Privacy Policy

Last modified date: 10/05/2024

We are committed to ensuring that the collection and processing of your data, carried out from the Kermaz Pneumatic website, comply with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés). This policy informs you about how Kermaz Pneumatic, its subcontractors, and any partners process your personal data. This policy applies specifically to customers and users of Kermaz Pneumatic's offers and services. It may be supplemented by specific information provided to the user regarding a particular offer or service.

Cookies

A cookie is a small computer file, a tracker, deposited and read, for example, when browsing a website. The use of these tools requires your consent if they are not strictly necessary for the operation of the site concerned.

Protection against SPAM

To filter messages recognized as spam via contact forms, we use a data analysis service: reCAPTCHA. Using these forms implies acceptance of the privacy policies specific to these services, described below. Google reCAPTCHA (Google Ireland Limited) is a service to protect form entries on our site. It is used to distinguish between entries made by a human and automated abuse. Use of reCAPTCHA is subject to the privacy policy and Terms of Service of Google Ireland Limited. Data transmitted: cookies and usage data. Processing location: Ireland.

Form and online service

Each form or online service limits the collection of personal data to what is strictly necessary (data minimization) and specifies: the data controller and the purposes of collecting this data; the mandatory or optional nature of collecting this data for managing your request and the categories of data processed; recipients of the data (usually only Kermaz Pneumatic, unless specified otherwise in the form when transmission to a third party is necessary for managing your request); data retention period; the possible existence of data transfers outside the European Union or automated decision-making; your rights under data protection laws and how to exercise them with the CNIL (French data protection authority). Personal data collected as part of the services offered on the Kermaz Pneumatic website are processed using secure protocols and enable Kermaz Pneumatic to manage requests received in its computer applications.

What are your rights?

You have the right to access, rectify, and delete data concerning you. You can request the portability of this data. You also have the right to object to processing or request limitation. Additionally, you can issue directives on the retention, deletion, or communication of your personal data after your death.

How to exercise your rights?

You can exercise your rights and contact Kermaz Pneumatic at any time using the addresses below, enclosing a copy of your ID if you are exercising your rights, unless the information provided in your request allows for your certain identification. By signed mail to the following address: 9 rue Maurice Leblanc 78290 Croissy-sur-Seine If you do not receive a satisfactory response, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL).

Purposes of processing your personal data

Kermaz Pneumatic processes personal data only for specific, explicit, and legitimate purposes. Kermaz Pneumatic does not process this data in a manner incompatible with these purposes. To this end, the purposes pursued by Kermaz Pneumatic include:

Processing data from the contact form

Collecting, transmitting, and recording data to contact the company:

• Sending a response email
• Managing quotations

Processing data from the account creation form

Collecting, transmitting, and recording data to create an account:

• Sending a response email

Order management and customer relationship

Kermaz Pneumatic needs information about you for managing your orders and their follow-up (e.g., deliveries), invoices, accounting, and especially customer account management, monitoring customer relations such as conducting satisfaction surveys, managing complaints, and after-sales service.

Payment for your orders and payment details

When you pay on our site, your payments are secure. Kermaz Pneumatic does not collect your payment details. All your banking details are collected only by our PCI-DSS certified payment service provider (Be2bill) to ensure payment security. When you pay for an order, the card used for payment is stored for the time necessary for the transaction and for 13 months from the payment date to provide proof of the transaction and to combat payment card fraud.

Customer knowledge and site audience statistics

We may use data to better understand our customers or for statistical purposes to analyze site activity and improve the services we offer. We measure audience, for example, by counting page views, site visits, visitor activity on the site, and their return frequency.

Email communication

Following the creation of your account and unless you object, you may receive information and offers from us by electronic communication (email). We measure the opening rate of our email communications to better tailor them to your needs.

What data is processed?

Kermaz Pneumatic processes data or categories of data only if strictly necessary for the intended purpose. You can find information about these purposes above. Kermaz Pneumatic processes the following categories of data:

• Identity data: First name, last name, company profile ...
• Contact details: Email, postal address, phone number ...
• Login data: Client connection logs, order history ...
• Content data: Transactional emails, invoices ...
• Location data

Who are the recipients of your data?

The collected data is intended for internal services of the site and its subcontractors. Processed data may also be transmitted to competent authorities upon request, as part of judicial procedures, investigations, or requests for information from authorities, or to comply with other legal obligations.

How are your data secured?

Kermaz Pneumatic ensures that your data is processed securely and confidentially, even when certain operations are performed by subcontractors. To this end, appropriate technical and organizational measures to prevent loss, misuse, alteration, and deletion of your personal data are implemented. These measures are adapted according to the sensitivity level of the processed data and the risk level posed by the processing or its implementation.

Data retention period

The administrative usefulness duration (DUA) is the period during which archived documents, data, or information must be retained and kept in a state to be consulted and used, either by those who produced them or by archive services. Below are the administrative usefulness durations (DUA) applicable to the main procedures managed by Kermaz Pneumatic. DUA covers the duration of retention in active base and internal archives.

Changes to the data protection policy

This personal data protection policy may evolve.