytics collects: pages viewed, session duration, bounce rate, traffic source, device type
Affiliate Cookies (subject to consent):
- Amazon Associates: tracks affiliate conversions (24 hours, extended to 90 days if product added to cart)
- Awin: tracks conversions with our partners (Emma, Tediber, Simba, Hypnia, Bultex). Duration: 30 days.
Duration: variable depending on the partner (generally 24 hours to 30 days).
Managing Your Cookie Preferences
On your first visit, a banner lets you accept or refuse consent-based cookies; no analytics cookie is set until you accept. You can change your choice at any time:
You can configure your browser to refuse all or some cookies. Note that refusing strictly necessary cookies may impair the functioning of the site.
To manage cookies:
- Chrome: Settings > Privacy and Security > Cookies
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and Site Permissions
You can also visit www.allaboutcookies.org for comprehensive cookie management information.
5. Data Sharing
Your personal data is never sold to third parties.
It may be shared with:
- Our host (Amazon Web Services) for the technical operation of the site
- Google (Google Analytics) for audience measurement, if you have given your consent
- Our affiliate partners (Amazon, Awin, and its advertisers) via affiliate cookies, if you have given your consent
Some of these service providers are located outside the European Union. In this case, appropriate safeguards are in place (standard contractual clauses of the European Commission).
Sub-processor Details
| Sub-processor | Location | Purpose | Data Processed |
|---|---|---|---|
| Amazon Web Services | United States / EU | Hosting | All site data |
| Google Analytics | United States | Analytics | Anonymized traffic data |
| Amazon Associates | United States | Affiliate tracking | Cookie-based conversion data |
| Awin | Germany / United Kingdom | Affiliate tracking | Cookie-based conversion data |
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
- Right of access: obtain confirmation that data concerning you is being processed and receive a copy.
- Right to rectification: request the correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): request the deletion of your data under the conditions provided by the GDPR.
- Right to restriction of processing: request the limitation of the processing of your data.
- Right to data portability: receive your data in a structured, commonly used format.
- Right to object: object to the processing of your data for legitimate reasons.
- Right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights
To exercise these rights, contact us at: [email protected]
Please include in your request:
- The subject line "Personal Data Request"
- Your full name and email address
- A clear description of the right(s) you wish to exercise
We commit to responding within a maximum of 30 days. In complex cases, this period may be extended to 60 days, in which case you will be informed of the reason for the delay.
If you believe that the processing of your data constitutes a violation of your rights, you can file a complaint with the CNIL: www.cnil.fr.
7. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. The site uses the HTTPS protocol to encrypt communications between your browser and our servers.
Our security measures include:
- SSL/TLS encryption for all data in transit
- Regular security audits of our hosting infrastructure
- Access control and authentication for administrative systems
- Automatic backups with encrypted storage
- Monitoring and alerting for suspicious activity
8. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR. If the breach is likely to result in a high risk, we will also notify you directly.
9. Minors' Data
Matelas Expert does not knowingly collect personal data from minors under the age of 16. If we become aware that we have collected data from a minor under 16, we will take steps to delete such information as quickly as possible.
10. Changes to This Policy
This privacy policy may be updated. The date of the last update is indicated below. We encourage you to review this page periodically to stay informed of how we protect your information.
Significant changes to this policy will be highlighted on our homepage for a period of 30 days following the update.
Last updated: March 8, 2026