Confidentiality and privacy policy

This policy informs you about how your data are collected and used in connection with the site accessible at www.nuwen.com (the “Site”) and/or in connection with any contact with our Company, in accordance with the “Information Technology and Freedoms” Act No. 78-17 of January 6, 1978 and the European regulation in force resulting from the General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”).

On the protection of your personal data

1/ Data controller and recipients of personal data

The personal data collected (“Data”) in connection with the use of our Site and more generally, in connection with contacts you may have with our Company, are processed by Yann Launay dpo.nuwen@roullier.com, as the data controller (“Data Controller”).

Data means any information relating to an identifiable natural person, directly or indirectly, including by reference to an identifier such as a name, an identification number, location data or an online identifier.

Depending on the processing purpose, the Data collected and/or transferred are intended to be used by the Data Controller; the Data Controller’s support services (purchasing/sales administration, sales, logistics, credit management, HR, IT accounting and marketing) shall have access to them. They will also be made available to the following service providers (“data processors” or “third party recipients” as defined in the regulation) for the strict needs of their mission, in particular:

• technical service providers: communication agency, website hosting company of our Site (see To U and legal notices available HERE);
• financial/accounting service providers: auditors, banks;
• logistics service providers: carriers;

Access is strictly governed by the existing security policies so that human intervention on the Data is very exceptional. The Data Controller may be required to disclose your Data to third parties in cases where such communication is permitted and required by law or a court decision, or if such communication is necessary to protect and defend its rights.

Otherwise, your Data shall not be transferred or made available to any third party without your prior consent.

The Data Controller does not transfer your Data to a third country outside the EEA. In the event of a transfer outside the EEA, such transfers shall be governed by appropriate guarantees, such as the standard clauses required by the European Commission.

2/ Data collection purposes

The Data that is required to respond to your contact, to conduct commercial relationships with our Company, in  particular the contract of sale of the products and/or services presented on the Site, or to meet a regulatory obligation, shall be reported to you as such when collected.

The following Data are processed:

• Identification data (last name, first name, name of the company for which you work, position, relations with any person within the Company),
• Connection data,
• Location data (postal address),
• Any other data you send us in order to contact our Company or obtain the supply of products and/or services,

The Data shall be used in different ways, depending on why you visited the Site:

• On the basis of your consent, which you may withdraw at any time without calling into question the initial legality of the use of your Data ( infra, Art. 3 “Your Rights”), for sending newsletters;
• For the purposes of the performance of the commercial relationship and in particular the sale or provision of services contract you have entered into or that of the supply contract (creation of customer or supplier accounts, fulfillment of orders, invoicing, monitoring of the performance of the contract, delivery, after-sales and complaints, organization of satisfaction surveys, customer or supplier file management, unpaid invoices and litigation management);
• To process and respond to requests that may give rise, where appropriate, to the conclusion of a contract (request for information);
• To meet legal, accounting and tax obligations (in particular the retention of accounting supporting documents; management of rights, rectification and objection requests; maintenance of a list of objections to canvassing), or to establish, exercise and defend legal rights.

Unless you object, and within the limits of your interests and rights, to meet the legitimate needs of the Data Controller, in particular:

• Canvassing, customer relationship monitoring and customer loyalty (which in particular involve sending commercial messages or news about products, services and offers presented on the Site or off the Site);
• Creation of customer/supplier accounts by performing all due diligence necessary to protect the Data Controller’s interests and to prevent conflicts of interest;
• Site optimization (analysis of the navigation route, identification of mass connections, determination of search trends so that the offers made can be adjusted to the demand)
• Carrying out reach-out operations to develop sales;
• Management of people’s opinions about products, services or content in the interest of improving the products and services offered on the Site or off the Site;
• Personalization of the customer experience on the Site;
• Preparation of statistics (sales in particular), in order to analyze the sales activity;
• Management of the prospects file in order to develop sales;
• Completion of satisfaction surveys;
• To combat payment fraud.

3/ About cookies

Various cookies are used on the Site to improve interactivity between you, the Site and the services offered.

For more information, please see the cookie policy available HERE.

4/ Your rights regarding the Data

The persons whose Data are processed by the Data Controller have a right of access, rectification of erroneous personal Data, and, in the cases and according to the limits laid down in the regulation, objection, erasure of some of their Data and a right to withdraw their consent, restrict use thereof, define their fate after their death, or request their portability for transmission to a third party.

To exercise your rights, simply write to one of the two addresses stated in Article 6 below and enclose, if necessary, any document which proves your identity and justifies your request.

5/ Length of retention of the Data

Your Data shall be retained for a period not exceeding that required for the purposes for which they are collected, and in particular for the following periods:

• For a period of 3 years following the last contact, and then kept in intermediate archives for the duration of the applicable legal requirement (5 years) for all data except banking data and cookies;
• For a period of 13 months from their storage/creation for cookies.

At the end of these periods, the Data shall be erased from the active databases and, if necessary, archived for a period not exceeding the applicable statutory limitation periods or archiving obligations. Once these periods have expired, the Data will be destroyed.

6/ Contact the data protection officer (DPO)

For any further information or difficulty relating to the use of your Data, you can contact the data protection officer by email at dpo.nuwen@roullier.com or by postal letter at the following address 57 Boulevard Jules Verger 35800 Dinard.

In the event of an unresolved difficulty or any complaint relating to the processing of your data, you can refer the matter to the CNIL, by email at: https://www.cnil.fr/fr/agir or by postal letter at the following address:

Commission Nationale de l’Informatique et des Libertés,
3 Place de Fontenoy – TSA 80715,
75334 PARIS CEDEX 07.