Privacy Policy — Flore de France

01 / Data controller

Who is responsible for your data

The entity responsible for processing personal data collected through this website is:

Flore de France
58 Rue Etienne Dolet
92240 Malakoff, France
Email: sales@flore-de-france.com
Phone: +33 7 65 16 16 56

For full corporate identifiers, see our Legal Notice.

Data Protection Officer (DPO): Flore de France has not appointed a Data Protection Officer. For all data-related requests, please contact sales@flore-de-france.com.

02 / What we collect

Categories of personal data

Data you provide directly

When you submit the contact form on this website, we collect:

Identification data: full name, role, company / organization
Contact data: email address, phone number
Inquiry data: service type, subject, free-text message you provide
Consent record: timestamp and acceptance of this Privacy Policy

Data collected automatically

When you visit the website, our hosting provider (Vercel) records standard server logs that may include:

IP address (truncated where possible)
Browser type, language, device type
Pages visited, request timestamps, referrer URL

Analytics cookies

If you accept analytics in the consent banner, we use Google Tag Manager to load Google Analytics, which sets cookies and collects:

Pages viewed, navigation paths, time on page
Approximate geographic location (city / region level)
Device, browser, and operating system characteristics
Anonymous identifiers used to count visits and recognize returning users

This data is used in aggregate form to help us understand which pages are most useful. We do not use it for advertising, remarketing, or to build individual profiles. You can decline at any time via the consent banner, and you can withdraw consent later by clearing your browser's site data for this site.

03 / Why we process your data

Purposes and legal basis

We process the personal data described above for the following purposes:

Respond to your inquiry, to reply to questions sent via the contact form, send technical sheets or quotations, and follow up on commercial discussions. Legal basis: your consent and our legitimate interest in responding to business inquiries.
Provide commercial information, to send you information about our products and services that is directly relevant to the inquiry you submitted. Legal basis: legitimate interest, with right to object at any time.
Operate and secure the website, to ensure technical operation, prevent abuse, and detect security incidents. Legal basis: legitimate interest.
Measure site usage, to understand which pages are most useful and improve content based on aggregate visitor behavior, via Google Analytics. Legal basis: your consent (given through the consent banner).
Comply with legal obligations, to meet record-keeping, accounting, and regulatory requirements where applicable. Legal basis: legal obligation.

We do not use your data for automated decision-making or profiling.

04 / Recipients

Who has access to your data

Your data is accessed only by:

Authorized members of the Flore de France team who need it to respond to your inquiry (in particular: sales, R&D, and project coordination).
Brevo, our transactional email service provider (Sendinblue SA, 7 rue de Madrid, 75008 Paris, France), which acts as a data processor on our behalf to deliver email sent from the contact form. Brevo's processing is governed by a Data Processing Agreement.
Vercel Inc., our website host (United States), which processes server logs as described above. Transfers outside the EEA are covered by the Standard Contractual Clauses (SCCs) approved by the European Commission.
Google LLC, provider of Google Tag Manager and Google Analytics (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), which acts as a data processor when you accept analytics in the consent banner. Transfers outside the EEA are covered by the EU–US Data Privacy Framework (Google is certified) and Standard Contractual Clauses (SCCs).

We do not sell, rent, or otherwise commercially share your data with third parties.

05 / Retention

How long we keep your data

We retain personal data only for as long as necessary for the purpose for which it was collected:

Contact form submissions: 3 years from your last contact with us, after which the data is anonymized or deleted, in line with CNIL guidance.
Active commercial relationships: for the duration of the relationship plus the legal limitation period (typically 5 years under French commercial law).
Server logs: a maximum of 12 months, after which they are deleted or anonymized.
Records kept under legal obligation (e.g. accounting): for the period required by applicable law (typically 10 years for accounting documents).

06 / Your rights

Your rights under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of access, to obtain confirmation of whether we process data about you, and a copy of that data.
Right to rectification, to have inaccurate or incomplete data corrected.
Right to erasure ("right to be forgotten"), to have your data deleted in the cases provided for by the GDPR.
Right to restrict processing, to limit how we process your data in certain circumstances.
Right to data portability, to receive your data in a structured, commonly used format and transmit it to another controller.
Right to object, to object to processing based on legitimate interest, including for direct marketing.
Right to withdraw consent, at any time, where processing is based on consent, without affecting the lawfulness of prior processing.
Right to give post-mortem instructions, to define how your data should be handled after your death (under French law).

How to exercise your rights: send a written request to sales@flore-de-france.com, including proof of identity if necessary. We will respond within one month, as required by the GDPR (extendable by two further months for complex requests).

If you believe your rights have not been respected, you also have the right to lodge a complaint with the French data protection authority:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
www.cnil.fr

07 / Security

How we protect your data

We implement appropriate technical and organizational measures to protect your data, including encrypted transport (HTTPS), access controls limited to authorized staff, and regular review of our processing activities. However, no transmission over the Internet can be guaranteed entirely secure, and we cannot be held responsible for unauthorized access resulting from circumstances beyond our reasonable control.

08 / Updates

Changes to this policy

We may update this Privacy Policy from time to time, in particular to reflect changes in our processing activities or in applicable law. The updated version will be published on this page with a revised "Last updated" date. We invite you to review it periodically.

Last updated: April 29, 2026

Privacy policy.