Favourites
1. Objective and Scope of the Policy
Conservor attaches the greatest importance and care to the protection of privacy and Personal Data, as well as compliance with the provisions of the Applicable Legislation.
Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such Data (hereinafter "GDPR") requires that Personal Data be processed lawfully, fairly and in a transparent manner. Thus, this privacy policy (hereinafter the "Policy") aims to provide you with simple and clear information regarding the Processing of Personal Data concerning you, in the context of your navigation and the operations carried out on our website.
2. Definitions
● Recipient: a legal or natural person who accesses Personal Data or to whom it is transmitted by the Data Controller.
● Personal Data: any information relating to an identified or identifiable natural person, such as a name, a phone number, an email address, etc.
● Purpose of Processing: main objective/purpose of using personal data. The purpose must be specified and legitimate.
● Data Subject: natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
● Applicable Legislation: means all applicable laws and regulations governing the processing of Personal Data, such as European Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).
● Data Controller: the person who determines the purposes and means of the Processing of personal data, namely its objectives and the resources used to achieve them (data to be collected, data subjects affected by the processing, etc.).
● Processor: the person who processes Personal Data on behalf of a Data Controller and based on the instructions of the latter.
● Processing of personal data: any operation performed on Personal Data. This concept covers a wide range of activities such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation…
● Third Party: any natural or legal person, public authority, agency or body other than the Data Subject, the Controller, the Processor and persons who, under the direct authority of the Controller or the Processor, are authorized to process the Data.
3. Data Controller
As part of your activity on the website https://www.conservor.fr/fr/, we collect and use Personal Data relating to you, as natural persons (hereinafter "Data Subject").
For all Processing operations, CONSERVOR SAS, with a share capital of €610,000.00 (SIREN: 315 857 318) and whose registered office is located at 28 Chemin de Chantelle, 31200 Toulouse, determines the means and purposes of the Processing. Thus, Conservor acts as the Data Controller within the meaning of the Regulations relating to Personal Data, and in particular Regulation (EU) 2016/679 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such Data.
4. What Personal Data do we collect and how?
By using our website, or subscribing to our services, you transmit to us a certain amount of information about yourself, some of which is capable of identifying you (hereinafter "Personal Data" or "Data"). This is the case when you browse our site, fill out online forms, or create an account on our site.
The nature and quality of the Personal Data collected about you vary depending on your interactions with Conservor, the main ones being:
- Identification and contact data: this includes all information concerning your identity and contact details, such as your last name, first name, email address, phone number, postal address, etc. Note: when exercising data rights requests, you may be asked to provide proof of your identity by any means.
- Information relating to professional life: this corresponds to Data relating to your professional life, such as the company you work for, your position, etc.
- Commercial data: Any data relating to placed orders, such as their content, order number or reference, or purchase history.
- Financial data: this corresponds to banking Data such as payment history, invoices, or bank details for any order placed on our website.
- Connection data: all information that allows us to indirectly identify you for maintenance or statistical purposes, such as your IP address.
- Documents of various types (PDF, Office formats, Images) with titles, contents, folder names, or information linked to a document.
- Browsing information: by navigating our website, you interact with it. Consequently, certain browsing information is collected.
- Data collected from Third Parties: Personal Data that you agreed to share with us or on publicly accessible social networks and/or that we might collect from other publicly available databases.
5. Why do we collect your Personal Data and on what legal basis?
We collect your Personal Data for specific purposes and on different legal bases.
In the context of contract performance or pre-contractual measures, your Data is processed for the following purposes:
- Management of quote requests;
- Customer account management;
- Contract management (e.g. purchases);
- Order management (e.g. exchanges, purchases, order tracking, including guest checkouts, etc.);
- Billing management;
- Management of complaints and after-sales service.
Based on your consent, your Data is processed for the following purposes:
- Transmission of your Data to our commercial partners for marketing purposes (cookies);
- Management of cookies requiring your consent (acceptance or refusal on your part for setting cookies);
- Newsletter management.
In the context of Conservor’s legitimate interest, your Data is processed for the following purposes:
- Pre-litigation and litigation management (defending Conservor’s rights and interests in the event of a dispute or legal action);
- Management of your contact request via the contact form (responding to user inquiries and following up on exchanges).
In the context of legal and regulatory obligations to which Conservor is subject, your Data is processed for the following purposes:
- General and subsidiary accounting management;
- Management of data subjects' rights requests.
6. Do we share your Personal Data?
Your Data is intended for authorized employees of Conservor and the Massilly Group, according to the purposes of the collection of Personal Data, and within the limit of their respective responsibilities.
It may be transmitted for certain tasks related to the purposes, and within the scope of their respective missions and authorizations, to the following recipients:
- Massilly Group entities to which Conservor belongs in the context of outsourcing an activity to another group entity;
- Service providers and sub-contractors that we use to perform operations and tasks on our behalf, such as:
o Website host: OVH and Dutico for maintenance
o Payment service providers: Payplug, PayPal
o Maintenance agency: Performance Agency
o Data host for SaaS CRM: Salesforce and M3 Infor
o Our logistics providers for delivering orders such as Colissimo, Chronopost, and carriers
o For commercial partners: Google Analytics, Brevo for the newsletter, Axeptio for cookie management, Avis Vérifiés for customer reviews
- Commercial partners (Google, etc.) only when you have expressly consented via a checkbox on our data collection forms;
- Duly authorized public authorities (judicial, supervisory, etc.), as part of our legal and regulatory obligations;
- Regulated professions (lawyers, bailiffs, etc.) who may intervene in enforcing guarantees, debt recovery, or litigation.
When your Data is shared with our service providers and processors, they are also instructed not to use the Data for purposes other than those initially specified.
We make every effort to ensure that these Third Parties maintain the confidentiality and security of your Data.
In all cases, only necessary Data is provided. We make every effort to guarantee secure communication or transfer of your Data.
We do not sell your Data.
7. Is your Personal Data transferred to Third Countries?
Conservor strives to store Personal Data in France, or at least within the European Economic Area (EEA).
However, some of your Personal Data is transferred outside the European Economic Area (EEA), which is the case, for example, with our service provider GOOGLE located in the USA.
In the event of such a transfer, we guarantee that it is conducted:
- To a country providing an adequate level of protection, i.e. a protection level equivalent to European Regulation requirements; failing that
- To a country benefiting from a certification mechanism under the Data Privacy Framework (DPF);
- Under Standard Contractual Clauses; or
- Under Binding Corporate Rules.
8. How long do we retain your Personal Data?
We retain your Personal Data only for as long as necessary to achieve the purpose for which we hold the Data, to comply with our legal or contractual obligations, or to establish evidence in the event of litigation within the applicable limitation period.
Retention periods vary depending on several factors, such as:
- Legal obligations;
- Contractual requirements;
- Recommendations from the supervisory authority;
- Business operational needs of Conservor;
The retention periods for your Data are as follows:
9. How do we guarantee the security of your Personal Data?
Conservor undertakes to protect the Personal Data we collect or process against loss, destruction, alteration, unauthorized access, or disclosure.
Thus, we implement all appropriate technical and organizational measures, depending on the nature of the Data and the risks involved in its Processing. These measures ensure the security and confidentiality of your Personal Data. They may include practices such as restricting access to Personal Data to authorized persons based on their duties, pseudonymization, or encryption.
In addition, our practices, policies, and/or physical/logical security measures (secure access, authentication procedures, backup copies, software, etc.) are regularly reviewed and updated as necessary.
10. What are your rights?
The GDPR grants Data Subjects rights that they may exercise. These include:
1. Right to be informed: the right to receive clear, precise, and complete information regarding the use of Personal Data by Conservor.
2. Right of access: the right to obtain a copy of the Personal Data held by the Data Controller concerning the applicant.
3. Right to rectification: the right to have Personal Data corrected if inaccurate or out of date, and/or completed if incomplete.
4. Right to erasure / right to be forgotten: the right, under certain conditions, to have Data erased or deleted, unless Conservor has a legitimate interest in retaining it.
5. Right to object: the right to object to the Processing of Personal Data by Conservor for reasons relating to the applicant's particular situation (subject to conditions).
6. Right to withdraw Consent: the right to withdraw Consent at any time when Processing is based on Consent.
7. Right to restriction of Processing: the right, under certain conditions, to request that the Processing of Personal Data be temporarily suspended.
8. Right to Data portability: the right to request that Personal Data be transferred in a reusable format allowing it to be used in another database.
9. Right not to be subject to an automated decision: the right for the applicant to refuse fully automated decision-making and/or exercise additional guarantees in this matter.
10. Right to set post-mortem directives: the right for the applicant to define directives concerning the fate of their Personal Data after their death.
Certain rights may not apply depending on the context or may be subject to conditions or exceptions under regulations. In such cases, we will inform you of the reasons for refusal. Furthermore, additional rights may be granted by local legislation to Data Subjects.
To this end, Conservor has implemented a data subject rights management procedure compliant with Applicable Legislation requirements. This procedure establishes:
- Standards to respect to ensure transparent information for Data Subjects;
- Legal requirements that must be met;
- Authorized channels for submitting a request for each right, depending on the category of Data Subjects;
- Operational processes to handle these requests in accordance with the aforementioned requirements;
- The parties involved in these processes, their roles, and responsibilities.
11. How to exercise your personal data protection rights?
To exercise your personal data protection rights (listed above), please contact our Data Protection Officer (DPO) at: dpo@massilly.com.
When submitting a request to exercise a right, please specify as clearly as possible the scope of the request, the type of right exercised, the Personal Data Processing concerned, and any other helpful details to facilitate review. In addition, in case of reasonable doubt, proof of identity may be requested.
You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (via CNIL's website) or by mail at: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, regarding how Conservor collects and processes your data.
12. Updates to this Policy
This Policy may be updated regularly to reflect changes in Personal Data Regulations.
Date of last update: September 2026