This privacy policy explains our policies and practices regarding how we collect, use, and disclose personal data that we collect on our digital platforms, in our showrooms, or during our events. We recommend that you read this Privacy Policy carefully as it contains important information about your personal data. Feel free to contact us if you have any questions or comments about this Privacy Policy, under the "Contact Us" section.

The terms “Biobject,” “we,” “our,” and “us” refer to Biobject France SAS and/or its commercial agents as the data controllers of your personal data, unless otherwise stated in this Privacy Policy. Biobject is a SAS with a capital of €56,000, with its registered office at 6 rue Mercoeur, 75011 PARIS, registered with the Paris Trade and Companies Register under number 702 008 350. You can find our contact details in the "Contact" section.

  1. Personal data we collect

Personal data refers to information related to an identified or identifiable natural person. This includes, for example, a person’s name, address, and gender. We may collect personal data directly from you or indirectly. You may provide personal data directly when you:

- Request an online quote;

- Use our contact form;

- Subscribe to our newsletter;

- Use our digital platforms;

- Visit our showrooms;

- Participate in one of our events.

Depending on what you provide to us, such information may include:

- your identity (including your first and last name, gender, image);

- your contact details (including postal address, email, phone numbers);

- your personal status (including your title of courtesy);

- your purchases and (including purchase history, order details);

- your preference list;

- certain payment data (including billing data, type or means of payment, credit or debit card number);

- other information you may provide by filling in forms or contacting us (including your comments or other communications with us).

We will inform you when your information is necessary to process your request, respond to your inquiries, or provide you with our products and services. If you do not provide such information, this may delay or prevent the processing of your request, answering your questions, and the delivery of products or services.

We strive to ensure that the personal data we hold is accurate at all times. We therefore encourage you to keep your data up to date if any changes occur. We may also ask you to update your data from time to time.

We advise you to only provide the data requested or necessary for your request, excluding sensitive data related to race, ethnic origin, political opinions, religious or philosophical beliefs, and data concerning health, sex life, or sexual orientation.

Please note that we do not provide our products or services directly to individuals under the age of 18 and we do not collect personal data from such individuals. We therefore ask you not to provide us with any personal data of individuals under the age of 18. If we learn that a minor has submitted information to us via our media or otherwise, we will delete that information.

We may collect data indirectly when you use our digital platforms, including your IP address or other browsing data (including browser, operating system, device model), through cookies or similar technologies placed on your device. Some cookies are necessary for the proper functioning of our digital platforms and others are used for analytical purposes that help us provide you with more personalized services and a better digital experience. For more information about cookies and how to change your preferences, please read our “Cookie Policy.” We may also collect data about you from third parties, to invite you to events that may interest you.

If you provide us with personal data about someone else, you must ensure that you have the right to disclose that data to us and that, without us needing to take further actions required by data protection law, we may collect, use, and disclose such data for the purposes described in this Privacy Policy. For example, you must ensure that the individual has been made aware of the various matters set out in this Privacy Policy. The person must also give the consents set out in this Privacy Policy regarding how we handle their personal data.

  1. Legal bases for collecting your personal data
  • We have obtained your consent. Please note that with this specific legal basis, you have the right to withdraw your consent at any time (see below “Your rights regarding your personal data”);
  • We have a legitimate interest in processing and that legitimate interest is not overridden by your interests, fundamental rights, or freedoms (e.g., prevention of payment fraud);
  • We need to process your personal data to comply with applicable laws and regulations;
  • The processing is necessary in connection with a contract between Biobject SAS and you;
  1. Use of your personal data for
  • providing you with the products or services you have requested;
  • performing checks to identify you and verify your identity;
  • sending you marketing communications, with your prior consent (see the “Marketing Communications” section);
  • providing you with after-sales service;
  • responding to your questions, requests, and suggestions;
  • managing events you have signed up for and/or participated in;
  • detecting any fraudulent or illegal activity, including securing your transactions by detecting and preventing fraud against you and Biobject SAS;
  • protecting you, employees, and others in our showrooms as well as our property;
  • managing the stock of certain types of rare products to enable fair distribution of the products we sell;
  • monitoring and improving our digital platforms;
  • conducting statistical analyses;
  • improving our products and services;
  • providing information to regulatory bodies as required by law.
  1. Marketing communications (newsletters, invitations, etc.)

With your prior consent, you may receive information about offers, products, services, or events sent by Biobject SAS.

We rely on your consent to process the personal data you provide us for this purpose. Therefore, if you no longer wish to receive such information, you may withdraw your consent at any time (see below “Your rights regarding your personal data”).

We may ask you to confirm or update your preferences if you request additional products and/or services from us in the future, or if there are changes in the law, regulations, or the structure of our business.

  1. Retention of your personal data

Your personal data is processed for the period necessary for the purposes for which it was collected, to comply with legal and regulatory obligations, and for the duration of any period required to establish, exercise, or defend legal rights.

To determine the most appropriate retention periods for your personal data, we specifically considered the quantity, nature, and sensitivity of your personal data, the reasons we collected your personal data, the level of service you expect from us, and the applicable legal requirements. For example:

- Regarding our prospects: your data is retained for three years from your last action, then deleted or archived in order to comply with legal retention obligations;

- Regarding our clients: your data is retained for the entire duration of our business relationship and up to ten years, then deleted or archived in order to comply with legal retention obligations;

- Regarding cookies used on digital platforms: they are stored for up to 13 months from when they were installed on your device.

  1. Disclosure of your personal data

We disclose your personal data to Biobject employees or our commercial agents who need access to your personal data and are authorized to process it for the aforementioned purposes and who agree to maintain its confidentiality. We may disclose your personal data to Biobject’s subsidiaries or agents, responsible for customer relations, retail, e-commerce, communication, internal audit, and IT management for the purposes stated in this Privacy Policy and to provide you with a consistent level of service. This may include providing you with the products and services you have requested, improving the provided services, and, with your consent, sending you marketing communications regarding offers, services, products, or events (you may revoke your consent at any time — see “Your rights regarding your personal data” below).

As part of combating payment fraud, your personal data is used to process your order and prevent attempts at online payment fraud. As part of our legitimate interest in fighting payment fraud, Biobject may transmit your financial data to a third-party provider with a fraud detection tool to authenticate a payment. That service provider is bound by a confidentiality obligation.

  1. Transfer of your personal data

Some personal data may be transferred outside the country where you are located. This includes transfers to countries outside the European Union (“EU”) and to countries whose laws do not provide adequate protection for personal data according to the European Commission.

We may also disclose personal data to third parties acting on behalf of and authorized by Biobject. All such processing is based on our prior instructions defined in a binding contract that complies with applicable legal requirements. Such disclosures are made for various reasons, including:

  • IT development and support;
  • Hosting and conducting marketing studies, economic studies, and marketing campaigns;
  • Verification of your information, payment authentication, and processing of orders and payments to third parties providing credit reports, payment services, or order fulfillment services;
  • Delivery services;

These providers are bound by confidentiality and are not authorized to use your personal data for any other purposes. We also require them to implement appropriate security measures to protect your personal data. Some of these providers are located outside your country, and specifically outside the EU. We have taken steps to ensure that all personal data is adequately protected and that all transfers of personal data, including outside the EU, are carried out legally. When we transfer personal data outside the EU to a country not deemed by the European Commission to offer an adequate level of protection for personal data, the transfers will be made under an agreement covering the obligations imposed by the EU for the transfer of personal data outside the EU, including standard contractual clauses approved by the European Commission, or under other appropriate safeguards, including the EU-U.S. Privacy Shield for transfers to the United States.

To obtain a description of appropriate safeguards, you may submit a request using the contact information in the “Contact” section.

We may be required by mandatory provisions of applicable law or in the context of legal proceedings or other legal requests, to disclose your personal data to authorities or third parties.

We may also disclose or process your personal data in accordance with applicable law to protect our legitimate interests (e.g., in the context of civil or criminal proceedings). For example, we may disclose such data as necessary to identify, contact, or bring legal action against an individual or entity that violates our Terms of Sale and Use or disrupts other users of our digital platforms or causes them harm.

In the event of an acquisition of Biobject by a third party, or all or part of its assets, your personal data may be included in the transferred assets.