Menu Fermer
Fermer
Contact us

Privacy Policy

INNOV8 GROUP (“INNOV8 GROUP”, “our”, “we”, and “us”) and our partners respect your privacy.

Accordingly, we have drafted this Privacy Policy (hereinafter referred to as “this Policy”) to describe how we collect, use, disclose, protect, store, and transfer the personal data of users of this website.

Please take a moment to read and understand our Privacy Policy, and do not hesitate to contact us with any questions.

Personal data means any electronic or other information which, alone or in conjunction with other information, such as a name, identification number, location data, online identifier, or one or more specific elements unique to their physical, physiological, genetic, psychological, economic, cultural, or social identity, directly or indirectly identifies a natural person or allows for their identification.

This Policy explains how INNOV8 GROUP processes your personal data, but it does not cover all possible scenarios for processing your data. In the event of processing not covered by this Policy, all necessary information will be provided to you during the specific processing activity concerned.

The personal data processing described in this Policy is carried out by INNOV8 GROUP SAS, a company with a share capital of €20,854,665.90, registered with the Nanterre Trade and Companies Register under number B 810 519 892, and having its registered office at 25 QUAI AULAGNIER 92600 ASNIERES-SUR-SEINE, acting as the data controller.

INNOV8 GROUP collects and processes your personal data in accordance with the provisions of the General Data Protection Regulation (EU) No. 679/2016 and Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, as amended by Law No. 2018-493 of June 20, 2018, relating to the protection of personal data.

This Policy describes:

  • How INNOV8 GROUP uses your personal data
  • How INNOV8 GROUP shares your personal data
  • How INNOV8 GROUP protects your personal data
  • International transfers of your personal data
  • How you can exercise your rights regarding your personal data
  • Updates to this Policy
  • How to contact us

1. How INNOV8 GROUP uses your personal data

INNOV8 GROUP may use your personal data for the following purposes:

  • Creating your customer account on this website
  • Managing product orders
  • Publishing and managing reviews left on products ordered on this website
  • Sending you our newsletter after your subscription
  • Responding to your contact request made via our website

Most of the processing listed above is necessary for the performance of the contract entered into with INNOV8 GROUP when you use our website to order products available for sale on the site.

The processing of your personal data to send you our newsletter, however, is based solely on your consent to receive our newsletter, which you can withdraw at any time. If you do not consent to receiving the newsletter, please note that this will not prevent you from creating your customer account and placing orders on our website.

2. How INNOV8 GROUP shares your personal data

Within INNOV8 GROUP, and for each processing purpose, your personal data is collected, processed, and stored by authorized INNOV8 GROUP personnel, solely within the scope of their respective competencies, and notably by customer service, the marketing department, and the IT department.

We do not share personal data with other companies, organizations, and individuals, unless one of the following circumstances applies:

  1. Sharing with prior consent: After obtaining your consent, INNOV8 GROUP will share the information you have authorized with specific third parties or categories of third parties indicated at the time your consent was collected.
  2. Sharing with partner companies: Certain products and/or services are provided to you directly by our partners. INNOV8 GROUP may also share your information with them; they may use your information to provide you with the products and/or services you request.
  3. Sharing with our service providers: INNOV8 GROUP may also disclose your information to companies that provide services for us or on our behalf. Examples of these service providers include companies that offer IT services such as our hosting provider or our email sending provider, product delivery services, or that carry out marketing activities on our behalf. These service providers may use your information only for the purpose of providing services on behalf of INNOV8 GROUP.
  4. In fulfillment of a legal obligation, sharing in accordance with laws and regulations: INNOV8 GROUP may share your information as stipulated by laws and regulations, to resolve legal disputes, or as stipulated by judicial or administrative authorities under the law.

INNOV8 GROUP will ensure the legality of any sharing of personal data through data processing clauses with the companies with which your personal data is shared, obliging them to comply with this Policy and to take appropriate security and confidentiality measures when processing personal data.

3. How INNOV8 GROUP protects your personal data

INNOV8 GROUP attaches great importance to the security of your personal data and has adopted common industry practices to protect your personal data and prevent unauthorized access, disclosure, use, modification, damage, or loss of this information. To do this, INNOV8 GROUP adopts the following measures:

  1. We adopt reasonable and feasible measures to ensure that the personal data collected is minimal and relevant as necessary, with regard to the purposes for which it is processed.
  2. We retain your personal data for the period strictly necessary for the purpose of processing, unless the retention of your data is required or permitted by law. For example, we retain data related to the execution of your orders for the period required by law for accounting record keeping, i.e., a maximum of 10 years from the relevant financial year.
  3. We use a range of technologies such as encryption technologies to ensure the confidentiality of transmitted data. We implement reliable protection mechanisms to protect data and data storage servers against attacks.
  4. We deploy access control mechanisms to ensure that only authorized personnel can access your personal data. In addition, we control the number of authorized personnel and implement hierarchical authorization management for them based on service requirements and personnel levels.
  5. We rigorously select our business partners and service providers and integrate personal data protection requirements into commercial contracts, audits, and evaluation activities.

INNOV8 GROUP is committed to protecting your personal data. Nevertheless, no security measure is perfect, and no product, service, website, data transfer, computer system, or network connection is completely secure.

In the event of a personal data breach, INNOV8 GROUP will comply with applicable legal and regulatory requirements, including notification of the security incident and its possible consequences, the measures INNOV8 GROUP has taken or will take to prevent, mitigate, and correct such incidents in the future. Notification may take the form of an email, text message, push notification, etc. If it is difficult to notify the data subjects directly, we will take appropriate and effective measures to disseminate a public communication online.

In addition, we also comply with our obligation to notify personal data breaches to the competent supervisory authorities.

4. International transfers of your personal data

When products available for sale on the website are delivered by resources located in countries outside the European Union, we will notably be required to transfer your personal data to these countries. It may also happen that service providers access your data on our behalf to provide us with a specific service and are located in countries outside the European Union.

When such transfers occur, we ensure that these personal data transfers are framed in accordance with applicable regulations to ensure an adequate level of data protection, either by an adequacy decision of the European Commission or through legal instruments such as data transfer agreements incorporating the European Commission’s Standard Contractual Clauses.

For any request concerning the recipients and data transfers we make outside the European Union, please contact us at the addresses indicated in the “How to contact us” section below.

5. How you can manage your rights regarding your personal data

You have a right of access, rectification, erasure, restriction, and objection regarding the processing of your personal data, as well as the right to define directives concerning the fate of your data after your death and the right to data portability.

You can contact us at any time at the addresses indicated in the “How to contact us” section below to exercise your personal data rights under the conditions set by the applicable regulations. You must indicate which right you intend to exercise, as well as all necessary details so that we can respond to your request.

These rights are exercised under the conditions set by the applicable regulations.

  • The right of access means that you can ask us at any time to inform you whether we are processing personal data concerning you and, if so, to tell you what personal data is concerned as well as the characteristics of the processing(s) carried out.
  • The right to rectification means that you can ask us to rectify your personal data when it is inaccurate. You can also request that your personal data, if incomplete, be completed insofar as this is relevant to the purpose of the processing concerned.
  • The right to erasure means that you can request the erasure of your personal data, particularly when: (1) its retention is no longer necessary for the purposes for which it was collected; (2) your personal data is processed based on your consent, you wish to withdraw this consent, and there is no other legal basis that could justify the processing; (3) you have objected to the processing of your personal data and consequently wish it to be erased; (4) your personal data has been unlawfully processed; (5) your personal data must be erased to comply with a legal obligation provided for either by European Union law or by French law.
  • The right to restriction means that you can ask us to restrict the processing of your personal data (1) when you contest the accuracy of your personal data for a period allowing us to verify its accuracy; (2) when, following processing established as non-compliant, you prefer the restriction of processing to the complete erasure of your personal data; (3) when we no longer need your personal data for the purposes of processing but you still need it for the establishment, exercise, or defense of legal claims; (4) when you have objected to the processing of your personal data and you wish for a restriction of processing for the period allowing us to verify whether the legitimate ground you invoke is justified. The restriction of processing means that the processing of your personal data will then only involve the storage of your corresponding personal data. We will then no longer carry out any other operations on the personal data concerned.
  • The right to object means that you can object to the processing of your personal data when this processing is based on the pursuit of INNOV8 GROUP’s legitimate interest. The right to object is exercised subject to providing a legitimate reason relating to your particular situation. We will then cease the processing concerned unless there are legitimate and compelling grounds justifying its continuation in accordance with applicable regulations.
  • The right to define directives concerning the fate of your data after your death allows you to communicate your instructions regarding the retention, erasure, and communication of your personal data after your death.
  • The right to portability means that you can ask us, under the conditions set by the applicable regulations, to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to you, or to ask us to transmit it directly to a third party of your choice when this is legally and technically possible.

When we process your personal data based on your consent, you finally have the option to withdraw your consent at any time by contacting the addresses indicated in the “How to contact us” section or by clicking on the unsubscribe link present in each of our communications.

However, the withdrawal of your consent does not affect the validity of the processing carried out before this withdrawal.

6. Updates to this Policy

INNOV8 GROUP reserves the right at any time to modify or update, in whole or in part, this Policy, due to changes in applicable regulations concerning personal data protection or the data processing carried out.

Any substantial modification to the Policy will be notified to you by email if you have provided us with a valid email address and will be published on the website. We recommend that you regularly review this Policy to have a complete understanding of our commitments regarding the security and protection of your personal data.

7. How to contact us

If you have any questions, comments, or suggestions, please contact us by visiting the contact us page or by submitting them to rgpd@innov8.fr

Or by postal mail to:

INNOV8 GROUP

25 QUAI AULAGNIER 92600 ASNIERES-SUR-SEINE

If you are not satisfied with INNOV8 GROUP’s response to a request to exercise rights in accordance with Article V above or if you wish to report a violation of applicable data protection regulations, you have the right to lodge a complaint with the CNIL by mail (CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or with the data protection authority of the country in which you reside or habitually work.