Privacy policy

PRIVACY POLICY 15 September 2016 (updated on 9 October 2023)

The processing of personal data referred to in this Privacy Policy is governed by EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR"), as well as by the French Data Protection Act of 6 January 1978 in its consolidated version (hereinafter together referred to as the "Personal Data Legislation").
The terms "personal data" (hereinafter "Data") and "processing" of Data have the meaning defined by the Personal Data Legislation. "MAVIC" means MAVIC GROUP, (also referred to as "we", "us" or "our").
Our Privacy Policy applies to all users of www.mavic.com (hereinafter referred to as the "Site"). Its purpose is to inform you of how your Data is processed when you browse the Site.
Processing of your Data: The data controller, MAVIC GROUP, may be contacted by e-mail at the following address: privacy@mavic.com

Depending on how you use the Site and its functionalities, Mavic may process the following Data:

Typology	Data
Identification details :	Surname, first name, gender
Contact details :	E-mail address, postal address, telephone number.
Data relating to the purchase of a Mavic product :	Date of purchase, place of purchase, product name, price, serial number, order/invoice number (and other documents supporting the purchase).
Other information :	Additional information entered in free-form fields and/or appearing on downloaded documents (where applicable), date of data entry / participation in an Offer.

Your Data collected when you register your purchases on the Site.

All the information concerning this processing and the Data concerned is available on the Personal Data Protection Charter of the www.mavic.com website.

Data collected when you take part in a satisfaction survey

Following your participation in an Offer, you may be asked to complete a satisfaction survey. If you respond, we collect and process the following Data, depending on the information you provide, when you submit your response:

Typology	Data
Identification details :	Surname, first name, gender
Contact details :	E-mail address, postal address, telephone number.
Other information :	Response(s) entered, additional information entered in free fields (if applicable), date of data entry / participation in survey.

If you are dissatisfied with your customer experience, we may contact you in order to understand your dissatisfaction and improve our services.

Data concerning minors

Our Site and/or our products are not intended for minors (under the age of 15). If, however, you become aware that a minor for whom you are responsible has logged on to our Site, please contact us and we will immediately delete the Data of the minor concerned.

Purposes of processing your Data and legal bases

We process your Data for the following purposes and legal bases:

Goals	Legal basis
Enable and manage your participation in an Offer:	Processing of your Data on the basis of the performance of the contract (Article 6§1 b. of the RGPD).
To enable you to benefit from the Offer (refund, issue of a discount voucher, etc.):	Processing of your Data on the basis of the performance of the contract (Article 6§1 b. of the RGPD).
Check that your participation meets the conditions for participation in the Offer :	Processing of your Data on the basis of our legitimate interest (Article 6§1f. of the RGPD), residing in the need to ensure that your participation and the supporting documents submitted comply with the terms and conditions of the Offer.
Manage the handling of complaints and/or disputes:	Processing of your Data on the basis of our legitimate interest (Article 6§1f. of the RGPD), residing in the need to respond to your requests (questions on how to participate, follow-up of your participation, etc.) and, where applicable, to deal with subsequent complaints or disputes (contesting a refusal of your participation, a lack of reimbursement, etc.).
To compile statistical analyses relating to the use of the Site:	Statistical data is generated in anonymous form, which does not allow you to be identified individually. Your Data is processed on the basis of our legitimate interest (Article 6§1f. of the RGPD), which lies in the need to better understand the Site's audience in order to adapt its content, its functionalities and our Offers.
Prevent fraud and abuse:	This processing is not carried out using automated processes, without human intervention. Processing of your Data on the basis of our legitimate interest (Article 6§1f. of the RGPD), residing in the need to secure the Site and to protect us against misuse of the Offers for abusive or fraudulent purposes (manifest non-compliance with the conditions of participation, uploading of false supporting documents, etc.).
Fulfil the legal obligations to which we are subject (accounting, tax, etc.):	Processing of your Data on the basis of compliance with our legal obligations (Article 6§1 c. of the RGPD).
Submit satisfaction questionnaires to you and analyse your responses:	Processing of your Data on the basis of our legitimate interest (Article 6§1 f. of the RGPD), residing in the need to assess the satisfaction of our customers in order to improve our services and your experience.
To contact you again in the event of an unfavourable opinion expressed in a satisfaction questionnaire in order to collect information with a view to improving our services:	Processing your Data on the basis of our legitimate interest (Article 6§1 f. of the GDPR), residing in the need to respond to customer complaints and improve our services and your experience.

Transfer of your Data to third parties:

Your Data may be transferred to the following third parties:

Recipients	Comments
OVH, a SASU with capital of 10,174,560 euros, whose registered office is located at 2, rue Kellermann, Roubaix (59).	Company specialising in data processing, hosting and related activities.
SENDINBLUE (BREVO) SASU with capital of 387,722 euros, whose registered office is at 106, BD Haussmann, Paris (75).	Digital marketing service provider enabling e-commerce vendors and agencies to establish relationships with their customers through marketing campaigns and transactional messages.
SALESFORCE SAS, a company with share capital of 37,000 euros, whose registered office is located at 3 avenue Octave Greard, Paris (75).	Service provider specialising in customer relationship management.
SAGE SAS, a SAS with share capital of 6,750,000 euros, whose registered office is at 10 Place de Belgique, La Garenne Colombes (92).	Service provider responsible for corporate resource planning and transaction management.
KUEHNE + NAGEL SAS with share capital of €17,380,135, whose registered office is located at Ferrière en Brie (77), Parc Activité NID A GRIVE	Logistics partner
UPS SAS with share capital of 57,069,000 euros	Partner for parcel delivery.

Please note that your Data may, where appropriate, also be transferred to technical service providers (hosting service providers, management software, lawyers, chartered accountants, etc.). In this case, only your Data that is strictly necessary for the recipients concerned to perform their services is transferred to them.

Transfer of your Data to third parties: Please note that your Data may, where appropriate (legitimate interest), also be transferred to technical service providers (hosting service providers, management software, lawyers, chartered accountants, etc.). In this case, only your Data that is strictly necessary for the recipients concerned to perform their services is transferred to them.

Transfer of your Data outside the European Union or the European Economic Area: Your Data is only hosted in France.

How long we keep your Data: Your Data is kept for a period strictly necessary for the purposes pursued.

The retention period may vary depending on the purpose of the processing:

Categories of personal data	Shelf life
Data collected at the time of invoicing:	10 years from its completion. Your data is then rendered irretrievably anonymous.
Accounting data (reimbursement receipts) :	3 years from its completion. Your Data is then rendered irretrievably anonymous.
Data relating to the customer's activity (processed on the basis of legitimate interest) :	5 years from the date of completion. Your Data is then rendered irretrievably anonymous.
Data collected as part of a satisfaction survey :	3 years from its completion. Your Data is then rendered irretrievably anonymous.
Data relating to the Prospect's activity (processed on the basis of legitimate interest) :	3 years from its completion. Your Data is then rendered irretrievably anonymous.

Data kept for archiving purposes is, where applicable, used only for the purposes of the reason(s) justifying its retention (e.g. to establish/justify accounts, process a complaint, etc.). Anonymising your Data makes it permanently impossible to identify you.
Security of your Data: We attach particular importance to Data security. We have put in place organisational and technical measures appropriate to the degree of sensitivity of the Data, with a view to ensuring its integrity, availability and confidentiality, as well as protecting it against any accidental or malicious intrusion, loss, alteration or disclosure to unauthorised third parties. When we have recourse to a service provider, we only communicate Data to them, within the limits of what is necessary, once we have verified that these security principles have been respected. We may carry out audits of our service providers in order to verify the correct operational application of the rules relating to Data security.

Your rights: In accordance with the terms of Article 21, paragraph 1 of the RGPD, you have the right, at any time, to object to the processing of your Data, where such processing is carried out on the legal basis of legitimate interest. If you object to us processing your Data: -
for all other purposes, you must provide us with the compelling reason(s) for exercising your right to object.

Your objection to the processing of your Data is valid for the future.
Withdrawal of consent: In accordance with Article 7, paragraph 3 of the RGPD, you have the right at any time to withdraw your consent to the processing of your Data, where such processing is carried out on the legal basis of such consent. You may withdraw your consent without giving us any reason(s) for doing so. If you wish to unsubscribe from our newsletter, simply click on the "unsubscribe" field at the bottom of each newsletter.
Withdrawal of your consent to the processing of your Data is valid for the future.
Your other rights: You also have the following rights, provided that the legal conditions for exercising each of these rights are met:
The right of access, in accordance with Article 15 of the GDPR, you have the right to: -
ask us about the nature and methods of the processing of your Data that we carry out;
- obtain a copy of your Data that we hold.
The right of rectification, in accordance with Article 16 of the GDPR, you have the right to ask us to correct your Data that is incorrect or to complete it.
The right to erasure, in accordance with Article 17 of the GDPR, you have the right to ask us to erase your Data. In this context, we will delete the Personal Data concerned as far as possible. Nevertheless, please be aware that such a request may not affect our right to retain your Personal Data necessary: -
to satisfy our contractual or legal obligations; - in the event of a complaint and/or dispute relating to your participation in an Offer.
In particular, subject to reasons relating to your particular situation, we may only delete your Data when it is no longer necessary to process your participation in an Offer, i.e. six (6) months from the end of the Offer in question, unless compliance with a legal obligation or the establishment, exercise or defence of legal claims requires a longer retention period.
The right to limitation, in accordance with Article 18 of the GDPR, you have the right to ask us to limit the processing of your Data, in one of the following cases: -
when you dispute the accuracy of this Data or you consider that we would process it in contravention of our obligations, but you do not wish it to be deleted immediately; in either case, we must suspend the processing of your Data while we carry out the necessary checks;
- when we no longer need this Data but you need it to claim, exercise or/and defend your rights; in this case, we must retain your Data that is necessary for you.
The right to portability, in accordance with Article 20 of the RGPD, you have the right to ask us to transmit your Data to you and/or to a third party of your choice, in a format that is technically usable by you or by said third party.
The fate of your Data after your death, in accordance with article 85 I. of the Data Protection Act, you have the right to give us instructions concerning the fate of your Data after your death.
The right to complain to a supervisory authority, you have the right to lodge a complaint with the CNIL (https://www.cnil.fr/fr/plaintes) or any other competent supervisory authority.
How to exercise your rights: to exercise any of your rights, simply send us your request:
- By post in a registered letter, for the attention of the "personal data protection" department, to the following address: MAVIC GROUP - 44 rue saturne, 74650 CHAVANOD.
You will not be required to make any payment in order to exercise your rights, other than any costs incurred in sending your requests, except in the event of repetitive and manifestly unfounded requests.
Once we have received your request, your personal data will be stored by our "personal data protection" department. This data and our subsequent correspondence will be kept in archive form for a period of 5 years from the final processing of your request.
We may ask you for additional information to confirm your identity. This additional data will be deleted once your identity has been confirmed.
The legal basis for processing this personal data is Article 6, paragraph 1 f) of the RGPD, namely our legitimate interest. The legitimacy of such processing is to be able to prove that we have processed your request to exercise a right.
From time to time, when you visit the Site, information may be placed on your computer in the form of a text file called a "cookie", to enable us to recognise your computer. We use cookies to make it easier for you to navigate our site. This means you don't have to re-enter your password as often during a session, and you don't have to put previously selected items back in your shopping basket if you didn't complete your transaction on your previous visit. Cookies are also used to analyse website traffic and for profiling purposes. For further information on cookies, please click on the link: www.mavic.com
Changes : The provisions of this Data Protection Information, including the information on cookies referred to, apply in the version in force at the time of use of the online shop.
We reserve the right to supplement and amend the content of this Data Protection Information. Updated Data Protection Information applies from the time it is published on our Website. In the event of substantial or material changes to the Data Protection Information, in particular changes that affect the processing of your personal data already collected by us, we will inform you in advance (e.g. by e-mail).