Who processes your data

ESLAB, a simplified joint stock company (SAS) with a share capital of €1,000, registered with the Strasbourg Trade and Companies Register under the unique identification number 851836684, whose registered office is located at 1bis de la Course, 67000 Strasbourg, France, processes the data collected concerning you and is responsible for processing personal data for all data collected in connection with the services offered by ESLAB.

Why do we collect and process your data?

ESLAB collects and processes data about you for the purposes listed below and detailed below:

 

Firstly, it is used for the purposes of customer relationship management and to enable us to better interact with our customers, to optimise the user experience or to respond to requests and any complaints from our customers.

 

This processing includes in particular:

  • the possibility of creating an account,

  • the management of your consents and authorizations concerning the use of your personal data, particularly for sending newsletters and commercial solicitations by electronic means,

  • enabling you to benefit from ESLAB’s services, order products and services, track your orders and billing, subscribe to newsletters, etc.,

  • recognizing your loyalty customer status, once you have indicated this to ESLAB and if this information is requested. It is hereby recalled that the use of your personal data by the ESLAB loyalty program is subject to specific terms and conditions,

  • collecting your comments and reviews,

  • managing communications and tracking our interactions, particularly in the event of disputes (including via the customer service accessible for example by telephone, instant messaging such as chat. These exchanges may be recorded for service improvement purposes),

  • managing your requests related to the exercise of your rights, including access, rectification, and objection, in accordance with personal data regulations,

  • managing the risk of fraudulent use of your data or of the services you access through ESLAB; based on the results of checks performed, ESLAB may take any measures it deems necessary to secure your data and our information systems used for ESLAB, as well as to protect its interests. These measures may result in the suspension of your access to ESLAB and your online account,

  • managing product recalls initiated by suppliers or sending related information or documents,

  • conducting analyses or statistics to respond to surveys or requests carried out by public interest organizations, administrations, or administrative or judicial authorities (e.g. in case of food risk),

  • recording and managing the evidence that ESLAB must provide to comply with its legal or regulatory obligations or for litigation purposes (e.g. necessary evidence concerning the exercise of your rights, evidence related to your orders),

  • managing potential disputes, particularly related to the recovery of amounts you may owe us, and managing payment incidents,

  • complying with our legal or regulatory obligations applicable to ESLAB’s activities (e.g. to respond to tax administration requests).

Your data may also be used to carry out commercial prospecting operations or studies aimed at improving customer knowledge and the services that ESLAB can offer its customers. Your data may therefore be used, in compliance with any required authorizations you may have granted:

  • to send you promotional messages or advertisements, personalized or not, by post or electronic means, including mobile notifications, according to your profile,

  • to analyze your use of services (including your online navigation and reactions to emails), so that we can better understand you, assess the relevance of the Services offered as well as the messages we send you, and offer you tailored offers, content, and services; these analyses will be carried out in accordance with the authorizations you may have given us, particularly when cookies or other trackers are used.

For commercial prospecting operations based on profiling and requiring the data subject’s consent, that consent can be withdrawn at any time without affecting the lawfulness of processing carried out before such withdrawal.

Your data may be used to carry out technical operations related to the processing of your personal data for the purposes stated herein. This includes:

  • technical operations related to address correction,

  • assigning a digital identifier to your data so we can interact with you via different digital communication channels (websites, mobile apps, social networks), including to send you targeted ads,

  • technical, organizational, or cybersecurity operations related to anomaly detection and securing your data and our information systems where your data is processed.

Why do we process your personal data?

Your data may be processed for one or more of the following reasons:

  • because it is necessary to provide ESLAB’s services,

  • based on your consent, for example, to allow us to communicate with you about our offers and products or those of third-party advertisers,

  • in compliance with the interests, rights, and fundamental freedoms of individuals registered with ESLAB’s services, because it is necessary to allow us or our partners to pursue our legitimate interests such as retaining our customer base, managing our relationship with customers efficiently, getting to know them better, promoting our products and services, or combating fraud and defending our interests in the event of litigation.

What data do we collect?

The data processed in the context of ESLAB comes from:

  • your registration: data provided in the subscription form such as your last name, first name, date of birth, contact details,

  • the use of ESLAB services such as your purchases made directly with or via ESLAB: data used to identify and authenticate you (login logs, IP address), purchase data, locations and times of order and purchase, your browsing history on the site, dates and times of site visits, location data,

  • websites and mobile apps published by third-party entities to ESLAB: browsing or advertising information addressed to you,

  • social networks such as Facebook, LinkedIn, Twitter: data exchanges may occur between ESLAB and social networks, for example when you are logged in to Facebook and visit an ESLAB page. Likewise, if you click the Twitter button on an ESLAB site page, Twitter will collect that information. If you do not want such exchanges, we recommend logging out of social networks before visiting ESLAB sites,

  • data concerning you may be transmitted to us by third parties, such as your postal or email address, profile data, which will be added to our databases. These third parties must have collected your data lawfully and obtained any necessary consent before transmission to ESLAB.

We may also have data from open data sources.

Except for open data, other data is not publicly accessible.

Data may be collected directly from you, through the use of ESLAB’s services, or from other group entities, partners, or third parties.

The data collected is essential to allow ESLAB, its service providers and/or partners to provide services offered through ESLAB, to help us better understand and interact with you, facilitate interaction with the ESLAB ecosystem, or to send you, directly or via partners, content tailored to your profile and interests.

Who may access your data?

To achieve the purposes described above and only to the extent necessary, your data may be shared with the following recipients:

  • authorized personnel in the relevant departments of ESLAB (e.g. marketing, studies and analysis, consumer panels, customer service, legal, accounting and tax, IT, and information systems security),

  • payment providers and debt collection services,

  • ESLAB’s service providers and subcontractors (e.g. IT providers, advertising providers),

  • advertisers or partner brands, but in such cases they have no direct or indirect access to your data; only anonymized profile-based data may be used,

  • administrative or judicial authorities, where necessary for compliance with legal obligations or for the defense of our rights and interests.

Data retention period limitation

The data collected will be retained for the time necessary to fulfill the purposes listed above, plus the applicable legal limitation period.

Primarily, your account data (registration) will be retained throughout your membership. It may then be retained and processed for 3 years following your last contact, to send you commercial solicitations.

Data may be retained longer due to specific legal obligations or applicable legal limitation periods. For example:

  • 6 years for tax documents,

  • 10 years for accounting documents,

  • the duration of any litigation and until all avenues of appeal have been exhausted.

In the event of exercising your rights, identity document data may be retained for up to 3 years, in line with legal limitation periods.

How is your data stored?

ESLAB takes into account the nature of personal data and the risks posed by processing activities to implement appropriate technical, physical, and organizational measures to preserve the security and confidentiality of personal data and prevent it from being distorted, damaged, or accessed by unauthorized third parties.

ESLAB selects subcontractors and service providers that offer sufficient guarantees in terms of quality, security, reliability, and resources to ensure the implementation of technical and organizational measures, including data security. These subcontractors and providers commit to respecting confidentiality levels at least equivalent to those of ESLAB.

Is your data processed outside the European Union?

The various categories of data collected and processed may be transmitted to service providers located in non-EU countries, particularly for IT services or data processing related to social networks.

To secure such transfers, our subcontractors sign either standard contractual clauses approved by the European Commission or are subject to binding corporate rules validated by data protection authorities, or are located in countries offering adequate data protection.

What are your rights?

In accordance with data protection regulations, you have the right to information, access, rectification, and erasure (unless necessary for fulfilling our contract or legal obligations or defending our rights), and the right to define directives regarding your data after your death. ESLAB may charge reasonable administrative fees for additional copies of your data.

You also have the right to restrict processing and to data portability, which applies in certain cases. Furthermore, you can object to processing based on legitimate interests (including profiling), on grounds relating to your particular situation. In case of such objection, ESLAB will stop processing unless there are compelling legitimate grounds overriding your interests or for the establishment, exercise, or defense of legal claims.

You can also object to any processing related to commercial prospecting (including profiling), or withdraw your consent at any time if processing is based on your consent (withdrawal will not affect the lawfulness of prior processing).

Please note that failure to provide or changes to your data may impact certain service requests, and your rights-related requests will be logged for tracking purposes.

To exercise your rights, write to ESLAB at:

ESLAB, 1bis de la Course, 67000 Strasbourg
By email: support@eslabsas.com
Please include your full name, email, and, if possible, your customer reference. As required by law, your request must be signed and accompanied by a copy of an identity document bearing your signature and specifying the address to which a response should be sent. A reply will be sent as soon as possible.

We also inform you of the existence of the « Bloctel » telephone solicitation opt-out list, managed by Opposetel, on which you can register free of charge: https://conso.bloctel.fr/.

If you are not satisfied with our response, you may file a complaint with a supervisory authority (in France: CNIL, 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, Tel: +33 1 53 73 22 22).

Data Protection Officer: For any questions regarding your personal data, contact ESLAB – Data Protection Officer – 1bis de la Course, 67000 Strasbourg.

Retour en haut