Personal data management policy

In accordance with the General Regulation on the Protection of Personal Data and the French Data Protection Act (Loi Informatique et Libertés) as amended, SIVALBP SAS undertakes to use your data in an appropriate and lawful manner, in particular with regard to the collection of your consent, the purpose of the processing and the length of time your data is kept.

This page has been created to help you understand what information we collect on our website www.sivalbp.fr (hereinafter referred to as the "Site"), for what purpose and how to manage it.

Personal data means any information relating to an identified or identifiable natural person in accordance with Article 4 of the RGPD (hereinafter referred to as the "Data").

1. Data controller

The person responsible for processing your Data within the meaning of the RGPD is :

• SIVALBP
• Simplified joint stock company with share capital of €3,800,000
• Registered with the ANNECY Trade and Companies Register under no. 451 161 004
• Registered office: 1 rue du Petit Pessey Zone Artisanale La Balmette 74230 THÔNES
• E-mail : : marketing@sivalbp.com

2. Data Protection Officer

The contact details of our Data Protection Officer are :

• Email : rh@sivalbp.com

3. Purposes and legal basis of data processing

We collect and process your Data in order to provide you with our Site and to offer you the best possible service.

1. 1. Visit our Site

You may use the Site without providing any personal information.

When you use our Site for information purposes only, we do not process any Data, with the exception of data transmitted by your browser to enable you to visit and information transmitted in the context of cookies for the purposes of statistical analysis of the use of the Site (see our cookies policy).

We process your Data in order to provide you with technical access to our Site on the following legal grounds:

• In pursuit of our legitimate interests, so that we can ensure the technical provision of the Site. Our legitimate interest is to be able to provide you with an attractive, technically functional and user-friendly Site, to take all measures to protect our Site from cyber security risks and to prevent third parties from being exposed to such risks on our Site.

For more information, please refer to our cookies policy.

In any event, the information collected is kept for a maximum of thirteen months from the date of insertion of the corresponding cookie.

1. 2. Contact form, support & diagnostics

If you contact us using our contact form, you must indicate your title, surname, first name, professional or private capacity, e-mail address, telephone number, postal address, company and send us your message. Your postal address is optional.

The Data is recorded by us for the purposes of processing your request and/or in the event that you have any questions to ask us.

Your Data is kept for the period strictly necessary for the proper management of our commercial relationship and, in any event, for a period not exceeding 26 months from the date of the last unanswered request on your part and in the absence of a request for deletion and/or opposition on your part in the meantime.

We will not pass on your Data to any third party without your express consent, with the exception of those mentioned in Article 5.

We process your Data for the purpose of responding to your requests on the following legal basis:

• In pursuit of our legitimate interest in providing you with appropriate responses to your requests.  

1. 3. Product request form

If you contact us using our Product request form, you must give your title, surname, first name, professional or private status, e-mail address, telephone number, postal address and company name and send us your request for a quotation.

The Data is stored by us for the purpose of processing your request for products.

Your Data is kept for as long as is strictly necessary for the proper management of your request and, in any event, for no longer than three years from the date of the last unanswered request and in the absence of a request for deletion and/or opposition from you in the meantime.

We will not pass on your Data to any third party without your express consent, with the exception of those mentioned in Article 5.

We process your Data for the purpose of responding to your requests on the following legal basis:

• As a pre-contractual measure, this consists of providing you with a product summary.  

1. 4. Newsletter subscription

You can subscribe to our newsletter by entering your e-mail address in the relevant section.

We will then regularly send you our newsletter containing news about our products, services and/or achievements. You may, at any time, unsubscribe and/or request that you no longer receive our newsletter.

Your Data will be kept for the period strictly necessary to send this newsletter and, in any event, for a period not exceeding three years from the date of your registration or the last solicitation to which you did not respond, unless you request that we delete and/or oppose this in the meantime by sending an e-mail to marketing@sivalbp.com or by clicking on the unsubscribe link at the end of each newsletter you receive by e-mail.

We will not pass on your Data to any third party without your express consent, with the exception of those mentioned in Article 5.

We process your Data to send you our newsletter on the following legal basis:

• You can withdraw your consent at any time by sending an email to marketing@sivalbp.com or by clicking on the unsubscribe link at the end of each newsletter.

4. Delete

SIVALBP undertakes to limit the length of time it keeps your Data.

Your Data will therefore be deleted as soon as the purpose for which it was processed has ceased or no longer exists, or if you request that it be deleted.

Your Data will also be deleted on expiry of the aforementioned retention periods, unless it is necessary or legitimate to retain the Data for the signature or performance or termination of a contract, or for the exercise or defence of legal claims, or unless you have given your express consent for it to be retained.

5. Categories of recipients

Initially, only our employees are required to process your Data. They are required to respect the confidentiality of the Data and are regularly trained in Data protection and security.

Nevertheless, we may communicate them to other recipients providing us with services in connection with our Site, to the extent authorised or provided for by law. In this case, we limit the transfer of your Data to what is strictly necessary. On the one hand, our service providers receive your Data as sub-contractors, and are strictly bound to comply with our instructions concerning the processing of your Data, including compliance with regulations relating to the protection of personal data. On the other hand, the recipients treat your Data independently and seriously, as it is transmitted to them by us.

Below is a list of the categories of recipients who may receive your Data:

• Communication: we may also communicate the information you provide on our Site to third parties who provide services linked to the Site.
• Legal: we may also disclose the information you have provided to us if such disclosure is necessary to comply with applicable regulations, respond to a subpoena or exercise or defend a legal right.

6. Cookies

We invite you to consult our cookies policy.

7. Data transfer

The Data collected will under no circumstances be transferred outside the European Union.

8. Security

We have implemented security and confidentiality measures to protect the Data you provide against unauthorised access and use.

To this end, appropriate technical and organisational measures are put in place to prevent the loss, misuse, alteration and deletion of your Data. These measures are adapted according to the level of sensitivity of the Data processed and the level of risk presented by the processing or its implementation.

However, you should be aware that despite all the security measures implemented, no transmission of Data over the Internet is 100% secure and that all information communicated online can potentially be intercepted and used by persons other than the intended recipient.

9. Your rights

You have the following rights:

• Right of access: You are entitled, at any time, to request confirmation as to whether or not Data relating to you is being processed; where Data is being processed, you are also entitled to receive information concerning such Data and certain other information (including the purposes of the processing, the categories of Data, the categories of recipients, the intended storage period, the origin of the Data, the use of automated decision-making and, in the event of Data being transferred to a non-Member State, the appropriate safeguards), as well as a copy of your Data.
• Right of rectification: You are entitled to request the rectification of any incorrect or erroneous Data. 
• Right to erasure ("right to be forgotten"): You are entitled, under certain conditions, to ask us to delete your Data as soon as possible. The right to erasure does not apply, in particular, if the processing of the Data is required for (i) the exercise of the right to freedom of opinion and information, (ii) the fulfilment of a legal obligation to which we are bound (e.g. legal retention obligations) or (iii) the assertion, exercise or defence of legal claims.  
• Right to limit processing: You are entitled, under certain conditions, to ask us to limit the processing of your Data.  
• Right to Data portability: You have the right to receive, in a structured, common and machine-readable format, the Personal Data concerning you that you have made available to us.
• Right to object: Under certain conditions, and having regard to your personal situation, you may object to the processing of your Data. In this case, we will stop processing your Data unless the processing must be continued for legal reasons or for the exercise or defence of our rights in the context of any legal/judicial claims.
• Right to revoke consent: You have the right to revoke your declaration of consent to Data protection at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of that consent, until it is revoked.

You may exercise your rights by sending a request to the following e-mail address marketing@sivalbp.com or by post to "SIVALBP, 1 Rue du Petit-Pessey - F- 74230 THONES", specifying the subject of your request and enclosing a copy of your identity document.

If you have asserted one or more of your rights, we are obliged to inform, where appropriate, all recipients to whom your Data has been disclosed, with your prior express consent, unless this proves impossible or involves a disproportionate effort. You have the right to obtain information about these recipients.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or legal remedy, you may appeal to the CNIL.

The CNIL will inform the complainant of the progress and outcome of the complaint, including the possibility of legal recourse, in accordance with Article 78 of the RGPD.

However, we recommend that you always send your complaints to us at marketing@sivalbp.com. We will reply within two months.

11. Changes and updates to the Policy

By using the Site, you consent to the collection, use and disclosure of your information as described in this Policy. This Policy reflects SIVALBP's current business practices and may be changed or updated at any time.