Last updated: 6 August 2026
1. Controller and contact
The controller is TXF, SAS, 2-4 rue Frédéric Joliot Curie, 93270 Sevran, France, SIREN 921 271 656. Tengiz Safarian is the named personal-data contact. Email contact@txfturbo.fr or write to the registered office.
2. Data processed
- Account and identity: title, name, email, telephone, encrypted password and language preference.
- Orders: addresses, basket, products, references, prices, core charge, delivery, payment, invoices, returns, guarantees and support messages.
- Businesses: company, SIREN/SIRET, VAT number and timestamped VIES result.
- Vehicle search: selected criteria and, on request, a French registration number sent to TecAlliance. This function does not attach the registration to the account or order.
- Technical: IP address, timestamps, necessary page/action data, browser, device, cookies, security and error logs.
- Communications: requests, attachments, marketing preferences and evidence of consent or objection.
Mandatory fields are needed to answer the request or perform the order. Without them, TXF may not be able to provide the relevant service.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Enquiries, part search, accounts, basket, order, delivery, payment, core returns and guarantees | Pre-contract steps and performance of the contract |
| Invoices, accounts, tax, VAT checks and authorities | Legal obligations |
| Security, fraud prevention, error diagnosis and legal claims | TXF’s legitimate interest in operating a secure store and protecting its rights |
| Permitted marketing | Consent, or legitimate interest for similar products sent to an existing customer with an opt-out |
| Requesting and publishing a verified review after delivery | TXF’s legitimate interest in measuring satisfaction and informing future customers, balanced against customer rights |
4. Verified reviews — Société des Avis Garantis
When an order becomes “delivered”, TXF schedules a transfer to Société des Avis Garantis so that, after the provider’s configured delay, it can send a review invitation. The transfer contains first name, surname, email, order date and reference, a txfturbo.fr-specific order ID and purchased products (ID, name, quantity, unit price, available references and URL). Core-charge lines are excluded. An order cancelled, fully refunded or in payment error before transfer is not sent.
This processing relies on the legitimate interest confirmed by TXF. Customers can object free of charge before or after transfer by emailing contact@txfturbo.fr. TXF will pass relevant access, objection or deletion requests to the provider. Published reviews load from its public API.
5. Recipients and suppliers
Data is available to authorised TXF staff and, as needed, to: OVH (hosting, backups and logs); Infomaniak (email); Stripe (payment and fraud prevention); Chronopost and the selected carrier (delivery details); TecAlliance for a voluntary registration search; the European Commission’s VIES service for VAT checks; Société des Avis Garantis for verified reviews; and banks, advisers, insurers or authorities where necessary or required.
The theme also loads some technical resources from Google Fonts and StackPath; those suppliers receive the IP address and request data. TXF does not sell or rent personal data.
6. Transfers outside the EEA
The main server is in France. International suppliers, including Stripe or web-resource providers, may process data outside the EEA. Where this occurs, an approved GDPR mechanism such as an adequacy decision or standard contractual clauses is used, with supplementary safeguards where needed. Details may be requested from TXF.
7. Retention
- account and customer-relationship data: during the relationship, then up to three years after the last contact in active systems unless a duty or dispute requires longer;
- orders, invoices and accounting records: ten years; evidence needed for claims: the applicable limitation period;
- enquiries without an order: while handled, then up to three years after the last contact;
- marketing: until consent is withdrawn or the customer objects, and at most three years after the last purchase/contact; suppression records may be kept for three years;
- registration search: sent for the request and not stored by TXF in the account or order;
- technical/security logs: a proportionate period, at most twelve months unless an incident or duty requires longer;
- supplier-held data: under their duties and policies. TXF’s local review queue retains status and timestamps but no copy of the name, email or transmitted content.
8. Your rights
Depending on the processing, you have rights of access, correction, erasure, restriction, objection and portability, and may withdraw consent without affecting earlier processing. You may give instructions for personal data after death. No decision with legal effect is made solely by an algorithm.
Email contact@txfturbo.fr. TXF may request only what is needed to verify identity where there is reasonable doubt. You may complain to the French supervisory authority, the CNIL, or the authority in your country.
9. Cookies and external services
At the stated date, TXF uses no advertising or first-party audience-measurement cookie. The following necessary elements are used:
| Cookie/service | Purpose | Indicative duration |
|---|---|---|
PrestaShop-*, PHPSESSID | Session, basket, language, account, security and checkout | Session or, for the persistent shop cookie, approximately 20 days under the current configuration |
__stripe_mid, __stripe_sid, m | Stripe payment, authentication and fraud detection on basket/payment pages | About 30 minutes for __stripe_sid, one year for __stripe_mid and up to two years for certain Stripe fraud identifiers |
| Société des Avis Garantis API | Displays published reviews; the provider receives the IP address when content loads | Under the provider policy; no TXF review cookie was observed at the last audit |
These elements provide the requested service, secure checkout or prevent fraud. Browsers can remove or block them, but the basket, account or payment may stop working. If TXF later adds a non-essential tracker, it will be placed only after the user’s choice and this policy will be updated.
10. Updates
This policy is updated when processing or suppliers change. The effective date appears at the top.