This privacy policy explains our policies and practices regarding how we collect, use, and disclose personal data that we collect on our digital platforms, in our showrooms, or during our events. We encourage you to read this Privacy Policy carefully as it contains important information about your personal data. Please feel free to contact us if you have any questions or comments regarding this Privacy Policy, under the "Contact Us" section.

The terms “Biobject”, “we”, “our” and “us” refer to Biobject France SAS and/or its sales agents as data controllers of your personal data, unless otherwise stated in this Privacy Policy. The company Biobject is a SAS with a capital of 56,000 euros, whose registered office is at 6 rue Mercoeur, 75011 PARIS, registered with the Paris Trade and Companies Register under number 702 008 350. You will find our contact details in the “Contact” section.

1. Personal data we collect

Personal data refers to information relating to an identified or identifiable individual. This includes, for example, a person’s name, address, and gender. We may collect personal data directly from you or indirectly. You may provide data directly when you:

- Request an online quote;

- Use our contact form

- Subscribe to our newsletter;

- Use our digital platforms;

- Visit our showrooms;

- Participate in one of our events.

Depending on what you provide, such information may include:

- your identity (including your first name, last name, gender, image);

- your contact details (including postal address, email, phone numbers);

- your personal status (including title of courtesy);

- your purchases (including order history, order details);

- your preference list;

- certain payment data (including billing data, payment type or method, credit or debit card number);

- other information you may provide by filling out forms or contacting us (including your comments or other communications with us).

We will inform you when your information is necessary to process your request, answer your inquiries, or provide you with our products and services. If you do not provide this information, it may delay or make it impossible to process your request, answer your questions, and provide products or services.

We strive to ensure that the personal data we hold is accurate at all times. We therefore encourage you to update your data if any changes occur. We may also ask you to update your data from time to time.

We recommend that you only provide the data requested or necessary for your inquiry, excluding sensitive data relating to race, ethnic origin, political opinions, religious or philosophical beliefs, and data concerning health, sex life, or sexual orientation.

We remind you that we do not provide our products or services directly to individuals under the age of 18 and do not collect personal data from such individuals. We therefore ask you not to provide us with personal data from people under the age of 18. If we learn that a minor has submitted information to us through our media or otherwise, we will delete that information.

We may collect data indirectly when you use our digital platforms, including your IP address or other browsing data (including browser, operating system, device model), through cookies or similar technologies placed on your device. Some cookies are necessary for the proper functioning of our digital platforms, and others are used for analytical purposes to help us provide you with more personalized services and a better digital experience. For more information about cookies and how to modify your preferences, please read our “Cookie Policy”. We may also collect data about you from third parties to invite you to events that may be of interest to you.

If you provide us with personal data about someone else, you must ensure that you have the right to disclose such data to us and that, without us having to take further steps required by data protection laws, we may collect, use, and disclose such data for the purposes described in this Privacy Policy. For example, you must ensure that the individual is aware of the various matters detailed in this Privacy Policy. That individual must also give the consents set out in this Privacy Policy regarding how we handle their personal data.

2. Legal grounds for collecting your personal data

• We have obtained your consent. Please note that with this specific legal basis, you have the right to withdraw your consent at any time (see below “Your rights regarding your personal data”);
• We have a legitimate interest in carrying out the processing and this legitimate interest is not overridden by your own interests, fundamental rights, or freedoms (e.g., fraud prevention in payment methods);
• We must process your personal data to comply with applicable laws and regulations;
• The processing is necessary in the context of a contract between Biobject SAS and you;

3. Use of your personal data for

• providing you with the products or services you have requested;
• carrying out checks to identify and verify your identity;
• sending you marketing communications, with your prior consent (see “Marketing Communications” section);
• providing you with after-sales service;
• responding to your questions, requests, and suggestions;
• managing events to which you have registered and/or participated;
• detecting any fraudulent or illegal activity, including securing your transactions by detecting and preventing fraud against yourself and Biobject SAS;
• protecting you, employees, and others in our showrooms as well as our property;
• managing the stock of certain types of rare products in order to ensure a fair distribution of the products we sell;
• monitoring and improving our digital platforms;
• performing statistical analyses;
• improving our products and services;
• providing information to regulatory authorities when required by law.

4. Marketing communications (newsletters, invitations, etc.)

With your prior consent, you may receive information about offers, products, services, or events sent by Biobject SAS.

We rely on your consent to process the personal data you provide for this purpose. Therefore, if you no longer wish to receive such information, you may withdraw your consent at any time (see below “Your rights regarding your personal data”).

We may ask you to confirm or update your preferences if you request other products and/or services from us in the future or if there are changes in the law, regulation, or structure of our company.

5. Retention period of your personal data

Your personal data is processed for the time necessary for the purposes for which it was collected, to comply with legal and regulatory obligations, and for any period required for the establishment, exercise, or defense of legal claims.

To determine the most appropriate retention periods for your personal data, we have considered the amount, nature, and sensitivity of your personal data, the reasons why we collected your personal data, the level of service you expect from us, and all applicable legal requirements. For example:

- For our prospects: your data is kept for three years from your last action, then deleted or archived to comply with legal retention obligations;

- For our clients: your data is retained throughout our business relationship and up to ten years afterward, then deleted or archived to comply with legal retention obligations;

- For cookies used on digital platforms: they are stored for up to 13 months from when they are installed on your device.

6. How we disclose your personal data

We disclose your personal data to Biobject employees or our sales agents who need access to your personal data and are authorized to process it for the purposes mentioned above and who are committed to maintaining confidentiality. We may disclose your personal data to Biobject subsidiaries or agents responsible for customer relations, retail, e-commerce, communications, internal audit, and IT management for the purposes stated in this Privacy Policy and to provide you with a uniform level of service. This may include providing the products and services you have requested, improving the services provided and, with your consent, sending you marketing communications about offers, services, products, or events (for this purpose, you may withdraw your consent at any time. See the section “Your rights regarding your personal data” below).

In the context of fighting payment fraud, your personal data is used to process your order and combat attempts at online fraud. As part of our legitimate interest in combating payment fraud, Biobject may transmit your financial data to an external service provider using a fraud detection tool to authenticate a payment. This service provider is bound by confidentiality obligations.