Data protection

At SYVECO, respecting privacy represents a significant challenge and we undertake to protect it. Through this policy, SYVECO undertakes to comply with European Regulation No. 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of said data (hereinafter referred to as the "GDPR") and with French laws on personal data protection.

Thermador Groupe is comprised of several independent entities, including SYVECO. In the context of your relations with one of the companies in our Group, the "controller" of your personal data will be the company which decides on the "whys" and "wherefores" of this data processing, namely, SYVECO, located at 107 rue du Ruisseau, 38070 Saint-Quentin-Fallavier, business registration no.: 487 897 449 000 20, hereinafter referred to as "SYVECO" or "we".

The DPO (Data Protection Officer) at SYVECO is the DPO of the Thermador Groupe: Adeline Porcher. The DPO can be contacted by e-mail at privacy@thermador-groupe.fr or by post at the following address: Thermador Groupe, Délégué à la protection des données (Data Protection Officer), 60, rue de Luzais - CS 10710 - 38297 Saint-Quentin-Fallavier Cedex, France.

We may collect or obtain personal data about you in the following ways :

• Directly from you, for example when you contact us or hand us your business card.
• In the course of our business relations, for example when we supply a product or a service to you or your employer.
• When you make your personal data public, for example on your website, the website of your group or on social networks.
• When you browse on our website, for example by entering your personal data in our contact forms, or when you enable cookies.

"Personal data" means any information which can be used to identify you directly (for example, your name) or indirectly (for example, pseudonymised data such as a unique identifier). We may collect data relating to: 

• Your identity: for example, your surname, first name, e-mail address, telephone number.
• Your professional life: for example, your profession, telephone number, e-mail address, work address, delivery address or information about your employer.
• Your orders: for example, your purchase history or the contact details of individuals to whom deliveries have been made.
• Your financial details: for example, your bank details, required for payment purposes.

We do not collect what is known as "sensitive" personal data about you. If we were to need to do so for legitimate reasons, we would do so with your consent and in accordance with the applicable laws.

Cookies are small data files recorded when you visit a site. Cookies help to personalise your browsing experience. They also help to protect visitors and customers from possible fraud.

You can choose to accept and manage cookies. To do this, set your browser to block or activate cookies for purchases, saving favourites and receiving personalised information. 

Google Chrome
Mozilla Firefox
Safari
Internet Explorer

The table below lists the cookies we use and what information is collected.

In general, your personal data is securely stored in electronic format on our servers and in paper format at our premises, which are located in the European Union. However, for some specific services, we may transfer certain data to subcontractors outside the EU. In this case, in accordance with the applicable regulations, we demand that the subcontractors in question provide the guarantees required as regards supervision and the provision of security for said transfers, including, inter alia, the European Commission's adequacy decision relating to certain countries, the Privacy Shield to the USA or the standard contractual clauses adopted by the European Commission.

We take all reasonable measures to ensure that your personal data is stored for a period which does not go beyond what is necessary in view of the purposes set out in point V.
We store your personal data, throughout our business relations, on the basis of our legal and contractual obligations and our legitimate business interests.
At the end of our business relations, we store your data for the duration of the period prescribed by the statute of limitations in accordance with the applicable law, i.e., the legal period during which a person may take legal action against you in relation to your personal data, or during which your personal data may be relevant. In the event that legal action is taken, we can continue to process your personal data for an additional period required for said legal action.
At the end of these periods, we will delete, physically destroy or anonymise your personal data.

This Personal Data Protection Policy contains all the information about the personal data we collect, the processing we perform and the individuals authorised to access said data.

You may ask us whether we are storing personal data about you and request a copy of said data. You may also ask to have any personal data about you that is inaccurate rectified. In view of the purpose of the processing, you have the right to have incomplete data completed.

You may also exercise your right to be forgotten and ask us to delete your personal data if you withdraw your consent or if said data is not required in order to comply with a legal or contractual obligation.

The GDPR also allows you to ask for the processing of your personal data to be restricted, if you dispute the accuracy of any data or if the processing is unlawful but you do not wish to delete your data in order to exercise your legal rights.

You also have the right to receive your personal data in a structured, commonly used and machine-readable format, for the purpose of transferring it to another controller.

The right to object allows you to object at any time to the processing of your personal data, where it is no longer necessary for the performance of a legal or contractual obligation. This right to object relates in particular to processing that is associated with new business development.

When we process your personal data with your consent, you have the right to withdraw said consent at any time. The withdrawing of your consent does not affect the lawfulness of any processing carried out prior to the date on which we receive notice that you have withdrawn your consent. The withdrawal of consent does not prevent processing that is based on other legal grounds.

To exercise one or more of these rights, raise any question with us about said rights or about any other clause in this policy, or ask us about the processing of your personal data, please contact your DPO, whose contact details are shown in point II.

We may request proof of your identity before acceding to your request.

In accordance with the GDPR, we reserve the right to:

• Charge a reasonable fee which takes into account the administrative costs of providing the information or communication or taking the action requested.
• Refuse to act on said requests by demonstrating that they are manifestly unfounded or excessive.

We also wish to inform you that you may make a complaint at any time to the competent supervisory authority. In France, the Commission Nationale de l'Informatique et des Libertés (CNIL) [French Data Protection Authority] is the competent supervisory authority www.cnil.fr.

This policy may be amended from time to time. You can check this page in order to view the most recent version on our website.