PRIVACY POLICY

INTRODUCTION

Our Privacy Policy details how we collect, use, and protect personal data (i.e. any information relating to an identified or identifiable person, referred to as a “Data Subject”) via the website and the digital services provided by INTACT (collectively, the “Services”). This Policy, along with the Cookie Policy (Section 6), applies to all users, including those who use the website and Services without registering or subscribing to a specific service (collectively, the “Users”).

This website is operated by INTACT, a French company with share capital of €33 969, headquartered at 200 6ème avenue, 45130 Meung-sur-Loire (France), registered under number 911 382 398 (the “Company” or “we/us”).

INTACT acts as the data controller in accordance with all applicable data protection legislation and regulations, including:
(i) French Law No. 78-17 of January 6, 1978 on data processing, computer files, and civil liberties, and French Law No. 2018-493 of June 20, 2018 on personal data protection, which in particular transposed Directive 2002/58/EC of July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector;
(ii) Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation, or “GDPR”), which came into effect on May 25, 2018; and
(iii) any other regulatory act, decree, regulation, or provision issued or laid down by a competent national or EU personal data protection authority (the above points (i) to (iii) representing, collectively, the “Applicable Regulations”).

1. DATA COLLECTED

Depending on the Services you opt to use among those offered on the website, as well as your choices and the settings on your device (particularly regarding cookies), the personal data concerning you (your “Personal Data”) that we collect and process mainly includes:

  • Any data you may provide—for example, in order to sign up to our newsletter, take part in an event, or place an order—relating to your identity and contact information (title, first and last name, email address, phone number, age, country of residence, etc.), as well as any other information you may share when you contact us;
  • Marketing data relating to how you use the website, your preferences and interests, including browsing habits, notification preferences (email/phone), participation in loyalty and marketing campaigns, or any contact you may have with our customer service teams;
  • Cookies, trackers, and other similar technologies designed to analyze how you use our Services and how we provide you with certain features. For more information on how we use cookies, please refer to Section 6.

Third-Party Services: INTACT Services may be linked to websites operated by third parties not affiliated with INTACT, including:

  • Social media platforms (e.g. Facebook, Instagram, YouTube, TripAdvisor, Google, Pinterest);
  • Third-party service solutions and platforms.

Following links to other websites cannot be considered as a continuation of your browsing on our website, and INTACT declines all liability for the personal data protection practices implemented by the third parties involved; the latter act as separate data controllers regarding your personal data once you are within their scope. When you leave the website or click on a logo/link redirecting you to a social media platform, it becomes your responsibility to check the privacy policy applicable to that website/application.

When we require Personal Data from you for the purposes described below, we indicate this on our website with an asterisk. Such data is essential in order for us to be able to process your requests and/or provide you with the services you wish to access. The provision of any other Personal Data is entirely optional: we request it with a view to better understanding you and improving the services we offer.

2. LEGAL BASIS AND PURPOSE OF PROCESSING

We use and process your Personal Data for the purposes set out below:

a) To provide the products or services requested;

b) To respond to your requests or comments, and handle your complaints;

c) To understand your interests and how you use our products and services, personalize your experience, and tailor our marketing activities to your needs and preferences;

d) To perform analyses and collect statistics on our marketing campaigns and website activity;

e) To send you commercial communications about products and services that may interest you, provided you have given your prior consent to this or have ordered a similar product or service on the website;

f) To manage website security and protect against fraud, theft, or any other illegal activity that may affect our services;

g) To improve our website and provide technical support;

h) To comply with our legal obligations (for example, keeping transaction records and other business documents as required to satisfy our legal and administrative obligations, or our insurers’ requirements, or for audit purposes).

The purposes mentioned above in points (a) and (h) allow us to comply with our legal and regulatory obligations.

The purposes mentioned above in points (b) to (h) are based on the Data Controller’s legitimate interests and are necessary for us to operate the website and respond to User requests.

Any processing using cookies (see Section 6) requires the Data Subject’s consent.

We will not process your Personal Data in any way that is incompatible with the purposes for which it was collected and will only collect the Personal Data that is necessary for the aforementioned purposes. We will request your separate consent before processing your Personal Data for any other purpose.

3. YOUR RIGHTS

In accordance with the Applicable Regulations, you have the right to access your Personal Data, request its rectification or deletion, and restrict or object to its processing, as well as the right to data portability, to the extent applicable, unless we can demonstrate a compelling legitimate reason to keep your Personal Data.

When processing is based on your consent, you have the right to withdraw said consent at any time.

You may at any time ask us to stop sending you information about our offers, news, and events, using the unsubscribe link included in every email we send you.

You may also provide specific instructions regarding what we should do with your Personal Data after your death.

You also have the right to lodge any complaints with your local data protection authority (in France, the Commission Nationale de l’Informatique et des Libertés – CNIL).

You can exercise your rights through your account settings or by emailing us at: contact@intact-regenerative.com.

Please note that if we consider your request to be unclear, we may discuss it with you to better understand why you have made such a request. In this context, we may ask you to prove your identity (for example, by providing an ID document) to ensure that your request does not infringe any third party’s rights.

4. DATA RECIPIENTS

We will not transfer your Personal Data to third parties or give them access to it, except in the following cases and to the extent necessary to achieve the purposes set out below:

  • To other entities within the Intact group, with your consent or for internal administrative purposes;
  • To our service providers (e.g. advertising partners, marketing and advertising agencies), whether or not part of the Intact group;
  • To our external advisors (lawyers, accountants, auditors, etc.);
  • In the event of a change of control, further to any sale or transfer of all or part of INTACT or our assets to another company (e.g. through a merger, acquisition, or liquidation); and
  • Whenever disclosure is required by any law or regulation, by a court decision, or as necessary to protect or defend our rights or to prevent any prejudice.

5. TRANSFER OF PERSONAL DATA – SECURITY MEASURES

We may transfer data we collect about you to another country. If you reside in the European Union, please note that certain recipients of your data may be located in non-EU countries that may not offer the same level of data protection as the EU country where you provided your data. When we transfer your data to any such countries (e.g. to process transactions or as part of our fraud prevention measures), we ensure an adequate level of protection for all data transferred, by entering into data transfer agreements with the recipients based on the European Commission’s standard contractual clauses or any other valid transfer mechanism. In accordance with the Schrems II judgment from the Court of Justice of the European Union of July 16, 2020 (Case C-311/18) and the guidance published by the European Data Protection Board, we also conduct a risk assessment for any data transferred. Please contact us if you wish to receive further information on the safeguards we put in place to secure data transfers to countries outside the European Economic Area (EEA).

Data is processed both manually and electronically and is protected by appropriate security measures. We ensure an adequate level of protection for your data and implement appropriate technical and organizational security measures to protect your data against any accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, as well as all other forms of unlawful processing.

We contractually require the same level of protection from all our subcontractors. Any INTACT employee who may have access to your Personal Data in the course of their duties is bound by a strict non-disclosure obligation. However, as the Internet itself is not completely secure, we cannot guarantee that any Personal Data that we save or transfer will be 100% secure. We encourage you to exercise caution when using the Internet to access our website.

6. COOKIES

This section explains how we use cookies to provide, protect, and improve our website.

List of Cookies

A cookie is a small data file (text file) that a website you visit asks your browser to store on your device, so that it can remember information about you, such as your language preferences or login information. We configure these cookies, known as first-party cookies, ourselves. We also use third-party cookies (i.e. cookies from a domain other than that of our website), for advertising and marketing purposes. Specifically, we use cookies and other tracking technologies for the following purposes:

Performance Cookies

Performance cookies allow us to determine how many visits we get to our website and where they come from, so as to measure and improve performance. They also help us identify the most/least consulted pages and learn how people navigate the website. All information collected by these cookies is aggregated and therefore anonymized. If you reject these cookies, we will not be informed of your visit to our website.

Performance Cookies
Google Analytics :_ga, _ga_

Targeted Advertising Cookies

Our advertising partners may use targeted advertising cookies on our website. They may use such cookies to build a profile of your interests and show you relevant advertisements on other websites. They do not store personal data directly but are instead based on the unique identification of your browser and device. If you reject these cookies, the advertising you see will be less targeted.

Targeted Advertising Cookies
Néant 

Strictly Necessary Cookies

These are cookies that are necessary for the website to function and that cannot be disabled in our systems. They are generally created in response to actions you take that constitute a request for services, such as setting your privacy preferences, logging in, or filling out forms. You can configure your browser to block or alert you about these cookies, but doing so may affect some parts of the website. These cookies do not store personally identifiable information.

Strictly Necessary Cookies
Complianz :cmplz_banner-status, cmplz_consented_services, cmplz_functional, cmplz_marketing, cmplz_policy_id, cmplz_preferences, cmplz_statistics
Polylang :pll_language

Our partners listed above use such cookies to collect and use your browsing data for the purposes mentioned. For more information, please consult their privacy policies.

Consent Management

When you first visit our website, you are asked whether you wish to accept or reject certain cookies.

You can change your decision at any time by clicking here.

Managing Cookies in Your Browser

We do not add any trackers to your device without your explicit consent. Therefore, our default setting is to reject cookies.

When you opt to either accept or reject all or certain cookies, your decision remains valid for 6 months as from the date on which you make it.

To manage your cookie preferences in greater detail, you can adjust the settings in your web browser. See the links below for information on how to disable cookies in the most commonly used browsers:

If you reject cookies that are strictly necessary for the operation of the website on your device, or if you delete those already stored on your device, you will no longer be able to benefit from certain features that are nonetheless essential to use of the website. This could prevent you from accessing content or services requiring you to log in, or affect your access to certain pages if we (or our providers) cannot recognize the type of browser you are using, your language and display settings, or the country from which your device appears to be connected to the Internet—information required for technical accounting purposes.

In such cases, we decline all liability for any consequences of degraded service performance resulting from our inability to store or access necessary cookies that you have rejected or deleted.

Data Retention Period

We store cookies on your device only for as long as necessary to fulfil the purposes set out above. Specifically:

  • Cookies, whether or not requiring your consent, are stored on your device for a maximum of 13 months from their creation;
  • Information collected via cookies is kept for 25 months as from its creation on your device;
  • Your decision to accept or reject cookies is saved for 6 months (after which time, you will be asked again how you wish to manage cookies on our website).

7. DATA RETENTION

We keep your Personal Data, in a form that allows you to be identified, only for as long as reasonably necessary to achieve the purposes set out in this Privacy Policy, or for the retention period required to comply with our legal obligations. Please note that the data retention period set by law may differ between countries.

For example:

  • When you enter into a contract or place an order, within the framework of the Services or otherwise, we keep your Personal Data for the entire duration of the contractual relationship, then save it in intermediate archives for the duration of any applicable warranty period plus the applicable statutory limitation period (5 years in most cases);
  • We keep data on prospects for 3 years after its collection or the last contact with the prospect. After such time, it will be deleted or anonymized;
  • When we process your data in order to satisfy a legal obligation, we do so for the duration necessary to fulfil that obligation and in accordance with the law;
  • If you opt to unsubscribe, your Personal Data will be deleted within 30 days.

8. CONTACT US

For any questions regarding this Privacy Policy or if you wish to exercise your rights, please contact our Data Protection Officer by emailing: contact@intact-regenerative.com.

We reserve the right to amend or update this Privacy Policy at any time, so please review it regularly. We will inform you of any changes or updates that warrant specific notification.