Privacy Policy
Data Controller
The "data controller" is the person who determines the purposes and means of processing your personal data. In your case, the data collected on the website www.sfm-france.com (hereinafter referred to as the "Site"), within the framework of the contractual relationship or for commercial prospecting purposes, is processed by the company SFM, a Simplified Joint Stock Company registered with the Trade and Companies Register of Besançon under number SIREN 314 175 530, whose registered office is located at 2 Rue Gay Lussac, 25000 BESANÇON, with intra-community VAT number FR09 314 175 530.
Personal Data Collected and Their Purposes
This policy aims to describe how the company "SFM" processes your personal data within the scope of its activities.
We only use your personal data in strictly identified legal contexts and only when necessary or when you authorize us. Their retention is strictly limited to the duration required to achieve the intended purposes. However, certain data may be retained beyond this period to comply with legal obligations or to manage litigation.
Data from the "Become a Distributor" Contact Form
What data is collected?
The personal data collected when completing the contact form are: Last name, First name, Company name, Address, Email, Phone number, VAT number, Fax, and Contact profile.
For what purpose?
This data is collected to enable contact with a view to becoming a distributor. The requested information allows us to get back to you and respond to your request as effectively as possible.
On what legal basis?
The legal basis for processing your personal data is the execution of pre-contractual measures in order to become a distributor.
Customer Data
What data is collected?
The personal data collected for customers are: Last name and first name, Contact position, Postal address, Email address, VAT number, Fax, Company name, Payment method, VAT regime, IBAN, and SIREN number.
For what purpose?
This data is collected to ensure the management of the business relationship, the proper execution of orders, and customer follow-up.
On what legal basis?
The legitimacy of processing this data is based on the execution of a contract. In other words, the collection and use of this data are essential for the fulfillment of the sales contract.
Supplier Data
What data is collected?
The personal data collected for suppliers are: Company name, SIRET number, VAT number, Address, Email, Website, Contact position, Contact phone number, Contact email, and IBAN.
For what purpose?
This data is collected to ensure the management of the business relationship and supplier record tracking.
On what legal basis?
The legitimacy of processing this data is based on the execution of a contract. In other words, the collection and use of this data are essential for the fulfillment of the contract between us and the supplier.
Prospect Data
What data is collected?
The personal data collected for prospects are: Contact person's last name and first name, City, Postal code, SIREN, Company name, Amount guaranteed by COFACE, and Customer reference.
For what purpose?
This data is collected to promote products and services and to stimulate business growth. It helps identify prospects, understand their needs, and offer them suitable offers.
On what legal basis?
The legal basis for this processing is legitimate interest, subject to prior information and the possibility to exercise your right to object.
Video Surveillance Management
What data is collected?
The personal data collected for video surveillance are video images.
For what purpose?
This data is collected to ensure the security of people and property.
On what legal basis?
Video surveillance, justified by the employer's legitimate interest, ensures the security of the premises. The law allows a merchant to film the surroundings of their establishment if it is particularly exposed to risks of assault or theft, which is justified by the activity of SFM.
Accounting Management
What data is collected?
The personal data collected for accounting management are: Last name, First name, Email, Postal address, Phone number, and Payment method.
For what purpose?
This data is collected to ensure cash flow monitoring and accounting management.
On what legal basis?
The legal basis for this processing is compliance with a legal obligation. Indeed, Article 123-22 requires accounting documents and supporting documents to be kept for 10 years.
Summary Table
| Data Type | Collected Data | Purposes | Legal Basis | Partners |
|---|---|---|---|---|
| Contact form data | Last name, First name, Company name, Address, Email, Phone number, VAT number, Fax, Contact profile | To enable contact with a view to becoming a distributor | Pre-contractual measures | |
| Customer data | Last name, First name, Contact position, Postal address, Email, VAT number, Fax, Company name, Payment method, VAT regime, IBAN, SIREN number | To ensure business relationship management and proper order execution | Execution of a contract | Software provider for managing, executing, and processing the customer and supplier files. |
| Supplier data | Company name, SIRET number, VAT number, Address, Email, Website, Contact position, Contact phone number, Contact email, IBAN | To ensure management and tracking of the supplier file | Execution of a contract | Software provider for managing, executing, and processing the customer and supplier files. |
| Prospect data | Contact last name and first name, City, Postal code, SIREN, Company name | To promote products and services and stimulate business growth | Legitimate interest | Prospect database provider |
| Video surveillance management | Video images | Ensure the safety of people and property | Legitimate interest | Our security service partners. |
| Accounting management | Last name, First name, Email, Postal address, Phone number, Payment method | Ensure accounting and cash flow monitoring | Legal obligation | Software provider for accounting management. |
Cookies
A cookie is a computer file that is stored on your hard drive when you visit a website such as sfm-france.com. The cookies we use are intended to record your visit to our site.
A cookie does not allow us to identify you, except when you are logged into your customer area. For more information, visit the page dedicated to cookies.
Protection of Your Information
We ensure the security of the personal data you entrust to us by implementing technical and organizational measures in line with current standards and proportionate to the risks involved. We also ensure that the security of our information systems is adapted to prevent any destruction, loss, alteration, unauthorized access, or disclosure of your personal data.
Recipients of Your Data
The data we collect may be transmitted to various third parties for the purposes mentioned above.
Our internal services
- Customer relations staff
- Various group services (accounting, security, etc.)
Third-party partners
- Software provider for managing, executing, and processing customer and supplier files
- Software provider for accounting management
- Our security service partners
- Our partner for audience tracking, for more information see the cookies page
- Prospect database provider
Legitimate third parties
- Regulatory authorities, including customs and tax authorities
Video Surveillance
SFM implements a video surveillance system on its premises to ensure the safety of its staff and property. The recorded images are not used for employee monitoring or working hours control.
These mentions complement the video surveillance signs displayed on the premises.
The legal basis for processing is legitimate interest (see Article 6.1.f of the European Data Protection Regulation).
Staff and visitors present on our premises may be filmed.
Images are kept for 15 days and only our authorized staff and video surveillance service providers may access them, on our behalf and in accordance with our instructions. Images may also be shared with competent authorities when required by law or in case of necessity.
In case of an incident related to the safety of people and property, surveillance images may be extracted from the system. They are then kept on another medium for the duration of the procedures related to that incident and accessible only to authorized persons.
You may access your data or request its deletion. You also have the right to object and the right to restrict the processing of your data.
Your Rights and How to Exercise Them
You have several rights relating to your personal data, including:
- Right to query and access processed data
- Right to request correction of your data
- Right to request restriction of data processing
- Right to request deletion of your data or object to its processing, unless there is a legitimate reason
- Right to withdraw your consent at any time when it is the basis of processing
- Right to request portability of your data
- Right to lodge a complaint with a supervisory authority
- Right to provide instructions on the fate of your data after your death
When data processing results from a legal obligation, we will not be able to comply with your request for restriction, objection, or deletion.
If exercising one of these rights is not compatible with the service we provide, we will make our best efforts to allow you to exercise your rights differently or to offer you a modification of our services.
You can exercise your rights by writing to:
Data Protection Officer
SFM
2 rue Gay Lussac
BP1539 25009 Besançon cedex
25000 BESANÇON
Or via the following address: dpo@sfm-france.com.
Modification of the Personal Data Protection Policy
We may make changes to this personal data protection policy for transparency purposes and to adapt to possible changes in applicable regulations.