Personal data and Cookies

1/GROSFILLEX’s commitments regarding the protection of your personal data

So that you can browse our site www.grosfillex.com/ with complete peace of mind, we, GROSFILLEX, explain to you how we collect, process and store your personal data as data controller, to provide you with new services on a daily basis in respect for your rights.

We protect your privacy by ensuring the protection, confidentiality, non-alteration, availability and security of the personal data we process through our site.

We take all necessary measures to:

• provide you with complete, clear and transparent information on the way in which your personal data will be collected and processed;

• implement all technical and organizational measures necessary to protect your personal data against disclosure, loss, alteration or access by an unauthorized third party;

• retain your personal data only for as long as necessary for the purposes of the processing concerned;

• offer you at any time to exercise your rights with regard to the personal data that we hold about you.

To achieve these objectives, we implement all necessary measures to ensure that processing complies with applicable law regarding the protection of personal data.

1.1/ On what occasions do we collect your personal data?

Your personal data may be collected when:

you create an account on our website
you visit our website which may use cookies
you ask for a quote
you subscribe to our newsletter, our alerts or our promotional offers
you contact customer service

1.2/ What personal information do we collect?

We collect the information that you provide to us as part of our commercial relationship, and in particular:

when you create a customer account
during your discussions with our customer service
when requesting a quote

Only strictly necessary information is collected to provide you with the best services. This generally concerns identity data, namely your last name, first name, postal address, email address, landline or mobile telephone number as well as connection data, cookies and technical data.

We also collect personal information when you purchase our products or use our services. In particular, we collect information relating to the amount and nature of your purchases, information relating to your orders, your invoices and your customer or prospect journey on our site.

In accordance with the regulations, we do not collect data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic personal data, biometric personal data for the purposes of identifying a uniquely natural person, personal data concerning health or personal data concerning the sex life or sexual orientation of a natural person.

You can use our site without identifying yourself, in which case the data we collect about you will be limited. However, certain services/functions of the site are only accessible to registered users and the collection of certain data will be mandatory, in particular in order to meet legal, regulatory or contractual requirements.

Data that must be communicated are indicated at the time of collection as such by an asterisk; other data is optional.

Failure to provide mandatory data makes it impossible:

- to access all or part of the services on the site

- to benefit from the products or services we offer

2/ How do we use your data?

We treat your personal information transparently and securely. Your personal information is collected for the purposes detailed below.

2.1/ Management of our obligations towards our customers

Management of orders, deliveries and returns

As part of the execution of our contractual relationships with our customers, we collect and use your personal information for the creation and management of your user account. As such, the communication of a unique, valid, current and verifiable email address, and a password, is mandatory.

Customer relationship management

As part of the execution of our contractual relationships with our customers, we use and retain your personal information in order to update our customer files and manage our contractual relationship with our customers, including the management of any complaints to our customer service.

Newsletter Sign-Up

When you have registered to receive the Grosfillex Expert newsletter, we collect and use your personal information to send you this newsletter.

Sending promotional offers

With your consent, we collect and use your personal information to send you promotional offers that may be of interest to you.

Improving your customer experience and displaying personalized content

With your consent, we analyze your personal information in order to improve your customer experience and display personalized content to you. These analyzes allow us to offer you innovative products or complementary or promotional offers or to display advertisements which respond, as far as possible, to your consumption habits and your interests.

Provision of the site and the services and functionalities available

We collect and process your personal information via essential cookies that we place on your terminal in order to allow you to browse the site in an optimal and secure manner, on the basis of the legitimate interest of GROSFILLEX EXERT to ensure the proper functioning of the site.

Legal or regulatory requirement

In accordance with our legal obligations, we may be required to disclose your personal data in the event of legitimate requests from public and judicial authorities, in particular to meet requirements relating to national security, the fight against fraud or the application of the law.

Prevention and fight against fraud

The data collected is also used in the context of preventing and combating fraud, particularly bank card fraud, on the basis of GROSFILLEX's legitimate interest in ensuring an effective anti-fraud fight. GROSFILLEX reserves the right to verify the personal data communicated by the customer when placing the order and to adopt all measures deemed necessary to verify that the person whose bank account is debited, if applicable, is indeed the person who placed the order, in order to avoid any fraudulent payment. This verification may take the form of a request for proof of identity and/or address. In the absence of a positive response from the customer, GROSFILLEX reserves the right to cancel the order placed by the customer.

Other cases

In the event that other processing of personal data is implemented by GROSFILLEX, you will be informed via an update of this personal data protection charter.

We also use the data collected through our analytical cookies to develop market research and trend analyses, including the analysis of your use of the site, and to improve our products and services. The data is not collected in a format that allows us to personally identify you, it is only collected in an anonymized and aggregated form which will not allow us to personally identify users. This data may be combined with other aggregated data relating to other users as well as with data collected by other entities in our group.

2.2/ Who are the recipients of your personal data?

We ensure that only authorized persons within GROSFILLEX can access your personal data when this access is necessary for the execution of the processing purposes concerned.

Our service providers may also be recipients of personal data strictly necessary for the performance of the services that we have entrusted to them. In this regard, we use the following categories of recipients: delivery and return to our warehouse of your products, online payment, targeted promotional campaigns, debt recovery, prevention and fight against fraud. The processing of your personal data by our service providers is contractually regulated to ensure the protection of your data and respect for your rights.

2.3/ Where are your personal data stored?

The data is stored in compliance with French legislation and European regulations.

If one of our service providers operates outside the European Union, we protect the confidentiality of your personal information and guarantee your rights by concluding standard contractual clauses with this service provider in order to regulate the transfer of your personal data to the country. third party concerned.

To obtain a copy of the guarantees put in place to govern the transfer of your personal data if applicable, you can contact us at the addresses indicated at the end of this data protection charter.

2.4/ How long are your personal data stored?

The data retention periods implemented by GROSFILLEX comply with the recommendations of the CNIL and/or legal obligations:

Categories of personal data	Active retention rules
Data from your customer account	10 years from the end of relations with the client. The time limit starts from either the last order, the last connection to the customer account, or the last call to customer service, or the sending of an email to customer service, or a click on a hyperlink an email sent by grosfillex-expert, or finally a positive response to an email asking if the client wishes to continue to receive commercial prospecting at the end of the ten-year period. At the end of this period, the customer's data will be anonymized.
Data collected through cookies	12 months for Google Analytics, Facebook cookies and for all other cookies, from their deposit on the user's terminal.
Purchasing and billing data	10 years from the issue of the invoice concerned. At the end of this period, the customer's data will be deleted or anonymized.
Data relating to complaints management and after-sales service	Duration of the contractual relationship
Data relating to the sending of commercial communications	Until consent is withdrawn or 3 years from the last contact with the person concerned. The period starts from either the last connection to the customer account (provided no order has ever been placed), the last call to customer service, or the sending of an email to customer service, or by a click on a hypertext link in an email sent by grosfillex-expert or finally by a positive response to an email asking if the person wishes to continue to receive commercial prospecting at the end of the three-year period. At the end of this period, the customer or prospect's data will be deleted or anonymized. At the end of these periods, we can proceed to archiving the data, in particular to meet legal and tax limitation periods and those of legal actions.
GROSFILLEX reseller customer data	3 years from the last act of purchase from one of our GROSFILLEX resellers on French soil via an online quote request on the official GROSFILLEX sites and affiliated sites. At the end of this period, the customer or prospect's data will be deleted or anonymized.

3/ Cookie management

3.1/ What is a cookie?

Cookies are small text files that are placed on your terminal (phone, computer, tablet, etc.) by GROSFILLEX as well as our partners when you browse our site. By extension, and within the meaning of this cookie policy, the term cookie more generally covers all tracking technologies used on the site and which collect information relating to your browsing and your interactions on it.

Cookies can be:

- Session, when they are kept on your terminal exclusively for the duration of your navigation on the site and deleted as soon as you close your browser.

- Persistent, when they are kept on your terminal for a longer period of time, until they expire or until they are deleted by the user.

In certain cases, the cookies used on our site may collect personal data about you.

When personal data is collected by GROSFILLEX as data controller, it will be processed in accordance with the provisions of this privacy policy.

When third-party cookies allow our partners to collect and process personal data about you, we invite you to consult their privacy policy to learn the conditions under which your personal data will be processed. The complete list of partners authorized to place cookies on our site as well as the link to their confidentiality policy is available below.

3.2/ What cookies do we use?

Technical and necessary cookies:

Shopify issues session cookies, which are strictly necessary for the proper functioning of the site and your navigation on it. These cookies do not require prior consent to be placed on the terminal.

Also, these cookies allow:

To benefit from the essential functions of our site.
To memorize certain information as part of your purchasing journey.
To access reserved and personal areas of our site, such as your customer account, using the authentication mechanism.
To maintain your choice relating to the deposit of cookies and to ensure the operation of our cookie management tool.

In this regard, the following third-party providers place essential cookies on your device:

Name	Supplier	Purpose	Shelf life
Google Recaptcha	GOOGLE	Secures our contact forms	11 months

- Cookies called “ analytical » which allow us to establish traffic statistics to understand how you interact with our site and to offer a better experience.

These cookies are placed on your terminal with your consent. If you do not consent to their deposit, we will not be able to take into account your browsing within our performance statistics and audience measurements and adapt the site according to your preferences.

In this regard, the following third-party providers may be authorized to place analytical cookies on your terminal:

Name	Supplier	Purpose	The duration of the conversation
Google	GOOGLE	Allows us to analyze the consultation statistics of our site	11 months

- Cookies " marketing » or advertising which allows you to benefit from personalized advertising content relevant to you, on our site as well as on third-party sites:

Cookies which make it possible to adapt the advertising content inserted on our site to your interests, your location and your behavior on our site;
Cookies which allow us to produce statistics concerning advertising on our advertising spaces and your interaction with these spaces to measure the effectiveness of an advertisement;
Cookies which allow us to offer you advertising content relating to our site and our services when you access third-party sites and social networks, following your visit to our site.

These cookies are placed on your terminal with your consent. If you do not consent to their deposit, you will not be able to have access to personalized advertising content.

Social media plugins

The site uses social media plugins such as Facebook, Instagram, Pinterest, LinkedIn, etc. (hereinafter “Social Networks”). For example, if the user is connected to Facebook while browsing the Site, Facebook can directly link their visit to their Facebook user account even if the user has not used the share button. If the user interacts using the plugins, for example by clicking the "Like" button or leaving a comment, the corresponding information will be transmitted and stored on a Facebook server. They will be published on the user's Facebook account.

GROSFILLEX does not manage the data collected by Social Networks via the buttons. The user must read the policy relating to the protection of personal data published by the Social Networks concerned, in order to know the methods of processing and use of the data collected by the latter as well as the configuration possibilities available to them. has the right to protect his privacy. If the user does not want the Social Network to link the information collected through GROSFILLEX to their Social Network user account, they must disconnect from the Social Network before consulting the site.

3.3/ Managing your choices regarding cookies

When you access the site, a cookies banner is displayed and allows you to accept or refuse all cookies, or to express your choice by category of cookies subject to your prior consent (necessary cookies are activated by default). Until you have given your consent, these cookies are disabled by default and are not installed on your device.

You can choose to configure your choices by cookie categories. The “Manage my choices” button on the banner brings up a settings screen which allows you to view the categories of cookies used on the site and to select the purposes of cookies that you accept or refuse.

You can modify these settings at any time by clicking on the “Cookie Settings” tab accessible from all pages of the site.

3.4/ Duration of storage of your choices regarding cookies

Your choices regarding the acceptance or refusal of cookies on our site are kept for six (6) months, at the end of which you will be asked again to express your agreement, your refusal or a cookie setting.

4/ How to exercise your rights?

In order to allow you to control our uses of your personal data, you benefit from the following rights, under the conditions provided for by the applicable regulations:

The right of access means that you can ask us at any time to tell you whether we are processing personal data concerning you and, if so, to tell you what personal data are concerned as well as the characteristics of the processing(s) carried out.
The right to rectification means that you can ask us to rectify your personal data when it is inaccurate. You can also request that your personal data, if incomplete, be completed to the extent that this is relevant to the purpose of the processing in question.
The right to erasure means that you can request to erase your personal data in particular when: (i) their conservation is no longer necessary in view of the purposes for which they were collected (ii) your personal data is processed on the basis of your consent, you wish to withdraw this consent, and there is no other legal basis which could justify the processing (iii) you have objected to the processing of your personal data and you therefore wish them to be erased (iv) your personal data has been the subject of unlawful processing; (v) your personal data must be erased to comply with a legal obligation which is provided for either by European Union law or by French law.
The right to limitation means that you can ask us to limit the processing of your personal data (i) when you contest the accuracy of your personal data for a period allowing us to verify the accuracy thereof, (ii) when following processing established as non-compliant, you prefer the limitation of the processing to the complete erasure of your personal data (iii) when we no longer need your personal data for the purposes of the processing but they- these are still necessary for you to establish, exercise or defend legal rights; (iv) when you have objected to the processing of your personal data and you wish to limit the processing for the period allowing us to verify whether the legitimate reason you invoke is justified. Restriction of processing means that the processing of your personal data will then only mean the storage of your corresponding personal data. We will then no longer carry out any further operations on the personal data in question.
The right to object means that you can object to the processing of your personal data, when this processing is based on the pursuit of the legitimate interests of GROSFILLEX. The right to object is exercised subject to providing a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons justifying continuation in accordance with the applicable regulations.
The right to define directives relating to the fate of your data after your death allows you to make known your instructions concerning the conservation, erasure and communication of your personal data after your death.
The right to portability means that you can ask us, under the conditions set by the applicable regulations, to receive your personal data in a structured, commonly used and machine-readable format, and to transmit them to you, or to ask us to transmit directly to a third party of your choice when legally and technically possible.

You can exercise your rights :

through your customer account in the [My account / My personal data] area
by email using the French form in the “Contact us” section
by mail accompanied by a copy of any identity document by contacting:
Personal Data Protection Service

Grosfillex SAS
20, rue de Lac
Arbent
01117 Oyonnax Cdx
France

We will provide you with the elements of response to your requests as soon as possible and in any event within one month of receipt of your requests.

5/ Our data security measures

5.1/ Our security and confidentiality commitments

Respecting your right to the protection, security and confidentiality of your data is our priority.

GROSFILLEX implements organizational and technical security measures adapted to the degree of sensitivity of personal data to protect them against any malicious intrusion, loss, alteration or disclosure to unauthorized third parties.

When developing, designing, selecting and using our services allowing the processing of personal data, GROSFILLEX takes into account the right to protection of personal data from the moment they are designed.

All personal data being confidential, their access is limited to GROSFILLEX employees or service providers acting on behalf of GROSFILLEX who need it in the context of the execution of their missions. All persons with access to your data are bound by a duty of confidentiality and are subject to disciplinary measures and/or other sanctions if they do not respect these obligations.

Transactions with a third party recipient are subject to a contract to ensure the protection of your personal data and respect for your rights.

We are fully committed to effective protection of the personal data you entrust to us. In this ongoing concern for security and protection, we encourage you to exercise caution to prevent any unauthorized access to your personal data and to protect your terminals (computer, smartphone, tablet) against any unwanted or even malicious access, by a strong password, which is recommended to be changed regularly. If you share a device, we recommend that you log out after each use.

5.2/ Our personal data protection delegate

Our personal data protection officer (DPD) is available to answer your questions at the following address:

dataprotection@grosfillex.com

Updated: September 21, 2023

Privacy Policy