Data Protection Declaration

01 Data Controller

The controller responsible for processing your personal data is:

Company Information:

• SIREN: 893 898 999
• SIRET: 893 898 999 00014
• VAT Number: FR89893898999
• Legal Form: SAS (Société par Actions Simplifiée)

02 Personal Data We Collect

Depending on how you interact with our website, we may collect:

Information you provide

• Name
• Company name
• Email address
• Telephone number
• Postal address
• Any information submitted through contact forms or email correspondence

Automatically collected information

When you browse our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Date and time of access
• Pages visited
• Referring website
• Cookies and similar technologies

03 Purposes of Processing

We process personal data for the following purposes:

• Responding to enquiries and contact requests
• Providing requested services
• Managing customer relationships
• Preparing quotations and contracts
• Improving our website and services
• Ensuring website security
• Complying with legal obligations
• Preventing fraud and misuse
• Performing analytics to improve user experience

04 Legal Basis for Processing

We process personal data on one or more of the following legal bases:

• Your consent (Article 6(1)(a) GDPR)
• Performance of a contract or pre-contractual measures (Article 6(1)(b))
• Compliance with legal obligations (Article 6(1)(c))
• Legitimate interests pursued by ADVARNA (Article 6(1)(f)), including:

• website administration;
• communication with customers;
• improving our services;
• ensuring network and information security.

05 Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including:

• duration of our business relationship;
• legal accounting and tax retention periods;
• resolution of disputes;
• compliance with applicable laws.

Once the retention period expires, personal data is securely deleted or anonymised.

06 Sharing of Personal Data

We do not sell your personal data.

Personal data may be shared only with:

• IT service providers;
• Website hosting providers;
• Professional advisers;
• Payment providers (where applicable);
• Public authorities where legally required.

All processors act under contractual obligations ensuring GDPR compliance.

07 International Transfers

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be implemented in accordance with Chapter V of the GDPR, including:

• European Commission adequacy decisions;
• Standard Contractual Clauses (SCCs);
• other lawful transfer mechanisms.

08 Cookies

Our website may use cookies and similar technologies to:

• ensure website functionality;
• remember user preferences;
• analyse website traffic;
• improve user experience.

Where legally required, cookies that are not strictly necessary will only be placed after obtaining your consent.

You can manage or withdraw your consent through your browser settings or the cookie banner.

09 Your Rights

Under the GDPR, you have the right to:

• access your personal data;
• rectify inaccurate data;
• erase your personal data ("right to be forgotten");
• restrict processing;
• object to processing based on legitimate interests;
• data portability;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a supervisory authority.

10 Data Security

We implement appropriate technical and organisational measures designed to protect personal data against:

• accidental loss;
• unauthorised access;
• disclosure;
• alteration;
• destruction.

While no method of transmission over the Internet is completely secure, we continuously work to maintain a high level of security.

11 Third-Party Services

Our website may contain links to third-party websites or use third-party services. These providers operate under their own privacy policies, and we encourage users to review them before providing personal information.

12 Children's Privacy

Our website is not intended for children under the age of 16, and we do not knowingly collect personal data from children.

13 Changes to this Declaration

We reserve the right to update this Data Protection Declaration at any time to reflect legal, technical, or business developments.

The latest version will always be available on this website.

14 Contact

If you have any questions regarding this Data Protection Declaration or wish to exercise your GDPR rights, please contact us:

Email : [email protected]

We will respond to your request in accordance with applicable data protection laws and within the deadlines established by the GDPR.