This document presents the general conditions of purchase, by private individuals exclusively, and of sale to private individuals exclusively on the data-driving.shop site, with the logic of respecting and protecting by default the interests of all types of users of the site, in particular the people who visit it and the person who manages it, and with the particular concern of protecting the confidentiality of their usage data.
The document can be downloaded in .pdf format by clicking on the Download button below.
To view this page in a new browser tab, click on the following link: General conditions of purchase and sale
The Manager (owner, editor, administrator and publication manager) of the site
Company name, address, contact details and SIREN identifier (French company unique identifier) of the Manager, owner, editor, administrator and person responsible for the publication of the data-driving.shop website:
The company Les éditions à deux balles can be reached by telephone on the number indicated above from Monday to Friday between 8.30 am and 7.30 pm France’s time (UTC + 2 hours). Its website in english is leseditionsadeuxballes.com
Usage data visible to the Site Manager
As part of its practical management of the site and the online sales SHOP integrated into the site, the Manager of the data-driving.shop site is required to see certain usage data of the people who use the site. This data should in principle be limited to the following list (this list will be updated as the site evolves).
- IP address (internet connection identifier) of the machine from which a web browser (client software) communicates with the data-driving.shop server software. It is common practice to associate an IP address with one and the same person, which is correct in general, but may be incorrect in many cases. In order to protect the interests of all users of the site by default, it is considered in this document that the IP address is a usage data a priori associated with a single person. The Site Manager does not have the possibility of associating an IP address with the civil identifier of a person who visits the site, apart from his own IP address which he recognises by habit. It does not seek to identify the users of the site and on the contrary it forbids itself a priori.
- Email address (required to place an order on the site). In general, the Site Manager advises people who make a purchase on the site not to communicate information that could identify them civilly. For example, to place an order, it advises to use an email address using a pseudonym, or not using a family name.
- Email content (apart from the email address). The Site Manager advises people who wish to communicate with him by email in the context of their use of the data-driving.shop site, not to mention in their message any information that would allow them to be identified in civil law, and to limit themselves as much as possible to information that only concerns the use of the data-driving.shop site.
- User feedback and comments published on the site. The Site Manager advises people who post an opinion or comment on the site not to mention any civil name in their opinion/comment and to stick to using pseudonyms or first names, i.e. without a family name, if they wish to sign their opinions or comments. Generally speaking, people who post opinions or articles on the site are asked to respect all the people who use the site, starting with themselves, by not publishing any personal information and by sticking to public information, in relation to the use of the site and the articles sold on it.
- Content of the orders. The description of an order, as seen by the Site Manager, includes: the title, quantity and price of each item ordered, an order identification number, the date the order was created, and the email and IP address associated with the person who placed the order. It also includes a status indicator that shows whether the order is paid, pending payment, etc.
The storage of data visible to the Site Manager
Most of the information listed above is stored in the site’s database for an a priori indeterminate period, corresponding to the life of the site. Usage data is generally associated with metadata, i.e. information specific to the context in which it was captured by the site’s programmes (e.g. date and time of creation of an order, date and time of database backup, etc.).
To order items for sale on the data-driving.shop website, it is necessary to indicate an email address, which serves both as a delivery address (sending an email containing a link to download each item purchased) and as a billing address associated with the invoice sent to each person who places an order on the site. This email address is stored as a delivery address in the site’s order database (on the secure servers of the site’s host, in Switzerland) for one year and can be deleted at any time on request of the person to whom it belongs (see the Cookies? page accessible from the first choice in the general menu of the data-driving.shop site for the procedure to follow). The same address is also used as a billing address and is stored for ten years in a database of invoices kept securely in an undisclosed location (in France) by the Site Manager. This billing address cannot be deleted from the invoice database during the entire period of its storage. It is definitively deleted from the database after its legal archiving period (see also the page Cookies? accessible from the first choice of the general menu of the site data-driving.shop for a more detailed presentation of this subject).
For the time being, the online SHOP integrated into the data-driving.shop site does not use any location data of its users (no postal address, no reference to the country etc.). This is due to the fact that the items in the site’s SHOP are sold at the price excluding tax (VAT not applicable by virtue of Article 293 B of the French General Tax Code). The Site Manager refrains a priori from using the IP address of users to try to identify the origin of their requests. This possibility may however be considered if malicious requests threaten the integrity of the site.
Persons who share an email address with the site (normally only for the purpose of placing an order) may request that this information be deleted from the site’s database once the order has been completed. The procedure is explained in the Order Summary Email section later in this text.
The site host
Contact details of the company Infomaniak, host of the data-driving.shop website:
Contact for Infomaniak support in English: www.infomaniak.com/en
Neither the programmes nor the staff of the site host access the content exchanged between the users of the data-driving.shop site and the site server. However, they do access and store the IP addresses of all requests that reach the server. The Host uses this information to ensure the operation and security of the site and to provide site usage statistics.
Only the Site Manager consults the site’s usage statistics. As stated earlier in this document, while he may indeed see series of numbers representing IP addresses, he is not a priori able to identify the persons associated with these IP addresses (apart from his own address which he recognises by habit) and he refrains from trying to identify the users of the site in a civil capacity.
The Website Host is responsible for the backups of the site made on its servers (in Switzerland) without having access to their content. Only the Site Manager has the possibility of viewing the site’s usage data.
The Site Manager also guarantees a copy of the site’s database, archived in a safe place (in France) outside the Host’s servers, renewed at regular intervals with an up-to-date database.
Publication and management of site content and services
The content and services of the data-driving.shop website are produced and managed with the WordPress application, a free and open source software among the most used in the world for the creation and management of online content and services (see WordPress on Wikipedia).
The Site Manager prefers not to allow the use of site user accounts for visitors to the data-driving.shop site, so as not to unnecessarily trigger the use of personal data by the site. As a result of this choice, the only WordPress cookies that may be placed on visitors’ computers by data-driving.shop are those associated with COMMENTS left by users on certain pages and articles on the site. A description of these cookie files can be found in the article Protecting our anonymity by default.
The programs (computer code) of the WordPress application and those of the third-party solutions that the site uses to customize and complement the functionality of WordPress (e.g., the solutions for operating the online SHOP and the PAYMENT gateway) have, by their very nature, access to the data exchanged between the data-driving.shop site and its users, since it is these programs that allow this data to be exchanged on the site and, where applicable, stored in its database and cookie files.
No one other than the Site Manager has access to the instances of these programs that are installed and running within the security of the data-driving.com server and that are set up to use site usage data only within the secure confines of the data-driving.com site. The Operator has effectively set up the WordPress programs and programs that extend the functionality of WordPress so that they cannot, by default, take site usage data outside of the data-driving.shop site with three exceptions to this rule:
- The Apache server of the data-driving.shop site creates a secure connection with the browser of each person who visits the site, to allow a secure two-way exchange of data, limited to the public information of the site as well as the private information of the person connecting. This connection is systematically encrypted from end to end between the server and each client browser that connects to the site. The encryption is guaranteed by an SSL certificate, up to date with the state of the art in website security in 2021.
- Woocommerce, an extension to the WordPress programs integrates e-commerce functionality into the site, including the online SHOP, and creates and stores CART and session information on the computer of each visitor (if their browser allows cookies, otherwise the CART does not store items placed in it, and it is not possible to place an ORDER). Woocommerce is presented in more detail in the section The online shop integrated into the site, a little later in the document.
- Woocommerce PayPal Checkout, an extension of the Woocommerce programs that adds to the SHOP of the site the PayPal Checkout online payment functionality of the company Paypal (Europe) s.à.r.l et cie S.C.A. (a company of the American group Paypal Holdings, Inc.) transmits the ORDER data strictly necessary for payment (order number and amount to be paid) from the data-driving.shop site to the PayPal Checkout secure payment gateway, which is not part of the data-driving.shop site. This exchange of encrypted information with the PayPal Checkout payment gateway contains the email of the person placing the order if it has already been entered for payment. The PayPal Checkout payment gateway asks the person wishing to purchase to enter their payment card information in order to proceed with the online payment. If the buyer does not wish to pay from a PayPal account, but only from payment card data, the PayPal Checkout payment gateway will ask for the billing postal address and a telephone number in addition to the card data. The surname, first name, billing address and telephone number are stored by PayPal Checkout in PayPal Checkout cookie files on the ordering party’s machine (in this case, the ordering party’s browser allows cookies, since otherwise it is not possible to place an ORDER on the website). According to PayPal, this data is stored to enable PayPal to create an account later, if the person concerned so wishes. During this online payment procedure, no payment data is exchanged between PayPal, the data-driving.shop website and the Woocommerce websites. Payment card data is not stored in cookies.
The conditions of use of the SHOP and the PAYMENT gateway are presented in more detail in the following sections.
The online shop integrated into the site
An online SHOP is integrated into the data-driving.shop site via a WooCommerce extension, developed by the American company Automattic. This company was founded by major contributors to WordPress (see and Woocommerce on Wikipedia and Automattic on Wikipedia).
The SHOP uses three Woocommerce cookie files to function. A session cookie and two shopping cart cookies. Because the site only sells downloadable items (the data-driving e-book and its soundtrack) these cookies do not contain any information that could identify the persons visiting the site. The shopping cart cookies are deleted when the shopping cart is empty. The session cookie persists for two days after its creation.
The COOKIES? page, accessible from the first choice in the general menu of the data-driving.shop site, presents these cookies in more detail.
The practical operation of the SHOP is presented in the rest of the document with a description of the items on sale and how they can be purchased.
The payment gateway to buy items in the SHOP
On the online SHOP of the data-driving. shop, it is possible to pay for purchases by payment card (debit card, credit card, prepaid card and commercial card) with cards from Carte Bleue (CB), Visa, Mastercard, Discover, Maestro, Carte Aurore, American Express, Cofinoga or Privilège, Cofidis 4 stars, Union Pay and DINERS, thanks to the PayPal Checkout solution, which can be operated via Woocommerce PayPal Checkout, an extension to the Woocommerce programs of the Online Shop, and via a payment gateway operated by Paypal (Europe) s.à.r.l et cie S.C.A., a credit institution approved by the Autorité de Contrôle Prudentiel et de Résolution de la Banque de France (financial control authority depending on the French Central Bank) under number 72036.
Paypal (Europe) s.à.r.l et cie S.C.A. is a private company under Luxembourg law. The address of its registered office is 22-24 Boulevard Royal, L-2449 Luxembourg. Its activity is that of a credit institution within the meaning of Article 2 of the law of 5 April 1993, authorised on the financial sector and placed under the prudential supervision of the Commission de Surveillance du Secteur Financier, located at L-1150 in Luxembourg.
In order to function, PayPal Checkout uses several cookie files, the details of which can be accessed by a user of the data-driving.shop website and are illustrated as an example in the PayPal Checkout cookie files article.
In order to execute each card payment order initiated on the data-driving.shop website, PayPal’s computer programs process and store each payment transaction:
- the type of card used
- the card number (stored in truncated form and without the cryptogram on the back of the card)
- the amount of the transaction.
PayPal declares that it will carry out this processing in accordance with the data protection legislation in force in the EEA.
Thus, the data relating to a payment by card (without a PayPal account) are deleted after a period of 13 months. The cryptogram is never kept. The other data relating to the payment is kept for a period of 5 years from the date of execution.
In order to comply with its legal obligations in the fight against fraud, money laundering and the financing of terrorism, PayPal may receive certain data from its partners (e.g. identity verification services). The data processed for this purpose in relation to a payment made on the data-driving.shop site is kept for as long as the site is under contract with PayPal and will be deleted at the end of a 5-year period starting from the end of the contractual relationship between the site and PayPal.
The persons who may have access to this data are authorised PayPal staff, as well as third-party service providers acting as subcontractors to whom PayPal may have recourse for the purposes of processing, and administrative or judicial authorities.
Paypal endeavours to process data within the European Union. However, data may exceptionally be transferred outside the EU. In such cases, according to Paypal, transfers will be subject to appropriate safeguards to ensure an adequate level of data protection (e.g. transfers will be based on standard contractual clauses, binding corporate rules, adherence to the Privacy Shield, etc.).
Paypal is bound by professional secrecy in accordance with the legislation in force. However, professional secrecy may be lifted, in particular with regard to the tax authorities, customs, the Banque de France (French Central Bank), social security bodies and the ACPR (financial control authority depending on the French Central Bank) and/or in the context of criminal or civil proceedings when a legal provision expressly provides for this.
The practical operation of the payment on the data-driving.shop SHOP is described in the following sections.
Items (products) for sale on the site
The purpose of the data-driving.shop website is to sell directly to individuals the e-books Data-driving by the author Surf Xi (one e-book in English and one e-book in French), published by Les éditions à deux balles, as well as their soundtracks, grouped together in three albums entitled little-voices (all the sound tracks in English and in French), the-little-voice (all the sound tracks in English) and la-petite-voix (all the sound tracks in French), by Surf Xi, also published by Les éditions à deux balles.
The e-book, available in English and French, is published in .EPUB format. It contains about 14,500 words (English version). The number of pages depends on the reading device used (computer, tablet or smartphone) and the preferences chosen in the reading software. For illustration purposes, below is a screenshot of the first two pages of the book and a screenshot of the last two pages of the e-book as they can be seen with the Apple Books application.
At the time of updating this text, the soundtrack of the e-book contains six tracks with lyrics in English, and six tracks with lyrics in French, published as .mp3 files downloadable after payment, whose titles are winning-systematically version zero, a-little-of-a-crook-on-the-edges version zero, smart-digital-marketing version zero, black-Xmas version zero, smartface version zero and i1995-2015 version zero for the English tracks and gagner-à-tous-les-coups version zéro, un-peu-escrocs-sur-les-bords version zéro, smart-marketing-digital version zéro, black-Noël version zéro, smartface version zéro and i1995-2015 version zéro for the French tracks. This number of tracks may increase over time.
The e-books and their soundtracks can be accessed from the general menu of the data-driving.shop site (at the top of the screen), by clicking on the E-BOOKS and SOUNDTRACKS options.
Each e-book is sold for €2. Each track of the soundtrack is sold for €0.30 separately from an album. The purchase price of a soundtrack album is a multiple of the number of tracks it contains, e.g. €1.80 for the album the-little-voice that contains six tracks in English and €3.60 for the album little-voices that contains six tracks in English and six tracks in French. The prices of the articles are displayed before tax because for the moment VAT is not applicable to the articles sold on this site, by virtue of article 293 B of the CGI (French Tax Code).
On the page presenting the e-book article, it is possible to consult the first pages, the table of contents and the last two pages. On the page presenting each soundtrack one can listen in streaming audio to a sample of each track on sale, by clicking on the play button positioned in the Description section of the article, as shown for example in the following image. The duration of a sample is a few seconds.
To buy the e-book on sale on the data-driving.shop website
There are two prerequisites to be able to buy on the data-driving.shop website. The first is to allow your browser to memorize cookies, otherwise the shopping cart and the payment gateway will not work. The second is to be the holder of a payment card with sufficient authorisation to proceed with the online payment.
NB. The cookies on the data-driving.shop website are only needed to be able to buy on the website. Those who do not wish to purchase can, in principle, use the other functions of the site with a browser set to block cookies.
If the two prerequisites mentioned above are met (cookies and payment card), it becomes possible to purchase the e-books data-driving v.0 and their soundtracks. To do so, please, first place each item in the shopping BASKET, by clicking on the Add to basket button at the end of the text presenting the article on sale, as illustrated as an example in the following image.
Please check the BASKET before paying
Before buying, it is possible and advisable to check the status of the BASKET, whose contents are permanently summarised in the top right-hand corner of the screen (on the main menu line). As an example, the following image shows that the BASKET contains only one item, for a total purchase amount of 2 €.
To check the contents of the basket in more detail you can either click on the shopping basket icon at the top right of the screen, as shown as an example in the previous image, or click on the View basket button which appears above the item as soon as it is added to the shopping BASKET, as shown as an example in the following image.
Adjust the quantity of each desired item
Consulting the BASKET allows you to adjust the items in it, and if necessary their quantity (e.g. if I want to buy a copy for myself and a copy for someone else, I should in principle choose to buy two copies of the same item).
To adjust the quantity of an item, use the small arrows to the right of the number in the Quantity column for each item, as shown as an example in the following image.
The down arrow decreases the number of items in the basket. The up arrow increases it. The following image shows, as an example, the result of clicking once on the down arrow to reduce the number of items to zero.
Clicking on Update Basket, validates the update with the possible consequence of emptying the BASKET completely, as shown as an example in the following image.
Go to the SHOP
When consulting an empty BASKET, the Return to Shop button allows you to see all the items for sale on the data-driving.shop site, as illustrated by way of example in the following images. This page can also been reached using the the-little-shop option in the general menu bar, at the top of the website.
At the bottom of the shopping BASKET image, which precedes the example of SHOP, the comment “Attention: the shopping cart is automatically emptied if the browser does not accept cookies” reminds us that it is necessary to set your browser to accept cookies if you wish to buy on the data-driving.shop site.
When allowed by the browser, here is a summary of how these cookies are used.
- The data stored in these shopping cart cookies is only needed to purchase on the site and is deleted when you leave. The data stored in the PayPal Checkout cookies is only used by the PayPal payment gateway. These are persistent cookies, which remain stored in the users browser after leaving the site.
- The data stored in the WooCommerce session and BASKET cookies is only used for the operation of the shop and is not required if you do not wish to purchase. PayPal cookies are only needed if you wish to purchase from the site. The shopping cart cookie files are deleted as soon as you leave the data-driving.shop website. The shop session cookie persists for 2 days. PayPal Checkout cookies persist in users’ browsers for several months after they are activated or updated by the PayPal Checkout payment gateway.
Validate your order and pay to download the items
Once you have added at least one item to the BASKET, you must validate your order in order to purchase it. To do this, you can click on the CHECKOUT option in the general menu, as shown in the following image as an example.
It is also possible to go through the BASKET by clicking on the Proceed to checkout button, as shown for example in the following image for the purchase of the article Data-driving version zero.
In order to purchase the items in the BASKET, the order must be validated by both the person wishing to purchase and the shop selling the contents of the cart.
To validate the order, the person who wishes to buy is invited, before paying, to enter an email address and then to accept the general terms and conditions of purchase and sale of the site by checking the box to the left of the text “I have read and accept the general terms and conditions“. The person must also click on the general conditions link to view the text, read it carefully and download it if needed. After having accepted the general conditions, it is possible to pay with a payment card or a PayPal account, by clicking either on the Debit and Credit Card button or on the Paypal buy now button, as shown for example in the following image.
By ticking the box I have read and agree to the website terms conditions, the person who is about to place an order explicitly waives his or her right of withdrawal, in accordance with the French consumer code, due to the specificity of the sale of digital files that can be downloaded immediately after purchase.
The email address requested is used only to send an invoice for the order and a download link for each item purchased. It is kept indefinitely by the data-driving.shop site, associated with the order for which it was entered, and it will be permanently deleted from the site’s database at the request of the person to whom it belongs. This request can be made by email sent to firstname.lastname@example.org.
If you have any questions or comments about the conditions of purchase and sale of the data-driving.shop site, you can contact the Manager (owner, editor, administrator and person responsible for the publication) of the site, whose contact details and hours of availability appear at the beginning of the general conditions of purchase and sale.
Clicking on either the Debit or Credit Card button or on the PayPal Buy Now button takes you to the PayPal Checkout secure payment gateway of Paypal (Europe) s.à.r.l et cie S.C.A. The following image shows an example of the interface of the payment gateway for a payment by card.
For a card payment without using a PayPal account, the PayPal Checkout payment gateway requires, in addition to the card information of the person paying, a billing address, in the form of a postcode and a telephone number, as shown as an example in the image above.
The online shop does not need or use this billing information requested by PayPal Checkout, as VAT is currently not applicable to items sold on this site, in accordance with article 293 B of the CGI (French Tax Code).
The shop only requires an email address to send the purchaser an invoice and a download link for each item purchased.
The shop sends the email address to the PayPal Checkout gateway, which also uses it to send the payer a report on their transaction.
Let’s assume that we want to pay with a payment card, without using a PayPal account, as shown in the image above as an example.
After having entered the payment information, clicking on the Buy button (at the bottom of the screen, after the mentions allowing to take note of the conditions of use of the PayPal Checkout payment platform) triggers a payment which, if authorised by the issuer’s bank, will definitively validate the order. The person paying by card must be the holder of the card used to pay on the data-driving.shop website and must be entitled to use this card to make online payments in general.
The payment card information is only accessible to the programs of the PayPal Checkout payment gateway. The operator of this gateway, Paypal (Europe) s.à.r.l et cie S.C.A., a company incorporated under Luxembourg law, declares that it stores in cookies the personal information of persons who pay with a card without a PayPal account. Paypal Europe justifies this practice in order to allow users who wish to open an account at a later date without having to re-enter the information already entered during a purchase procedure via Paypal Checkout. This practice is not endorsed by data.driving.shop. People who wish to delete Paypal Checkout cookies from their browser after visiting the data-driving.shop website can follow the procedure described in the article Cookies used by Paypal Checkout.
If the payment is accepted, the online shop confirms the order by displaying a payment summary and a download link for each item purchased, as shown as an example in the image below.
It is possible to download each item purchased from the order confirmation page by clicking on the button corresponding to the name of the item, in the download column, as shown in the image above for the Data-driving version zero (EPUB) item. EPUB is the format of the e-book file.
The ∞ sign under the Remaining Downloads column means that no limit is set a priori for the number of downloads. Similarly, in the Expiry column, Never means that no expiration date is set a priori for the download link. The fact that the Site Manager does not wish to set an a priori limit for downloads of purchased items does not mean that the link will allow the document to be downloaded ad vitam æternam. You are therefore advised to download each item in your order as soon as possible after purchase and to keep a personal backup of the downloaded files.
When paying by card via PayPal Checkout for the first time, it may happen that the download link does not appear directly on the site after the order has been confirmed. In this case the link is accessible in the email box of the address indicated by the buyer, in a message that also contains an invoice for the order made, as shown as an example in the image below (if no email appears two minutes after the transaction, think of checking in the junk mail and other spams of the mailbox. In case of problem, please contact the site manager whose contact details are given at the beginning of this document).
The validity of links may change during the life of the data-driving.shop website. Should this occur, the general terms and conditions of purchase and sale on the site will be updated.
If you have any problems downloading, you can contact the Administrator using the contact details at the beginning of this document.
Once downloaded, the file corresponding to the ordered item can be accessed on the computer (or tablet or smart-phone) of the person who placed the order, in the folder chosen by him or her to receive the downloads, as illustrated by the following image as an example.
NB. Buying an article on the site does not give you the right to distribute this article en masse around you, nor to sell it.
An invoice email for each order
As soon as data-driving.shop confirms receipt of the order, a summary of the order is sent by data-driving.shop to the email address entered by the person who placed the order. This email details the content of the order with a link to download each item purchased, as shown two images above.
In the Expiration column, Never means that the Site Manager does not wish to set an end date for the download link. This does not mean that the link will remain valid forever.
The invoice email also reminds us that the email address entered by the person who placed the order remains securely stored in the data-driving.shop database for a pre-definite period of time, so that the order can be fulfilled and the legal requirements respected, as shown as an example with the following image.
The email is the only personal data requested by the data-driving.shop site, which stores it in its secure database. Each person who places an order can request that it be deleted from the site’s database, by replying to the order summary email and confirming that they are aware that the download rights for orders linked to this address will also be deleted (which is not a problem if the person has already downloaded and placed the ordered items in a safe place).
In addition to the email address provided by the person ordering, the site automatically stores the IP address of the machine from which the order was placed. The IP address is not strictly speaking a personal data since it is more precisely associated with an Internet connection. However, if the same IP address is systematically allocated to the connections of the same machine, which is itself used by a single person, then this IP address can be used to identify the person placing the order, if only because it is associated with the order’s email. The Manager of the data-driving.shop site is the only person authorised to access this information from the site’s administration console. He is forbidden to use the information to which he could effectively have access to try to identify civilly the persons who access the site.
However, as he is likely to see email addresses in the course of his work administering the shop, we suggest that people who wish to place orders on the site without being recognised should use email addresses that do not contain a civil identifier (e.g. no family name).
The site data-driving. shop is not able to erase the traces left by the IP addresses of the machines which connect to the site, on the one hand for functional reasons, because it is the IP address which allows the server software of the site to communicate with the client software of each machine which connects to it, and on the other hand for security reasons, because the site’s host uses IP addresses to detect malicious requests, as explained in the site editor’s policy to protect the interests of users and the confidentiality of their usage data. This policy is described in detail on the Cookies ? page, which can be accessed as the first option in the general menu of the data-driving.shop website, as illustrated by the following image.