Policy on personal data processing and cookie management
Version 0.2_2023-02-27
Download the dedicated privacy policy for MyPetzl Light mobile app.
I/ Personal data processing policy
What is this policy? What is its purpose?
Petzl Distribution (hereinafter "PETZL" or "we") is concerned about protecting your privacy and the use of your personal data.
The purpose of this policy is to describe and inform you of how your personal data, collected directly while you browse the petzl.com website and all other PETZL internet sites, regardless of the domain name (hereinafter, the "Website"), is processed.
Your personal data is collected automatically via cookies, or via data entry forms on the Website.
The current version of our data use policy is the one published on the Website. It may be modified and updated by us, due to changes in applicable legislation or a change in our practice. We therefore invite you to regularly consult our policy to stay informed of any changes.
Who is responsible for processing the personal data collected?
PETZL Distribution, editor of the Website and subsidiary of the company BIG BANG, is the data controller under (EU) Ruling 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR").
PETZL Distribution
A simplified joint-stock company with share capital of €688,440
Head office: ZI Crolles, Cidex 105 A, 38920 Crolles
Registered on the Grenoble Trade and
Company register under the number 388 381 642
VAT No.: FR 47388381642
Tel.: +33 (0)4 76 92 09 00 BIG BANG
A simplified joint-stock company with share capital of €86,400
Head office: ZI Crolles, Cidex 105 A, 38920 Crolles
Registered on the Grenoble Trade and
Company register under the number 303 434 583
VAT No.: FR 83,303,434,583
Tel.: +33 (0)4 76 92 09 00
Who is the Data Protection Officer appointed by us, and how can you contact them?
We have appointed a Data Protection Officer (or DPO) who will be your point of contact for any questions concerning your data.
You can reach them at the following address:
E-mail address: dataprivacy-eu@petzl.com
Which personal data does PETZL collect? For what purpose? Can I refuse this collection and processing?
Through our Website, we collect a variety of personal data about you and process it for the purposes below:
Purpose: Supply of products
When you buy products through our Website, we process your personal data, in particular to provide you with the products, to process your order, to ensure delivery and to answer your questions about your order. For your security, we also have to keep your information so that we can inform you of any product recalls.
Legal basis
Execution of the contract made with you (ordering of products), legitimate interest of PETZL (to reply to your questions) and legal obligation (for product recalls)
Data collected
Identification data, payment data, administration data.
Storage period
Three years from delivery of the order (for questions concerning orders) or 10 years from when the data is collected.
Purpose: Supply of services
After-sales service or other services, such as technical questions concerning our products.
Legal basis
Execution of the contract (for the after-sales service), legitimate interest of PETZL and legal obligation.
Data collected
Identification data, bank information where relevant, information on the product concerned and information concerning your activities.
Storage period
15 years from when the data is collected, with the exception of banking data, which is deleted once the purpose has been met.
Purpose: Marketing and sales communication
Sending promotional products, news and other promotional information, informing you of various events in connection with PETZL and competitions.
Legal basis
Consent (for private users) or legitimate interest of PETZL (for professionals customers and users.
Data collected
Identification data and professional data.
Storage period
Three years from the last activity.
Purpose: Competitions
Selection of winners, sending prizes, receiving applications.
Legal basis
Execution of the competition rules
Data collected
Identification data
Storage period
Five years from the competition
Purpose: Registration for PETZL events
Legal basis
Legitimate interest of PETZL.
Data collected
Identification data, activities practised, administration data.
Storage period
Two years from the end of the event.
Purpose: Surveys
Such as satisfaction surveys, product orientation surveys.
Legal basis
Legitimate interest of PETZL.
Data collected
Identification data, activities practised, interest for the brand and the products.
Storage period
Five years from receiving responses.
Purpose: Employee recruitment
Receipt of applications, interviews, sending replies.
Legal basis
Execution of pre-contractual measures and consent.
Data collected
Identification data, personality test and professional data.
Storage period
The time it takes to examine the application and then, with your consent, two years from the application.
Purpose: To facilitate the customer's subsequent purchases
Legal basis
Consent
Data collected
Type of card, PAN number, bank card validity start and end date, name of cardholder
Storage period
The data is stored until consent is withdrawn and/or the validity of the bank card data expires.
Purpose: Supply of products
Complaints management.
Legal basis
The legitimate interest of PETZL
Data collected
Type of card, PAN number, bank card validity start and end date, name of cardholder
Storage period
13 months from the debit date and 15 months for a deferred payment card
For personal data used within the framework of managing the Website (data collected via the use of cookies and other trackers), see our Cookie management policy (paragraph II of this document).
Is my data sent to third parties? Where are these third parties located? What is the need for these transfers?
Your personal data may be transferred to third parties located within the European Union, particularly to process transactions and payments after purchasing products on our Website.
Additionally, we may have to use third parties located outside the European Union, or which use sub-contractors located outside the European Union.
Any transfer of your data outside the European Union will be done using the appropriate guarantees, in accordance with the applicable personal data protection regulations. Please send an e-mail to dataprivacy-eu@petzl.com if you would like to receive a copy of the applicable guarantees.
These third parties are service providers that provide, for example, technical services (data hosting, Website functionalities), logistics services (delivery of products or promotional materials) or PETZL affiliate companies.
In any case, your personal data shall not be transferred to third parties without any connection to PETZL, or which do not carry out any assignments or services for PETZL. However, it may be passed on if legislation or regulations require PETZL to do so, particularly in the event of legal proceedings or requests from legal or administrative authorities.
Which types of measures does PETZL put in place to ensure the security of my personal data?
Concerned about protecting your personal data, PETZL implements the following security, organisational and technical measures:
- organisational measures:
- we ensure that your data is processed by personnel and third parties who are bound by an obligation of confidentiality, written in a contract, so that they can only process your data for the purpose provided; and
- adoption and application of a security policy within our organisation to ensure the security of your personal data and counter any computer attacks efficiently and rapidly. - technical measures:
- implementation of secure access management, which in particular involves limiting access by IP address or dual authentication, so that only specifically identified persons can access your data and process it within the framework of their assignment;
- logging of personal data access events; and
- use of SSL certification, which ensures secure data connection and transmission between servers and your browser. Secure connection is symbolised by the acronym "HTTPS" (Hypertext Transport Protocol Secure) in our Website link.
Does the Website contain elements or links controlled by third parties? Is Petzl responsible for these elements?
Our Website may contain elements and links to other sites controlled by third parties. This concerns, for example, links to our retailers’ websites or social media sites (such as Facebook, YouTube or other) (hereinafter "third parties").
There are two cases:
- Reading content on the Website, hosted by third parties. You can accept or refuse third-party cookies. If you do not accept, this means that you will not be able to read the content on our Website (e.g.: video of one of our products on the Website, but hosted on YouTube)
- Consultation of links to third party sites. By consulting these different links, social media and other sites will have access to your data. This data will be processed by these sites and social media.
PETZL does not have any access to or control over any content owned and operated by a third party to which the Website links. Likewise, we cannot control how or why these third parties process personal data. For more information, we recommend you read the information published on the sites owned by third parties.
In this context, PETZL and all PETZL Group companies decline all responsibility concerning these sites, elements, cookies or other, owned and operated by third parties.
What rights do I have over my personal data collected and processed by PETZL?
GDPR gives you a certain number of rights to your personal data, namely right of access, rectification, deletion, opposition (including the right to not be subject to a decision based only on automated processing) and/or, where relevant, the right to withdraw your consent at any time, as well as the right of limitation and portability of your data. Finally, for French residents, you have the right to define your instructions concerning the fate of your data after your death.
To exercise your rights, you can contact us at any time, free of charge, at the following address: dataprivacy-eu@petzl.com.
In the event of doubt concerning your identity when making a request to exercise your rights, proof of identity may be requested.
How can I express my choices concerning the use of my personal data?
You can withdraw your consent at any time and free of charge by:
- clicking on the unsubscribe link at the bottom of our e-mails, or
- by contacting us at dataprivacy-eu@petzl.com, particularly if the e-mail does not contain a link to unsubscribe.
We may send service e-mails to inform you of product recalls or changes to our terms and conditions and/or our prices. Receiving these e-mails is not related to the choices you express to receive our news. These messages are necessary to fulfil our legal obligations, for the correct performance of our contracts or within the framework of our legitimate interest to inform you.
Who can I contact if I notice that PETZL is in breach of its obligations?
If, after contacting our DPO, you consider that PETZL is in breach of its obligations in virtue of applicable laws and regulations pertaining to personal data protection, particularly concerning the security of your data or the exercise of your rights, you may make a complaint to the local control authority (for France: CNIL, 3 place de Fontenoy 75007 Paris, https://www.cnil.fr).
II/ Cookie management policy
Does PETZL deposit cookies when I visit the website?
The Website uses cookies. Cookies are small computer files, or trackers, that are installed on your device (computer or mobile) and which make it easier to browse our Website, notably by storing preferences and user names, and by proposing personalised content.
Cookies are not malware files. These cookies do not damage or endanger your terminal. They do not download any viruses or malware, they do not run any software or programs and they do not make it possible to spy on the activities of your device.
How can I manage my consent to use cookies?
Some cookies require consent. Once these cookies have been accepted, your preferences are saved for your future visits on our Website, until you delete them from your device, or until their date of expiry as defined by national legislation and European Union regulations.
You can manage cookies concerning the Website at any time via the relevant link at the bottom of the page on the Website.
You can refuse the use of all cookies (including those required for the Website to work) by going to your browser settings, to the cookie management tab. Note, however, that deleting cookies may prevent access to certain parts of the Website or the provision of certain services during your visit.
Does PETZL process personal data collected via cookies?
The personal data obtained automatically through browsing on the Website, particularly the IP address of your device, and/or by computer files stored on your device, called "cookies", is used in compliance with the stipulations below.
The cookies used on our Website fall into several categories.
"Strictly necessary" cookies
These activate the essential functions, without which the Website cannot work. They do not collect personal data and cannot be disabled.
This category consists of the following groups of cookies:
- "Host" cookies: these provide the connection between the Website and the servers that host it. They are essential and necessary for the Website to work.
- Cookies related to e-commerce on the Website: they memorise the content of your basket and keep you informed of the availability of our products that interest you.
- "User Experience" cookies: these cookies offer a personalised experience of your visit to the Website. They record your preferences, notably in terms of Website language, location, product universes that you visit, mobile or computer version display on mobile devices.
"Functionality" cookies
They offer advanced functionalities to improve browsing on the Website. They do not collect personal data, except for your IP address, and can be disabled if you wish.
This category consists of the following groups of cookies:
- Video player cookies (such as YouTube, Vimeo, Dailymotion): Video player cookies allow you to view videos shared on YouTube, Vimeo or Dailymotion platforms on the Website. By watching these videos, you receive cookies from these platforms.
- Google Maps cookies: they allow you to easily search PETZL retailers and distributors in the world and to use geo-location to display the retailers and distributors nearest to you.
Cookies "for targeted advertising"
They are put on our Website by our advertising partners. They can be used by these companies to draw up a profile of your interests and propose relevant advertisements on other websites. They do not directly store your personal data, but are based on the unique identity of your browser and your Internet device.
This category consists of the following groups of cookies:
- Social media cookies (such as LinkedIn, Facebook or Twitter): these cookies make it possible to show you relevant advertisements, both on the website of these social media and outside of these sites (advertiser's website, for example).
- Google Tag Manager cookies: they measure user traffic and behaviour, and make it possible to understand the impact of on-line and social media advertising. In concrete terms, these cookies allow us to offer increasingly personalised content based on the elements in which you are interested.
"Statistics" or "performance" cookies
These cookies allow us to determine the number of visits and sources of traffic in order to measure and improve our Website's performances. They help us identify which pages are the least visited and to assess how visitors browse the Website. All information collected by these cookies is aggregated and therefore made anonymous.
These cookies consist of Google AnalyticsTM cookies. These cookies are a tool for analysing and measuring the Website's audience and make it possible to analyse use of the Website and to draw up statistics (distinction between different user sessions, particularly new visits).
Data collected by Google AnalyticsTM is transferred to Google and stored on servers based in the United States, to then be analysed to measure use of the Website, create reports and possibly provide services related to the Website's activity.
The way Google processes this data is detailed in its privacy policy, accessible via this link: https://www.google.com/intl/fr/policies/privacy/.