Privacy Policy

Definitions

• The Publisher: The natural or legal person who publishes public communication services online.
• The Site: All websites, web pages and online services offered by the Publisher.
• The User: The person using the Site and the services.

1- Nature of the data collected

As part of the use of the Sites, the Publisher may collect the following categories of data concerning its Users:

• Civil status, identity and identification data...
• Connection data (IP addresses, event logs...)

2- Disclosure of personal data to third parties

Recipients of your data
Your data is never sold or rented. It is only disclosed to the service providers who need it to fulfil your order or run the Site, each for that purpose alone:

• carriers (Colissimo, DB Schenker), for delivery: name, address, phone number;
• PayPlug, our payment provider, for card payments; we never have access to your card number;
• OVHcloud, which hosts the Site, and IONOS, which delivers our emails;
• Google, for address autocompletion (see section 13).

It may also be disclosed pursuant to a law, a regulation or a decision of a competent regulatory or judicial authority.

3- Prior information for the disclosure ofpersonal data to third parties in the event of a merger /acquisition

Prior information and opt-out possibility before and after the merger / acquisition
In the event that we take part in a merger, acquisition or any other form of asset transfer, we undertake to ensure the confidentiality of your personal data and to inform you before it is transferred or made subject to new privacy rules.

4- Statistics

Anonymous statistics
We compile overall statistics on how the Site is used (number of visits, pages viewed, share of visits that lead to an order or a quote request) in order to improve it. These statistics do not identify anyone. They are not used for advertising or profiling, and are neither sold nor transferred. The audience measurement that produces them is described in section 8.

5- Collection of identity data

Ordering with or without an account
You can order with a customer account or as a guest, without creating an account. Your personal details (last name, first name, company, postal address, email, phone number) are used to fulfil your order (delivery, invoicing, after-sales service) and to meet our legal obligations. You will not provide false information and will not create an account for another person without their permission. Your contact details must be accurate and up to date.

We also analyse, for internal use only, how products end up in shopping carts (for example from the related products shown on a product page), in order to assess how useful our suggestions are. This analysis is not used for advertising or profiling, and it is not linked to audience measurement.

6- Collection of identification data

Use of the User identifier solely for access to services
We use your electronic identifiers only for and during the performance of the contract.

7- Collection of device data

Technical data needed to run the Site
Some technical data from your device (IP address, browser type and language, operating system) is received automatically by the Site's server. It is used to display pages, protect the Site and fulfil your orders, and for nothing else.

Audience measurement
Part of this data is also used, in reduced form, to measure the Site's traffic: your IP address is truncated before being stored and only anonymous statistics are derived from it (see section 8). This data is never used for advertising and never resold.

8- Cookies

Cookies needed to run the Site
The Site sets cookies that are essential to its operation: session, cart, login to your account. They do not require your consent and are used for nothing else.

Audience measurement cookies
We measure the Site's traffic with Matomo, a tool installed and run by Supratech on a server it rents from OVHcloud. It sets the cookies _pk_id (at most 13 months after it is first set, not extended by later visits), _pk_ses (30 minutes) and, if you arrive from another website, _pk_ref (6 months). These cookies are exempt from consent under the conditions set by the CNIL, the French data protection authority: they are used only to produce anonymous statistics, your IP address is truncated, and the data is neither passed on to third parties nor combined with other processing. Measurement data is kept for at most 25 months. You can refuse this measurement at any time with the box in the "Audience measurement" paragraph at the bottom of this page; your refusal is remembered by the mtm_consent_removed cookie.

No advertising cookies
The Site sets no advertising or social media cookies.

Your browser settings
You can also delete or block cookies in your browser settings. Without the necessary cookies, the cart and your account will no longer work.

9 - Retention of technical data

Retention period for technical data
Technical data is retained for the period strictly necessary to achieve the purposes referred to above.

10- Retention period for personal data and anonymization

Retention of data for the duration of the contractual relationship
In accordance with Article 6(5) of Law No. 78-17 of 6 January 1978 relating to data processing, files and freedoms, personal data that is processed is not retained beyond the time necessary to perform the obligations defined when the contract was concluded or the predefined duration of the contractual relationship.

Retention of anonymized data beyond the contractual relationship / after account deletion
We retain personal data for the period strictly necessary to achieve the purposes described in this Privacy Policy. Beyond this period, it will be anonymized and retained for exclusively statistical purposes and will not give rise to any use of any kind.

Retention periods
Your account data is kept for as long as the account exists. Orders and invoices are kept for ten years, as required by our accounting obligations (Article L123-22 of the French Commercial Code).

Deletion of the account and its data
When your account is deleted, your data is erased or anonymized, except for orders and invoices, which are kept for the legal period. You have a right to have your data deleted, which you may exercise at any time (see section 11).

11- Account deletion

Account deletion upon request
You can ask for your account to be deleted at any time, from the "My personal data" page of your customer area, which leads to the contact form, or by writing to us. The same page lets you download a copy of your data (PDF or CSV).

Account deletion in the event of a breach of the Privacy Policy
In the event of a breach of one or more provisions of the Privacy Policy or any other document incorporated herein by reference, the Publisher reserves the right to terminate or restrict without prior notice and at its sole discretion, your use of and access to the services, your account and all Sites.

12- Guidance in the event of a security breach detected by the Publisher

User information in the event of a security breach
We undertake to implement all appropriate technical and organizational measures to ensure a level of security appropriate to the risks of accidental, unauthorized or unlawful access, disclosure, alteration, loss or destruction of the personal data concerning you. In the event that we become aware of unlawful access to personal data concerning you stored on our servers or those of our service providers, or of unauthorized access resulting in the realization of the risks identified above, we undertake to:

• Notify you of the incident as soon as possible;
• Examine the causes of the incident and inform you;
• Take the necessary measures within reasonable limits to reduce the negative effects and damage that may result from said incident.

Limitation of liability
Under no circumstances may the commitments defined above regarding notification in the event of a security breach be construed as any acknowledgment of fault or of liability for the occurrence of the incident in question.

13- Transfer of personal data abroad

Hosting in France, one Google service
The Site and your order data are hosted in France. Only address autocompletion (Google Places) uses Google, a company based in the United States: it receives the text you type in the address field, through our server, without your IP address. This transfer relies on the EU-U.S. Data Privacy Framework, to which Google adheres.
https://www.cnil.fr/fr/la-protection-des-donnees-dans-le-monde

14- Changes to the privacy policy

In the event of changes to this Privacy Policy, commitment not to substantially reduce the level of confidentiality without prior information to the persons concerned
We undertake to inform you in the event of any substantial change to this Privacy Policy, and not to substantially reduce the level of confidentiality of your data without informing you and obtaining your consent.

15- Applicable law and dispute resolution

Application of French law (CNIL legislation) and jurisdiction of the courts
This Privacy Policy and your use of the Site are governed and interpreted in accordance with the laws of France, and in particular Law No. 78-17 of 6 January 1978 relating to data processing, files and freedoms. The choice of applicable law does not affect your rights as a consumer under the law applicable in your place of residence. If you are a consumer, you and we agree to submit to the non-exclusive jurisdiction of the French courts, which means that you may bring an action relating to this Privacy Policy in France or in the EU country in which you live. If you are a professional, all actions against us must be brought before a court in France.

In the event of a dispute, the parties will seek an amicable solution before any legal action. In the event that these attempts fail, any disputes as to the validity, interpretation and / or performance of the Privacy Policy must be brought, even in the event of multiple defendants or third-party claims, before the French courts.

16- Data portability

Data portability
The Publisher undertakes to offer you the possibility of having all data concerning you returned to you upon simple request. The User is thus guaranteed better control of their data, and retains the possibility of reusing it. This data must be provided in an open and easily reusable format.