Privacy Policy

PRIVACY POLICY – CDVI France, a CDVI Group Company

Last Updated: February 9^th 2026

1. INTRODUCTION & SCOPE

CDVI France (the “Company“, “we“, “us“), a member of the CDVI Group, is committed to protecting and respecting your privacy. This Privacy Policy (“Policy”) explains how we collect, use, and secure personal information collected from users of our websites, customers, partners and e-commerce customers.

This Policy abides by the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national laws, such as French Loi Informatique et Libertés

2. KEY DEFINITIONS

• Personally Identifiable Information (“PII”): Any information relating to an identified or identifiable natural person, including name, contact information, professional title, employer, and IP address.
• Tracking Technologies: Cookies, web beacons, and other technology solutions (first-party and third-party) used to store information or track user interaction.

3. DATA CONTROLLER & CDVI GROUP INTEGRATION

The data controller is CDVI France, registered at 31 avenue du general Leclerc 93500 Pantin, France.

Intra-Group Processing: As part of the CDVI Group, we operate as a unified network. By providing your data to us, you acknowledge that your PII may be processed by the receiver company and shared with any other company within the CDVI Group (including our parent company CDVI Group s.a. and its global subsidiaries). This sharing is conducted for centralized administration, unified customer support, global marketing analysis, and group-wide security.

4. INFORMATION WE COLLECT

We collect PII necessary for legitimate business purposes:

• Direct Collection: Information provided via forms, problem reports, correspondence, order details and e-commerce order details (Name, email, phone, address).
• Transaction & Payment Data: When you acquire products via our e-commerce platform, we collect details about the products purchased, transaction dates, and payment status.

Note: Payment card details are processed by secure third-party payment gateways and are not stored directly on our servers.

• Indirect Collection: Technical data including IP address, operating system, and browser type.
• Analytical Data: Information about your visit and interaction with our content through tracking technologies.

We use the information that we collect about you to:

• Provide you with products, services, publications, and information that you request, access, or which may be of interest to you
• Process e-commerce orders, manage payments, and ensure the delivery of products and services
• ​Deliver or display content that matches your business interests and responsibilities
• Contact you with information about, and invitations for, products and services from us directed to your business interests and responsibilities
• Communicate with, advertise to or invite you to join us on social media platforms on which you participate. In such event the privacy policies and other terms and conditions of those social media platforms will apply to communications between us and you on them.

We may also analyse information collected from you indirectly to:

• Help us recognise your computer as a previous visitor and save/remember any preferences that you may have while you were visiting one of our sites
• Help us customise the content you are shown while visiting our sites and potentially other websites
• Help us improve our content and our websites
• Identify trends, statistics and measurements that could contribute to the enhancement of our services
• Identify market sensitivities and relative market interest in specific product categories. We may also use the information that we collect to send you satisfaction questionnaires, surveys, and marketing information

5. COOKIE POLICY

Our website uses Tracking Technologies to improve performance and personalize your experience.

Types of Cookies Used:

• Strictly Necessary Cookies: Essential for the website to function (e.g., secure login, form submission).
• Performance/Analytical Cookies: Used to estimate audience size and usage patterns (e.g., Google Analytics).
• Functional Cookies: Used to store your preferences (language, region) and recognize you when you return.
• Targeting/Marketing Cookies: Used to deliver content matching your business interests.

Managing Cookies: We seek your consent to use non-essential cookies upon your first visit. You can also control or delete cookies through your browser settings. Note that disabling cookies may limit your access to certain interactive features.

Our website may from time to time contain links to and from the websites of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.

6. LEGAL BASIS FOR PROCESSING

We process PII based on:

1. Consent: For cookies and marketing communications.
2. Contract: To fulfill orders and provide requested services.
3. Legitimate Interests: To enhance our services, respond to inquiries, send administrative information, and identify market trends to improve the CDVI Group offering.
4. Legal Obligation: Where we are required to do so by law (e.g., tax reporting for e-commerce sales)

It is in our interest as a business to enhance the services that we provide which may include processing your information to enable us to:

• Respond to User enquiries and to fulfil User requests
• Send Customers or Potential Customers relevant marketing information and offers
• Complete transactions
• Provide customer service
• Send administrative information
• Personalise Users’ experiences with the our websites
• Do so where we are required to by law

We may also process PII when it is in our or a Users’ legitimate interests to do so and when these interests are not overridden by an individual’s data protection rights. These legitimate interests include providing services to enable us to provide Users of our sites with more relevant content

7. DATA SHARING & THIRD PARTIES

Beyond the CDVI Group internal sharing, we only disclose PII to third parties:

• Service Providers: Contracted suppliers (e.g., Google Analytics, IT hosting, logistics) bound by confidentiality.
• Legal Obligations: To comply with law enforcement or regulatory requirements.
• Protection: To protect the rights, property, or safety of the CDVI Group and our customers.

8. INTERNATIONAL TRANSFERS

As CDVI Group is a global group, your PIL may be transferred to and processed by affiliates or service providers located in the EEA/UK/Switzerland. All CDVI Group companies are bound by a common framework that governs the internal flow of data, ensuring centralized security regardless of the entity’s location. In any case we ensure these transfers are protected by Standard Contractual Clauses (SCCs) or other legal adequacy mechanisms to ensure a level of protection equivalent to the GDPR.

9. DATA RETENTION

We will never retain PII for longer than is necessary for the purpose it was collected. We retain data as long as you remain a customer or as required to meet legal, regulatory, or fraud prevention obligations.

10. YOUR RIGHTS

Under GDPR, you have the following rights:

• Access & Rectification: Request a copy or correction of your data.
• Erasure & Restriction: Request deletion or limited processing of your data.
• Data Portability: Request transfer of your data to another provider.
• Objection: Object to processing based on legitimate interest or for direct marketing.

To exercise these rights, please contact our Data Protection Officer at dpo@cdvi.com

11. CHANGES TO THIS PRIVACY POLICY

CDVI Group reserve the right to modify or amend this Policy from time to time. We will not reduce your rights under this Policy without your consent. If we change our Policy, we will post those changes on this page in addition to updating the “Last Updated” date at the bottom of this Policy. For these reasons, we encourage you to read this Policy regularly.

Your continued use of the Website or accessing Content posted on the Website shall constitute your acceptance of the modified Policy. If there will be any changes made to the use of your PII in a manner materially different from that stated at the time of collection, we will notify you by posting a notice on our site. If you object to any of the changes, or the overall Policy, please contact us via dpo@cdvi.com.

Account deletion