Home / Privacy policy

Privacy policy

SPCV takes the protection of your personal data seriously. In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, this policy explains how we process the data collected on this website.

1. Data controller

SPCV, a Borflex Group company, [registered office address], contact@borflex-group.com.

2. Data protection officer

The Borflex Group has appointed a data protection officer (DPO), who can be contacted at: [DPO email address] or by post at [DPO postal address].

3. Data processed, purposes and legal bases

Contact form

When you use the contact form, we process your name, your company name, your email address, your phone number (optional) and the content of your message. Fields marked with an asterisk are mandatory: without them, we cannot answer your request.

This data is used solely to answer your request and, where applicable, to follow up on any resulting business relationship. Legal basis: our legitimate interest in answering the enquiries we receive (Article 6(1)(f) GDPR) and, for a quotation request, steps taken at your request prior to entering into a contract (Article 6(1)(b)).

Messages sent through the form are not stored on the website: they are forwarded by email to the relevant teams.

Emails and calls

If you contact us directly by email or phone, the information you provide is processed under the same conditions.

Technical logs

Like any website, our server records technical connection data (IP address, date and time, page viewed, browser type). This data is used to keep the website secure and working properly, on the basis of our legitimate interest, and is kept for [no more than 12 months — to be confirmed with the hosting provider].

4. Recipients

Your data is intended for SPCV’s sales and technical teams and, where your request requires it, for other Borflex Group companies. It may be processed by technical service providers acting on our behalf under a contract that complies with Article 28 GDPR: [website hosting provider], [email service provider]. It is never sold or transferred to third parties.

5. Retention period

  • Contact requests with no business follow-up: 3 years from the last exchange.
  • Customers: for the duration of the business relationship, then for the periods required by law (in particular accounting and tax obligations).
  • Technical logs: see above.

6. Transfers outside the European Union

[To be completed depending on the selected providers: either “Your data is hosted and processed within the European Union”, or the list of transfers and the safeguards applied (European Commission standard contractual clauses, Data Privacy Framework).]

7. Cookies and trackers

This website uses no audience measurement, advertising or social media cookies, and sets no tracker that requires your consent: no cookie banner is therefore needed. Only strictly necessary cookies are set when an administrator logs in to the website’s management area.

Fonts and all website resources are hosted on our own servers: no data is sent to third-party services when you visit. Links to our LinkedIn, Facebook, YouTube and X pages are plain links: these platforms only receive information if you click on them.

8. Your rights

You have the right to access, rectify, erase, restrict and port your data, and the right to object to its processing, in particular for marketing purposes. You may also give instructions regarding what happens to your data after your death.

To exercise these rights, write to the data protection officer at the address above. If there is reasonable doubt about your identity, we may ask for proof of identity. If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the supervisory authority of your country.

9. Security

We implement appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), regular security updates, backups, and access restricted to authorised staff only.

10. Changes to this policy

This policy may change, in particular if we change provider or add a new feature to the website. Last updated: [publication date].