Privacy policy

Preamble

As part of its activities, PYRENEX offers an e-commerce service accessible from the website www.pyrenex.com (the "Site"). On this occasion, PYRENEX collects personal data. The collection of this data takes place on the Site or by telephone. The purpose of this section is to inform the individuals concerned ("you" or "your") in a clear, simple and comprehensive manner about the way in which PYRENEX ("PYRENEX", "we" or "our/ours"), in its capacity as data controller, collects and uses personal data relating to you, and about the means available to you to control such use and exercise your related rights.

Mindful of your privacy, PYRENEX is committed to ensuring the highest level of protection of your personal data. As such, PYRENEX endeavours to adopt and comply with a data processing policy in accordance with applicable regulations. In this regard, PYRENEX complies with applicable European law on the protection of personal data, and in particular the European General Data Protection Regulation No. 2016/679 of 27 April 2016 (known as the "GDPR"), as well as the French legislation adopted in application thereof. On each of the data collection forms present on the Site, you are informed in particular of the purposes pursued by the processing of your data collected through the form, the mandatory or optional nature of the answers requested (indicated by an asterisk) and the consequences of a failure to respond, the retention period of your data, the recipients thereof, and the existence and procedures for exercising all of your rights.

This section also allows you to find out about the cookies that may be placed on your device when you visit the Site, as well as the options and rights available to you in this regard. PYRENEX may modify its privacy policy. Where applicable, we will inform you by updating the date shown at the top of this section and, in certain cases, we will send additional notifications (for example by emailing you). We recommend that you consult this section whenever you interact with us so that you are fully informed of our policy on the protection of personal data and cookies, as well as the means available to you to control the use of your personal data and thereby protect your privacy.

1. Who is responsible for the processing of your personal data?

The company that collects your personal data and carries out the processing of your data is: PYRENEX, a Société par Actions Simplifiée with a share capital of €3,864,920, whose registered office is located at 75 rue de Papin Zone Industrielle de Péré – 40500 Saint-Sever (France), registered under number 302 306 626 (R.C.S. de Mont-de-Marsan)

Telephone +33 (0)5 58 76 03 40

Email address: eshop@pyrenex.fr.

2. On what occasions is your personal data collected and what personal data do we collect?

2.1 Your personal data is collected, depending on the case, either automatically as a result of your visits and/or actions on the Site, or directly from you (via a collection form that you voluntarily complete, or when you order our products by telephone), or through your friends or family members (who have decided to give you one of our products), or through our partners or via social networks.

Thus, PYRENEX collects your personal data when:

  • You browse the Site,
  • You subscribe to our newsletter and/or to the sending by email of our commercial offers, - you create your customer account on the Site,
  • you add products to your shopping basket,
  • you or your relatives/family members place an order on the Site
  • you contact our Customer Service (by email or telephone)
  • you submit a return request, 
  • you share content from the Site or your opinion on it via Facebook, Instagram or YouTube from the Site.     

PYRENEX may also receive personal data relating to you from:

  • certain of its partners - this involves only information communicated by third parties with whom you are in contact and whom you have authorised to share your personal data with PYRENEX for commercial prospecting or advertising targeting purposes,
  • social networks -these are then pieces of information that you yourself communicated when you accessed these networks via the Site (in particular when you share your experience of our products on said networks) – we remind you for all purposes that the disclosure of your data on these social networks is governed by the personal data protection policies of those networks to which we refer you.

2.2 PYRENEX takes into account the principles of data minimisation, of privacy by design and privacy by default. Accordingly, only personal data that is relevant, adequate and limited to what is necessary in relation to the purposes for which it is processed is collected. PYRENEX collects and processes your surname, first name, date of birth, postal addresses for delivery and billing, email address, telephone number, password and username, IP address, connection data and browsing data, information relating to the chosen payment method (including in particular your bank card number and its expiry date, as well as the name of the cardholder when you make an online payment), order history, products viewed, products purchased and baskets, chosen language and selected country.

Furthermore, in certain cases, we may also be required to collect information that you provide about other individuals (in particular when you decide to purchase and send one of our products to a loved one). We use such information solely to fulfil your request and will not send any commercial communications to your contacts unless they themselves choose to receive communications from us. Personal data that must be provided in order to fulfil your requests is indicated by an asterisk on the collection forms. If you do not complete the mandatory fields, we will not be able to respond to your requests. Apart from these cases, you are free not to provide all or part of your personal data indicated as optional. However, such a decision may result in limiting your access to certain services or products offered by PYRENEX, or other features of the Site.

3. Why is your personal data collected, on what legal bases and for how long is it retained?

3.1 Why is your personal data collected? 

Your personal data is collected for specified, explicit and legitimate purposes. Depending on the circumstances, your personal data may be used to:

  • managing your customer account, your shopping basket, your orders, and your deliveries,
  • the settlement of your orders, 
  • the management and monitoring of the customer relationship (telephone/email), the tracking of your orders, the management of your complaints, after-sales service, your product returns and our refunds,
  • the recording of your exchanges with our Customer Service by telephone for the purpose of service improvement,
  • facilitate your browsing on the Site,
  • the sending of our newsletter and commercial solicitations, according to the choices you have made,
  • the personalisation of our services and online advertisements,
  • the security of the Site,
  • the compilation of statistics and performance data to analyse the activity of the Site and improve the services offered thereon (and in particular for audience measurement such as the number of pages viewed, the number of visits, as well as your activity on the Site),
  • the provision of sharing tools on social networks. PYRENEX may also use your personal data for administrative purposes or for any other objective required by applicable legislation.

3.2 On what legal bases? 

Your personal data is processed by PYRENEX only in the cases permitted by applicable regulations, and in particular under the following conditions:

  • where you have given your free, specific, informed and unambiguous consent to the processing of your personal data (e.g. subscription to our newsletter and creation of your customer account),
  • where necessary for the performance of a contract or pre-contractual measures taken at your request (e.g.: placing your orders, delivery and settlement of products, invoicing, performance of any other current or future service in connection with the use of the Site),
  • for compliance with PYRENEX's legal or regulatory obligations (e.g.: retention of invoices, fraud prevention),
  • where the legitimate interests of PYRENEX may be of a nature to justify processing by it (e.g.: dynamically managing and animating the commercial relationship, promoting our products and services, including the promotion of services tailored to your geographical location, the implementation of IT security measures).

Informative notices in accordance with applicable law are provided in each case. 

3.3 For how long are data retained?

 Most of your personal data is retained for as long as you are an "active" customer of the Site and have not requested its deletion from PYRENEX. In any event, your personal data is not retained for more than 3 years after your last activity on the Site (which may be, for example, your last purchase or your last login to your customer account) or your last visit if you are merely a visitor to the Site. Your personal data is then archived with restricted access for an additional period for strictly defined reasons (legal obligations or for evidentiary purposes) authorised by law (payment, unresolved dispute, warranty, etc.), or is otherwise made subject to statistical processing after having been anonymised.

After this archiving period, your personal data will be deleted. However, there are specific cases where the retention period of your data is shorter. Thus, the retention period of cookies on your device is a maximum of 13 months from the time they are placed. Likewise, your IP addresses relating to consultations carried out on the Site are retained (after having been anonymised) for a period not exceeding 13 months.

Finally, with regard to data relating to your bank cards, these are in principle deleted once the transaction has been completed, i.e. upon effective payment. However, we may defer the deletion of such data until receipt of the product you have ordered from us, extended, where applicable, by the withdrawal period available to you. In the case of payment by bank card, the card number and its expiry date may be retained for evidentiary purposes in the event of a possible dispute regarding the transaction, in intermediate archives, for the legal period of 13 months following the debit date. This period may be extended to 15 months to account for the possibility of using deferred debit payment cards. This data must only be used in the event of a transaction dispute. Data relating to bank cards may be retained for longer subject to obtaining your express consent after having informed you of the purpose pursued (for example, to facilitate payment for regular customers). The retention period shall not exceed the period necessary for the accomplishment of the purpose for which the processing is carried out. This consent will be collected by means of a tick box. Data relating to the visual cryptogram is not stored. When the bank card's expiry date is reached, the data relating to it is deleted.

4. Who are the recipients of your personal data?

The personal data collected is intended for PYRENEX, as the data controller, and more particularly for the following internal departments: Marketing, Sales Administration, Customer Service, Accounting and Logistics. This data may also be transmitted to our service providers or subcontractors who contribute to the processing of orders placed on the Site, such as the companies responsible for fulfilling orders, processing payment, and delivering them, as well as our service providers responsible for managing the Site and our database, all of whom are subject to a non-disclosure obligation. Your data will in no event be transmitted to third parties for advertising and prospecting purposes. Likewise, PYRENEX will neither sell nor rent any information or personal data relating to you without your express prior consent. Furthermore, PYRENEX may be required to transmit your data to police authorities in the context of judicial requisitions concerning the fight against fraud, or to customs services for deliveries abroad. Data (including information relating to your identification) is also shared with third parties when you use the social buttons present on the Site. Such use is governed by the terms and conditions of use of the relevant social networks, which we invite you to consult.

5. How is the security of your personal data preserved?

Your personal data is protected by technical and organisational measures compliant with French and European legal and regulatory requirements, ensuring their security and confidentiality. PYRENEX uses protective technologies in particular, such as encryption systems, individual authentication, firewalls, and an intrusion detection software "fail2ban".

We have also put in place regular updates for all software components of our servers, antivirus systems, and daily backup procedures. Any payment transaction carried out on the Site is processed through secure payment systems. Confidential payment data is thus transmitted directly and in encrypted form via the SSL (Secure Socket Layer) protocol to the corresponding institution.

PYRENEX ensures, through written commitments and signed contracts, that its service providers or sub-processors provide the necessary guarantees and implement sufficient security measures to ensure the protection of the personal data entrusted to them for processing, in accordance with the requirements set out by applicable regulations on the protection of personal data.

Although PYRENEX takes reasonable measures to protect your personal data, no transmission or storage technology is completely infallible. In accordance with applicable regulations, in the event of a confirmed breach of your personal data likely to generate a high risk for your rights and freedoms, PYRENEX undertakes to report this breach to the competent supervisory authority and, where required by said regulations, to the individuals concerned (individually or generally depending on the case). Without prejudice to the foregoing, it is your responsibility to exercise caution to prevent any unauthorised access to your personal data and your devices (computer, smartphone, tablet, etc.).

Furthermore, the Site provides you with links to third-party websites that may be of interest to you. PYRENEX exercises no control over the content of these third-party sites or over the practices of these third parties with regard to the protection of the personal data they may collect. Consequently, PYRENEX declines all liability with respect to the processing by these third parties of your personal data, which is not subject to our privacy policy. It is your responsibility to familiarise yourself with the personal data protection policies of these third parties.

6. What are your rights regarding your personal data and how can you exercise them?

6.1. Your Rights

Subject to the limits provided for by applicable regulations, you have the following rights with regard to your personal data:

6.1.1 Right of access

You are entitled to obtain from us confirmation as to whether or not personal data relating to you is being processed and, where it is, to request access to that personal data, including, without limitation, the categories of personal data concerned, the purposes of the processing and the recipients. This right is not, however, absolute, insofar as we must take into account the rights and freedoms of others. In this regard, you may request to receive an electronic copy (for any additional copy, PYRENEX is entitled to require the possible payment of reasonable fees based on the administrative costs incurred). Before responding to your request, we are required by regulations to verify your identity. We may also be required to ask you to provide us with further information in order to respond to your request. If you have a customer account, you can directly access the data contained in your online account, your transaction history, as well as your newsletter subscription preferences and commercial solicitation settings.

6.1.2 Right of rectification

You have the ability to request the correction of personal data relating to you that is inaccurate and the restriction of its processing while it is being corrected. You also have the right, depending on the nature of the processing, to request that the personal data in our possession be completed. We may in that case ask you for supporting documents. If you are unable to access your account or if the data you wish to correct cannot be corrected via access to your account, please contact us in accordance with the procedures set out in article 6.2.

6.1.3 Right to object

Where the collection and processing of your personal data is based on your consent (such as, for example, the creation of your customer account, subscription to our newsletter, the sending of commercial offers and solicitations, the use of cookies on the Site), you have the right to withdraw your consent at any time. This right may be exercised, for example, by modifying in particular your newsletter subscription preferences, by withdrawing your consent to the placement of cookies, or by deleting certain information provided when opening your customer account.

If your data indicated as mandatory for creating your customer account or accessing our services is deleted, you will no longer be able to benefit from the services linked to your account or place an order on the Site. However, we will be entitled not to act on your request where we demonstrate that there are legitimate and compelling grounds for the processing of your personal data that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. In accordance with applicable regulations, the withdrawal of your consent only applies for the future and shall therefore not call into question the lawfulness of the processing carried out prior to that withdrawal.

6.1.4 Right not to be subject to a decision based solely on automated processing

Subject to certain limitations, you have the right to object to being subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

6.1.5 Right to erasure ("right to be forgotten")

You may also request the erasure of your personal data in the following cases:

  • your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed,
  • you wish to withdraw your consent on which the processing of your personal data was based and there is no other legal basis justifying that processing,
  • you consider and are able to establish that your personal data has been subject to unlawful processing,
  • your personal data must be erased pursuant to a legal obligation.

You may, within the limits provided by law, request restriction of the processing of your personal data. Please note that notwithstanding the exercise of your right to erasure or restriction, we may retain certain personal data relating to you where the law requires or permits us to do so, where we have a legitimate reason to do so (for example you have an ongoing order that has not yet been delivered, you have made purchases and we are subject to a legal obligation to retain some of your data for accounting purposes), for the establishment, exercise or defence of legal claims (this would be the case if we consider that you have violated our General Terms and Conditions of Use and Sale).

6.1.6 Right to restriction of processing of your personal data

The applicable regulations provide that this right may be invoked in certain cases, in particular the following:

  • when you contest the accuracy of your personal data,
  • where you consider and are able to establish that the processing of personal data is unlawful but you object to the erasure of the personal data and instead request the restriction of processing,
  • when PYRENEX no longer needs your personal data but you still need it for the establishment, exercise or defence of legal claims,
  • when you object to processing based on the legitimate interest of the data controller, during the verification as to whether the legitimate grounds pursued by the data controller override your own.

6.1.7 Right to portability of personal data

You may, within the limits provided by law, request that PYRENEX:

  • on the one hand, to retrieve, in a structured, commonly used and machine-readable format, the personal data you have provided to us in an automated manner, and,
  • on the other hand, to transfer that personal data to another data controller without PYRENEX being able to object.

6.1.8 Right to lodge a complaint with a supervisory authority

If, despite PYRENEX's efforts to preserve the confidentiality of your personal data, you consider that your rights are not being respected, you have the right to lodge a complaint with a supervisory authority. A list of supervisory authorities is available on the website of the European Commission accessible via the following link: https://ec.europa.eu/info/law/law-topic/data-protection_en. For France, this is the CNIL (https://www.cnil.fr/fr).

6.1.9 Right to decide what happens to your personal data after your death

Finally, you have the right to arrange what happens to your personal data after your death by adopting general or specific instructions. PYRENEX undertakes to comply with these instructions. In the absence of instructions, PYRENEX recognises that heirs have the ability to exercise certain rights, in particular the right of access and the right to object, in order in particular to close the deceased's customer account and to object to the processing of their personal data.

6.2. Procedures for exercising your rights

For any question relating to our privacy policy and/or to exercise your rights as described in article 6.1, you may contact PYRENEX, by electronic or postal mail, by sending a letter specifying the right(s) you wish to exercise accompanied by a copy of a proof of identity to the following email address: eshop@pyrenex.fr

or to

PYRENEX - Personal Data Management Service

75 rue de Papin, zone industrielle de Péré

40500 Saint-Sever – France.

PYRENEX undertakes to respond to you as soon as possible, and in any event within one month of receipt of your request. If necessary, this period may be extended by two months, taking into account the complexity and the number of requests addressed to PYRENEX. In that case, you will be informed of this extension and the reasons for the delay. If your request is submitted electronically, we will also respond to you electronically where possible, unless you expressly request otherwise.

If we do not act on your request, we will give you the reasons and you will then have the possibility of lodging a complaint with a supervisory authority (in France, the CNIL) and/or of bringing legal proceedings.

7. Is your personal data transferred outside the European Union? Under what guarantees?

We retain your personal data principally within the European Union. However, it is possible that the data we collect when you use the Site or our services may be transferred outside the European Union to countries whose applicable legislation on the protection of personal data differs from that applicable within the European Union. This is notably the case with regard to data transmitted to our service providers or subcontractors located outside the European Union, whom we engage in particular to deliver our products to you when your delivery address is situated in a country that is not part of the European Union.

Where our sub-processor is located in a country whose legislation has not been subject to an adequacy decision by the European Commission, we ensure that the transfer of your personal data is governed by the European Commission's standard contractual clauses, which guarantee a sufficient level of protection of privacy and fundamental rights of individuals, or equivalent safeguards, or, for the United States, that our sub-processor adheres to the principles of the Privacy Shield.

8. What use is made of your personal data in connection with social networks?

The Site uses third-party software applications that allow you to share content from the Site with other people or to make your opinion about content on the Site known to those other people. This is notably the case with the "Share" and "Like" buttons from social networks (Facebook, Instagram, YouTube, etc.). Your use of social networks to interact with PYRENEX may result in data exchanges between PYRENEX and those social networks.

Practically speaking, by way of example, if you are logged in to the social network Facebook on your computer and you visit a page on the Site, Facebook may collect this information. Similarly, if you click on the "Instagram" button on a page of the Site, Instagram will collect this information. If you do not wish the social network to link the information collected via the Site to your account, you must log out of the social network before visiting the Site.

In any event, we recommend that you consult the privacy policies of these social networks in order to find out about the personal data they may collect through these application buttons and the purposes for which your data is used, including for advertising purposes. You will be able to configure access to and the confidentiality of your data directly on the social networks. 

Finally, we inform you that we may be led to collect on our behalf certain information and personal data relating to you in connection with your activity on PYRENEX's social media pages for advertising purposes (including targeted advertising) and to improve our commercial relationship. This information and personal data collected in this way are governed by this privacy policy.

9. What cookies are used on the site and how can they be configured?

PYRENEX pays particular attention to keeping you informed about the use of cookies. The purpose of this section is to raise your awareness of the use of cookies, to inform you of the use made of them, and to indicate how to configure your tools in order to object to them.

What is a cookie?

A cookie is a limited-size text file placed by the browser and stored on your device (computer, tablet, smartphone, etc.) when you visit a website. When you browse the Site, we may, subject to your choices which you can modify at any time, install cookies on your device. Only the issuer of a cookie is able to read it. A cookie does not allow you to be directly identified, but rather identifies your browser or your device.

Cookies that may be placed 

Certain cookies are essential for the use of the Site, while others are used to optimise and personalise the content and advertisements displayed, or to generate statistics or ensure the security of your online payments. These cookies are placed either by PYRENEX or by third parties (Google Analytics and Prestashop). Where these cookies are placed by third parties, their issuance and use are subject to the cookie policies of those third parties, who are the only parties able to access the information they contain. We wish to inform you that we do not transmit any of your personal data on this occasion. Thus, when you connect to the Site, five types of cookies may be installed on your device:

  • technical cookies comprising cookies that are strictly necessary for navigation on the Site (such as session identifiers), as well as functionality cookies that enable you to access specific features, in particular to recognise you, to record your visit to a given page, and thereby to improve your browsing experience, including by:
  • store information relating to a form you have completed on the Site or relating to products you have selected on the Site (contents of a shopping basket, etc.),
  • allow you to access reserved and personalised areas of the Site such as your customer account, using identifiers or data that you have previously entrusted to us,
  • implement security measures, for example when you are asked to log in again to content or a service after a certain period of time,
  • adapt the display of the Site to your device's display preferences (operating system used, language used, display resolution, etc.), and personalise the content we offer you.

You may object to the use of this type of cookie and delete them by using your browser settings; however, you may no longer be able to access the Site and/or certain services thereof.

  • cookies for securing your online payments to prevent online payment fraud.

You can object to the use of this type of cookies and delete them by using your browser settings; however, you may no longer be able to access certain services on the Site.

  • audience measurement cookies enabling PYRENEX to measure the audience of the various content and sections of the Site in order to evaluate and better organise them, and in particular to:
  • compile statistics and traffic volumes for the Site enabling us to improve the relevance and ergonomics of our services,
  • adapt the display of the Site or our advertising spaces to your device's display preferences (language used, display resolution, operating system used, etc.) during your visits to the Site, according to the hardware and viewing or reading software available on your device.

Audience measurement cookies are issued by PYRENEX or its service providers (Google Analytics - https://policies.google.com/technologies/partner-sites - and Shopify). In addition to traffic analysis, they may also be used to detect browsing issues and consequently improve the ergonomics of our services. The traffic analysis services used by the Site only produce and send to our technical service providers aggregated statistics and traffic volumes, to the exclusion of any individual information. You can object to the use of this type of cookies and delete them by using your browser settings; however, you may no longer be able to access certain services on the Site.

  • advertising cookies enabling PYRENEX in particular to:
  1. count the number of users who have clicked on each advertisement and, where applicable, the subsequent actions taken by those users on the pages to which those advertisements lead,
  2. adapt the advertising content of the Site as well as our offers, according to the browsing of your device on the Site or purchases you may make and/or based on location data (longitude and latitude) transmitted by your device (with your prior consent).

You can object to the use of this type of cookies and delete them by using your browser settings; however, you may no longer be able to access certain services on the Site.

  • sharing cookies allowing you to share content from the Site on Facebook, YouTube, Instagram and other similar social networks with other people, or to let those other people know about your visit or your opinion regarding content on the Site. These cookies are placed directly on your device by these social networks. This is notably the case with the "Share" and "Like" buttons from these social networks present on the Site.

When you view a page of the Site containing this type of button, your browser establishes a direct connection with the social network's servers and

  • if you are logged into the social network while browsing, the application buttons allow the pages visited to be linked to your account on the social network;
  • if you interact through plug-ins, for example by clicking the "Like" button or leaving a comment, the corresponding information will be transmitted to the social network and published on your social network account.

If you do not wish the social network to link the information collected through the Site to your account on the social network, you must log out of the social network before visiting the Site. We invite you to consult their privacy policies in order to learn about the purposes of use, including advertising purposes, as well as the browsing information that these social networks may collect in this way. You can object to the use of this type of cookies These cookies are(directly placed on your device by these social networks). and delete them by using your browser settings; however, you may no longer be able to access certain services on the Site.

How long are cookies retained?
The retention period for cookies on your device is a maximum of 13 months from the date they are placed.

How do I configure cookie settings?
Your choices are never permanent. At any time, you may disable, free of charge, all or some of the cookies using the method described below or by logging into your account and clicking on "revoke my cookie consent" If your browser is configured to refuse all cookies, you will not be able to create your customer account or benefit from essential features of the Site. For the management of cookies and your choices, each browser is configured differently. This is described in the help menu of your device's browser, which will allow you to find out how to modify your cookie preferences. You can thus disable or delete cookies using your browser options. How do you exercise your choices, depending on the browser you use? For Internet Explorer™: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies , For Safari™: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html , For Chrome™: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 , For Firefox™: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies , For Opera™: http://help.opera.com/Windows/10.20/fr/cookies.html For other browsers, please refer to the help menu of that browser.

If you share the use of your device with other people
If your device is used by several people or has several browsing applications, we cannot guarantee with certainty that the services and advertisements intended for your device correspond to your own use of that device and not to that of another user. Consequently, sharing the use of your device with other people and configuring your browser settings with regard to cookies are entirely at your own choice and responsibility.

10. How do we compile and use IP addresses?

Finally, the IP addresses relating to consultations you carry out on the Site are collected and retained in order to determine your country of connection and for the compilation of statistics, after having been anonymised by removing the last two octets of the IP address. The retention period for IP addresses is a maximum of 13 months from your first visit to the Site.