Privacy Policy
As part of using the site dilatoflex.com (the "Site"), you are likely to provide personal data, in particular through contact and documentation request forms, your distributor area and your orders.
The "Data controller" is the company ANVIS HOLDING, SAS with a capital of €10,000, registered with the RCS of EPINAL under number 883 481 178, having its registered office at 19 route d’Archettes, 88000 EPINAL, whose intra-community VAT number is FR26883481178, also publisher of the Site.
The Data Controller undertakes to comply with the applicable regulations on the protection of personal data, and in particular Regulation (EU) 2016/679 of 27 April 2016 known as the "General Data Protection Regulation" or "GDPR") and Law No. 78-17 of 6 January 1978 known as the "Data Protection Act" as amended (together the "GDPR legal framework »).
The purpose of this Privacy Policy is therefore to inform you of how the Data Controller collects, uses and protects personal data in connection with the use of the Site.
1. Data, collection, purposes, storage
The Data Controller may collect personal data in the context of implementing various purposes, as detailed in the table below.
The data collected through cookies is described in more detail below (part 5 “cookies”).
| Data collection method | Category of personal data collected | Legal basis for processing | Purpose of the processing | Data retention period |
|---|---|---|---|---|
| Contact and documentation request forms | Personal details: surname, first name Contact details: email address, telephone number Professional data: company, position, country If applicable: any personal data that you voluntarily provide in your initial contact message. | Implementation of pre-contractual measures (Article 6.1(b) of the GDPR) | To communicate with you following a request from you, to send you a quote (on your request) or to provide you with the information and documents you have requested on our products, possible conclusion of the contract. | During the processing of the application, and then for a period of three years after the last contact. |
| Distributor area (account request and customer account) | Personal details: surname, first name Contact details: email address, telephone number Business details: company name, SIRET number, intra-community VAT number, billing and delivery addresses Login credentials (the password is stored in encrypted form) | Performance of pre-contractual measures and of the contract (Article 6.1(b) of the GDPR) | Review your account opening request, create and manage your customer account, give you access to your prices, documents, orders and delivery addresses. | For the duration of the business relationship, and then for a period of three years from the last activity on the account. |
| Orders | Customer and delivery person identity and contact details Billing and delivery addresses Order contents, desired delivery dates, comments Card payment data: entered and processed directly by our payment provider Stripe, it is never stored by the Data Controller | Performance of the contract (Article 6.1(b) of the GDPR) and compliance with legal accounting and tax obligations (Article 6.1(c) of the GDPR) | Processing and preparing your order, collecting payment, transmitting it to our management system (ERP), organizing delivery with the carrier, informing you and ensuring follow-up, invoicing and after-sales service. | During the term of the business relationship; accounting documents (invoices, orders) are kept for ten years in accordance with Article L. 123-22 of the Commercial Code. |
| Audience measurement (Google Analytics cookies) | Pseudonymous navigation identifier, pages viewed, browsing history on the Site, browsing events (product viewing, shopping cart, order), technical data (browser, device type, language, approximate location) | Your consent (Article 6.1(a) of the GDPR), obtained via the cookie banner | To compile website traffic statistics and improve the Site. Google Analytics is only loaded after you give your consent. | Cookies: Maximum 13 months. Statistical data: 14 months. |
Specific information on sensitive data: The nature of the Site, the methods of data collection (forms, customer accounts, and orders), and the activities of the Data Controller mean that, in principle, the Data Controller does not process, collect, or use sensitive data. However, if you voluntarily disclose such data, the Data Controller undertakes not to use it and to ensure its protection in accordance with the GDPR (no processing, application of enhanced security measures).
The Data Controller does not carry out any profiling activities and/or fully automated individual decision-making.
2. Data Recipient
In the context of the processing of your personal data, the latter is in principle transmitted only to the internal services of the Data Controller and its subsidiaries and affiliated companies within the meaning of Article L233-3 of the Commercial Code, to the exclusion of any assignment or transfer to third parties.
Your data may also be transferred to external service providers, solely for the purposes mentioned above and only to the extent strictly necessary for the performance of the tasks entrusted to them and/or to comply with legal and regulatory requirements. These external recipients then act as data processors within the meaning of data protection legislation (hereinafter the "Data Processor"). The Data Controller only provides the Data Processor with the personal data strictly necessary for the performance of its duties. Before any transfer of personal data to a Data Processor, the Data Controller ensures that said Data Processor commits to and provides guarantees regarding its ability to ensure data security and confidentiality, in accordance with applicable regulations. To this end, the Data Controller may enter into a contract with each of its potential Data Processors that complies with data protection legislation.
These include:
- Subcontractors, in particular from the following categories: Site hosting and maintenance (reqst), technical information system providers (ERP management…), online payment (Stripe), transport and delivery of orders (notably Kuehne + Nagel), audience measurement (Google Analytics, on consent; on this point, please consult the article “cookies”);
- Legally competent authorities: Tracfin, social and tax bodies and all judicial authorities authorized by legislative and regulatory provisions.
3. Transfer outside the EU
In principle, your data is processed and hosted by the Data Controller within the territory of the European Union.
All necessary measures are in place to guarantee the confidentiality, integrity and security of personal data, including with regard to subcontractors, taking into account the risks involved, in order to prevent personal data from being distorted, damaged or accessed by unauthorized third parties.
However, when personal data is transferred to certain subcontractors, including Stripe and Google, it may be transferred outside the European Union. In such cases, appropriate measures under the GDPR are taken to ensure that the recipients maintain a level of security comparable to that resulting from compliance with the GDPR and provide the required guarantees.
4. Your rights
In accordance with the GDPR legal framework, you have the right to access, rectify and limit processing, as well as the right to erasure, objection, portability, erasure or objection to processing.
You also have the right to withdraw your consent at any time.
In addition, you have the right to define general and specific guidelines regarding the retention, erasure and communication of your personal data after your death.
These rights can be exercised by contacting the Data Controller at the following address, attaching proof of identity:
- Email: dilatoflex@anvisgroup.com
- Postal address: ANVIS HOLDING, 19 route d’Archettes, 88000 EPINAL
Finally, you have the right to lodge a complaint with the National Commission for Information Technology and Freedoms (CNIL), or any other competent supervisory authority.
5. Cookies
Cookies are small files stored by a server on a user's device (computer, phone, etc.) and associated with a web domain. This file is automatically sent back during subsequent interactions with the same domain. Cookies are used to operate this website and/or to collect information about the user's browsing activity.
The maximum storage period for this information on your device is 13 months.
Some cookies are strictly necessary for the proper functioning of the website: remembering your cookie and language preferences, saving your shopping cart, connecting to the distributor area, and securing payment. Therefore, they are exempt from requiring consent.
Audience measurement cookies (Google Analytics) require your prior consent: until you accept them, Google Analytics will not be loaded and no data will be transmitted to it. No advertising or social media cookies are placed on the Site. You can accept, refuse, or customize these cookies using the "Accept All," "Refuse," and "Customize" buttons on the cookie banner that appears during your first visit. Your choice is saved for 6 months and can be modified at any time by clicking on the "Manage Cookies" link, located at the bottom of each page of the Site.
You can also object to the recording of cookies by deleting or disabling them in your browser; however, refusing strictly necessary cookies may prevent access to the distributor area and the placement of orders. Below you will find links to support pages allowing you to manage cookies in the main browsers:
- Google Chrome: https://support.google.com/chrome/answer/95647
- Mozilla Firefox: https://support.mozilla.org/fr/kb/empecher-sites-web-stocker-cookies-donnees-site-firefox
- Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac
- Microsoft Edge: https://support.microsoft.com/fr-fr/microsoft-edge/supprimer-les-cookies-dans-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
The Site uses the following cookies:
| Cookie | Domain | Description | Duration | Kind |
|---|---|---|---|---|
| df-consent | dilatoflex.com | Saves your cookie preferences. | 6 months | Necessary |
| NEXT_LOCALE | dilatoflex.com | Remembers the language used to view the Site (French, English, German). | 1 year | Necessary |
| mage-cart-id | dilatoflex.com | Keep your shopping cart from one visit to the next. | 30 days | Necessary |
| mage-customer-token, mage-session | dilatoflex.com | They maintain your connection to the distributor space. | Connection duration (1 hour) | Necessary |
| reqst-popups | dilatoflex.com | Prevents an information window you have closed from being displayed again. | 2 days | Necessary |
| __stripe_mid, __stripe_sid | dilatoflex.com | Installed by Stripe on the payment page only, to secure payment and prevent fraud. | 1 year / 30 minutes | Necessary |
| _ga | dilatoflex.com | Installed by Google Analytics, it assigns a randomly generated identifier to distinguish visitors and calculate visit and session data. | 13 months | Analytics (subject to consent) |
| _ga_RY107GM3D9 | dilatoflex.com | Installed by Google Analytics to maintain session state and count page views. | 13 months | Analytics (subject to consent) |
You can also view cookies directly in your browser. For example:
- If browsing on Google Chrome: Right-click anywhere on the page and choose Inspect (or press F12); In the panel that opens, click on the tab Application (or Storage, depending on the version); in the left-hand menu, under the heading Storage, expand the line Cookies; Click on the site URL to view the detailed list of cookies.
- If you are browsing with Mozilla Firefox: Click on the menu in the upper right corner (the three lines), then on More Tools > Web Developer Tools. Go to the Storage tab. In the left-hand menu, expand the Cookies section and select the domain to see the list.