1. Responsible Authority

The responsible authority for the collection, processing and use of your personal data within the meaning of the GDPR is

ENVEA 111, Boulevard Robespierre – CS 80004 – 78304 Poissy Cedex 4 – FRANCE

Phone: +33(0)1 39 22 38 00
info@envea.global

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection regulations as a whole or for individual measures, you can address your objection to the above-mentioned responsible body.

You can save and print out this data protection declaration at any time.

1.1 Why your data is processed by ENVEA

ENVEA ensures beforehand of its legitimate interest in carrying out the processing:

1.1.1 – As part of sales and service contract execution, the aims pursued are as follows:

• Manage client or user identity and authenticate it
• Manage orders
• Manage equipment
• Bill and cash payments
• Ensure pre-sale and sale services
• Ensure Customer Service
• Manage the personal data, characteristics and rights of a contract
• Process contract terminations
• Deal with claims
• Communicate as customer management
• Manage incoming mails
• Recover unpaid bills
• Manage litigation
• Manage requests related to concerned people rights
• Store the customer or user data
• Offer authentication services

Your data is saved for the necessary duration needed to fulfil the functions mentioned above. For the processing related to contract execution, the data may be stored for up to three years once the transaction is over.

1.1.2 – In other fields than the execution of sales or service contracts, the aims pursued are as follows:

• Arrange direct marketing operations
• Arrange commercial animations
• Analyze the offer and services uses to make proposals to the client
• Survey customers or users
• Improve offers and customer relationships
• Rollout and operate offers and services
• Fight against fraud

The data is stored for the time necessary to fulfil the aims indicated above.

1.1.3 ENVEA also processes data to meet its legal or regulatory obligations.

For this purpose, the aims pursued are as follows:

• Keep the required data in order to be able to meet the legal obligations
• Manage requests for data communication from authorized authorities

The data can be kept as long as necessary to fulfil the legal obligations.

1.2 What is the data processed?

Depending on the case, ENVEA processes your personal data, directly collected from you or resulting from the product or service use. ENVEA may also be the recipient of data collected from you by a third party.

ENVEA processes a data or a data category only if it is strictly necessary for the aim pursued. You can find information about these aims above.

ENVEA processes the following data categories:

• Identification data: Surname, name, identifier, VAT registration number, SIREN …
• Personal characteristics: birth date, nationality …
• Contact data: mailing address, email, phone number …
• Personal life: centers of interest, wedding status, number of children…
• Economic data: history of sales orders, history of supplier purchases,
• Financial data: GNI, means of payment, payment history …
• Data of connection, service use and interaction: connection and use logs
• Intervention report…
• Products and services owned and/or used, technician intervention report on sites,
• Content data: files stored on the cloud, mailbox …
• Geolocation data

1.3 Who are the data recipients?

The data collected is intended for the internal services of ENVEA and its subcontractors duly authorized by ENVEA.

The data can also be processed by ENVEA partners and distributors involved in products and service providing. They may also be the processing you are asked to consent to.

1.4 Is the data processed outside the EU?

The collected data is not generally processed outside the European Union.

If some collected data was likely to be processed outside the European Union, ENVEA will make the necessary arrangements with its subcontractors and partners to ensure an adequate protection level of your data and in full compliance with the applicable regulations.

1.5 How your data is secured?

ENVEA ensures that your data is processed securely and confidentially, including operations performed by subcontractors. For this purpose the appropriate technical and organizational measures to prevent the loss, misuse, alteration and deletion of your personal data are put in place.

2. General use of the website

2.1 Access data

We collect information about you when you use this website. We automatically collect information about your usage behaviour and interaction with us, and record data about your computer or mobile device. We collect, store and use data about each access to our online offer ( server log files). The access data includes the name and URL of the accessed file, date and time of access, transferred data volume, notification of successful access (HTTP response code), browser type and browser version, operating system, referrer URL (i.e. the previously visited page), IP address and the requesting provider.

2.2 Cookies

Some of the Internet pages use “cookies”. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website.

If you do not wish cookies to be stored on your end device, you can object to the use of these files here:

– The network advertising initiative’s cookie disabling page: http://optout.networkadvertising.org/?c=1#!/
– Cookie disabling page of the US website: http://optout.aboutads.info/?c=2#!/
– Cookie disabling page of the US website: http://optout.aboutads.info/?c=2#!/
– Cookie disabling page of the European website: http://optout.networkadvertising.org/?c=1#!/

Common browsers offer the setting option not to accept cookies. Note: There is no guarantee that you will be able to access all functions of this website without restrictions if you make the appropriate settings.

2.3 Handling of contact data/contact form

If you contact us as a website operator through the contact options offered, your details will be stored so that they can be used to process and respond to your enquiry. This data will not be passed on to third parties without your consent.

2.4 E-mail contact

If you contact us (e.g. via the contact form or e-mail), we will store your details for processing the enquiry and in case any follow-up issues arise. We only store and use further personal data if you give your consent to this or if this is legally permissible without special consent.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

2.5 Google Analytics

We use Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies” which are text files placed on your computer to help the website analyse how users use the site. The information generated by the cookie about the use of this website by website visitors is usually transferred to a Google server in the USA and stored there

However, if IP anonymization is activated on this website, Google will truncate your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymization is active on this website. On our behalf, Google will use this information to evaluate your use of the website, compile reports about website activity and provide us with other services relating to website and Internet use.

The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do so you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser plug-in or within browsers on mobile devices, you can click the following link to set an opt-out cookie to prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain.

You can find further information on the use of data by Google Inc here:

– https://policies.google.com/privacy/partners?hl=en (data collected from Google partners)
– https://adssettings.google.com/authenticated (settings via advertising that is displayed to you)
– https://policies.google.com/technologies/ads?hl=en (use of cookies in advertisements)

We have concluded a contract with Google for commissioned data processing, and fully implement the strict requirements of the German data protection authorities for the use of Google Analytics.

This website uses the “demographic features” function of Google Analytics. This allows reports to be created that contain information about the age, gender and interests of site visitors. This data comes from interest-based advertising by Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can disable this feature at any time from your Google Account ad preferences or opt-out of Google Analytics collecting your information as described in the “Opt-out of data collection” section.

2.6 Google Adwords

Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Adwords sets a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad delivered by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can see that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users.

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example via browser settings that generally deactivate the automatic setting of cookies, or set your browser so that cookies are blocked by the “googleleadservices.com” domain.


Please note that you may not delete the opt-out cookies if you do not wish measurement data to be recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

2.7 Links to social media profiles

In the footer of our website, you will find hyperlinks to our appearances in the social media. When using our website, no data is transmitted to, or retrieved from, the servers of social media providers in the background. You can recognise the links by the logo of the social media service. By clicking on the logos, the website of the respective provider opens in a new window/tab and you will be redirected to the social media provider. When using social media services, personal data is collected and transmitted. Further details can be found in the data protection declaration of the respective provider. We link to our profile with the following social media services:

Facebook Inc. (1601 p. California Ave – Palo Alto – CA 94304 – USA)
XING AG (Gänsemarkt 43 – 20354 Hamburg – Germany)
LinkedIn Corporation (2029 Stierlin Court – Mountain View – CA 94043 – USA)
Twitter Inc. (795 Folsom St. – Suite 600 – San Francisco – CA 94107 – USA)

2.8 YouTube

We have embedded YouTube videos in our website, which are stored on www.YouTube.com and can be replayed directly on our website. These are all integrated in the “extended data protection mode”, which means that no data concerning you as the user is transferred to YouTube if you do not play the videos. We have no control over this data transfer.

By visiting the website, YouTube will be informed that you have accessed the corresponding subpage of our website. This takes place regardless of whether YouTube provides a user account through which you are logged in or if there is no user account. If you are logged into Google, your data will be associated directly to your account. If you do not wish your profile to be associated by YouTube, you must log out before pressing the button. YouTube will save your data as a usage profile and use it for purposes of advertising, market research and/or to configure the website according to demand. Such an analysis takes place (even for users not logged in) in order to deliver demand-oriented advertising and in order to inform other users of the social network of your activities on our website. You have a right to object to the formation of this user profile, but must contact YouTube to exercise this right.

You can find further information on the purpose and scope of data collection and processing by YouTube in the privacy policy. You will also find more information about your rights and the settings available for protecting your privacy: https://www.google.de/intl/en/policies/privacy.

2.9 Newsletter subscription

If you would like to subscribe to the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receiving the newsletter.

We use the double opt-in procedure to ensure that newsletters are sent out in agreement. In the course of this, the potential recipient can be included in a distribution list.

We use this data exclusively to send out the requested information and offers. You can revoke your consent to the storage of the data, e-mail address and their use for sending the newsletter at any time, for example via the “Unsubscribe” or “Manage your preferences” link in the newsletter.

2.10 Legal bases and storage period

The legal basis for data processing in accordance with the above paragraphs is Art 6 para. 1, letter f) of the GDPR. Our interests in data processing are, in particular, to ensure the operation and security of the website, to investigate the manner in which visitors use the website, and to simplify the use of the website.

Unless specifically stated, we only store personal data for as long as is necessary to fulfil the purposes pursued.

3. Your rights as a data subject

According to the applicable laws, you have various rights regarding your personal data. If you wish to assert these rights, please send your request by e-mail or by post to the address specified in section 1, clearly identifying yourself.

You will find an overview of your rights below.

3.1 Right to confirmation and information

You have the right to receive confirmation from us at any time as to whether personal data relating to you will be processed. If this is the case, you have the right to obtain from us free-of-charge information about the personal data stored about you together with a copy of this data. Furthermore, you have a right to the following information:

1. the processing purposes;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data has been or is still being disclosed, in particular recipients in third countries or international organisations;
4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
5. the existence of a right to have your personal data rectified or deleted or to restrict the processing of this data by the data controller or to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. if the personal data is not collected from you, all available information about the origin of the data;
8. the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) of the DGPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for you.

If personal data is transferred to a third country or an international organisation, you have the right to be informed of the appropriate guarantees in accordance with Article 46 of the GDPR in connection with the transfer.

3.2 Right to correction

You have the right to request us to correct any inaccurate personal data concerning you without delay. Taking into account the purposes of this, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.

3.3 Right to cancellation (“Right to be forgotten”)

1. The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent, on the basis of which the processing referred to in Article 6(1)(a) or Article 9(2)(a) of the GDPR was based, and there is no other legal basis for the processing.
3. You oppose processing under Article 21(1) of the GDPR and there are no overriding legitimate grounds for processing, or you oppose processing under Article 21(2) of the GDPR.
4. The personal data has been processed unlawfully.
5. The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
6. The personal data has been collected in relation to Information Society services provided in accordance with Article 8(1) of the GDPR.

If we have made the personal data public and we are obliged to delete it in accordance with Art. 17 of the GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you have requested them to delete all links to this personal data or copies or replications of this personal data.

3.4 Right to limitation of processing

You have the right to request us to restrict processing if one of the following conditions is met:

1. the accuracy of the personal data is disputed by you for a period that enables us to verify the accuracy of the personal data,
2. the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
3. we no longer need the personal data for the purposes of processing, but you do need the data to assert, exercise or defend legal claims, or
4. You have lodged an objection to the processing pursuant to Article 21(1) of the GDPR as long as it is not yet clear whether the legitimate reasons of our company outweigh yours.

3.5 Right to data transferability

You have the right to receive the personal data concerning you that we have received in a structured, current and machine-readable format, and you have the right to transmit this data to another person in charge without our interference, provided that
1. the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and
2. the processing is carried out using automated methods.

When exercising your right to data transferability in accordance with paragraph 1, you have the right to request that the personal data be transferred directly by us to another responsible person, insofar as this is technically feasible.

3.6 Right to object

You have the right to object at any time to the processing of personal data concerning you under Article 6(1)(e) or (f) of the GDPR for reasons arising from your particular situation, including profiling based on these provisions. We no longer process personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.

You have the right to object to the processing of personal data concerning you, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, for reasons arising from your particular situation, unless the processing is necessary for the performance of a task in the public interest.

3.7 Automated decision including profiling

You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner.

3.8 Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time.

3.9 Right of appeal to a supervisory authority

You have the right of appeal to a supervisory authority, in particular in the Member State in which you reside, work or are suspected of having infringed the law, and you consider that the processing of personal data concerning you is unlawful.

4. Data integrity

We make every effort to ensure the security of your data in accordance with the applicable data protection laws and technical possibilities.

Your personal data will be transmitted in encrypted form. This applies to your orders and also to the customer login. We use the SSL (Secure Socket Layer) coding system, but point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

To secure your data, we maintain technical and organisational security measures which we constantly adapt to the state of the art.

Furthermore, we do not guarantee that our offer will be available at certain times; disruptions, interruptions or failures cannot be ruled out. The servers we use are regularly and carefully secured.

5. Automated decision making

Automated decision making based on the collected personal data does not take place.

6. Disclosure of data to third parties, no data transfer to non-EU countries

In principle, we only use your personal data within our company.

If and to the extent that we involve third parties in the performance of contracts (e.g. logistics service providers), this personal data is only received to the extent to which the transfer is necessary for the corresponding service.

In the event that we outsource certain parts of data processing (“order processing”), we contractually oblige contractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.

Data transmission to places or persons outside the EU outside the cases mentioned in this declaration in item 2.5 and item 2.6 does not take place and is not planned.

7. Objection to advertising mails

We herewith object to the use of contact data published within the scope of legal notice requirements to send unsolicited advertising and information material. The operators of these websites expressly reserve the right to take legal action in the event of unsolicited advertising information such as spam e-mails.

8. Data Protection Officer

If you have any questions or concerns about data protection, please contact our Data Protection Officer:

– Data Protection Officer –
ENVEA
111, Boulevard Robespierre
CS 80004
78304 Poissy Cedex 4 – FRANCE
Contact: rgpd@envea.global