Privacy policy
This policy explains what personal data SPC collects on this website, why it is collected, how long it is kept, and how to exercise your rights. It is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and French Act no. 78-17 of 6 January 1978 as amended. This English version is provided for convenience only. In the event of any discrepancy, the French version shall prevail.
Last updated:
Data controller
The data controller is SPC GROUP, 104 rue de Lisbonne, Parc d'activités de Sermenaz, 69140 Rillieux-la-Pape, France. Any question regarding your data may be sent to spc@spc.fr.
Data collected and purposes
This website collects no personal data without your knowledge. You are never required to create an account, and browsing requires no identification. Data is collected when you voluntarily fill in a form and, only if you accept it, by the measurement tools described below and in the “Cookies and trackers” section.
Contact form — name, email address, company, telephone number, subject and message. When the request is made from a product page, the reference of the product concerned is also recorded. This data is used solely to process and answer your enquiry. Legal basis: your consent, given via the tick box on the form.
Technical documentation download — name, email address and company, together with the reference of the product concerned. This data allows us to send you the requested document and to follow up with you about that product. Legal basis: your consent.
For security purposes and to prevent abuse of these forms, we retain a non-reversible fingerprint of your IP address — never the address itself — along with your browser identifier and the page the request came from. Legal basis: our legitimate interest in protecting the service.
Audience measurement — if you accept it, Google Analytics measures traffic to the website: pages viewed, duration and origin of visits, device and browser type, approximate location. These statistics are used to improve the website. Legal basis: your consent.
Advertising campaign measurement — if you accept it, Google Ads tells SPC that a contact request followed a click on one of its ads. None of the information entered in the form is passed to Google. Legal basis: your consent.
Fonts and videos — displaying the website loads fonts from Adobe Fonts, and a product page featuring a video loads the YouTube player in privacy-enhanced mode (youtube-nocookie.com). Your browser then sends Adobe or Google the technical information needed to deliver this content, including your IP address. Playing a video is subject to Google’s privacy policy. Legal basis: our legitimate interest in presenting the website and its content.
Retention periods
- Contact and documentation requests: three years from the last exchange, in line with the CNIL recommendation on prospecting.
- Form-related security data: twelve months.
- Choice expressed in the consent banner: six months, after which you are asked again.
- Audience and advertising measurement cookies: thirteen months at most.
- Accounting and contractual records where a commercial relationship is established: the applicable statutory period, i.e. ten years.
Data recipients
Your data is intended solely for the SPC sales and technical staff who need to access it. It is neither sold, rented nor transferred to third parties for commercial purposes.
The following act as processors, on our behalf and on our instructions: our hosting provider, our database provider and our transactional email provider. Each offers the safeguards required by the GDPR.
If you consent, Google receives the audience and advertising campaign measurement data described above. Adobe, for fonts, and Google, for the YouTube player, receive the technical information needed to deliver their content.
Transfers outside the European Union
Data is hosted within the European Union. As some of our providers are established in the United States, access from a third country cannot be entirely ruled out; where this occurs it is governed by the European Commission’s standard contractual clauses or by an adequacy decision. This applies in particular to Google and Adobe, for audience measurement, advertising measurement, fonts and videos.
Cookies and trackers
On your first visit, a banner lets you accept or refuse, service by service, the trackers that require consent. Until you have made a choice, and after a refusal, none of these trackers is placed and no data is sent to Google. Refusing is as easy as accepting, and you can change your choice at any time using the “Cookie settings” link at the bottom of every page.
- Strictly necessary cookies, exempt from consent within the meaning of article 82 of the French Data Protection Act: remembering your display language, remembering your cookie choice and, in the administration area reserved for SPC staff, a session cookie.
- Audience measurement — Google Analytics (_ga and _ga_* cookies): placed only if you accept it.
- Advertising campaign measurement — Google Ads (_gcl_au cookie): placed only if you accept it.
This website places no social network trackers.
Security
Exchanges with the website are encrypted (HTTPS). Access to data is restricted to authorised personnel and protected by authentication. IP addresses are retained only as a non-reversible fingerprint.
No transmission over the Internet can be guaranteed entirely secure. In the event of a data breach likely to result in a risk to your rights and freedoms, SPC will notify the CNIL within seventy-two hours and, where the risk is high, the individuals concerned.
Your rights
You have the following rights over your data:
- right of access (article 15 GDPR)
- right to rectification (article 16)
- right to erasure (article 17)
- right to restriction of processing (article 18)
- right to data portability (article 20)
- right to object (article 21)
- right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand
- right to give instructions regarding the fate of your data after your death
To exercise these rights, write to spc@spc.fr or to SPC GROUP, 104 rue de Lisbonne, Parc d'activités de Sermenaz, 69140 Rillieux-la-Pape, France. You will receive a reply within one month. Proof of identity may be requested where there is reasonable doubt as to the identity of the requester.
You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr.
Changes
This policy may be amended to reflect legal or technical developments. The date of the most recent update appears at the top of the page.