Privacy Policy

Protecting your privacy is important, and it is essential that you are informed about how we collect, store, use, and process the personal data and information you provide to us.

This Privacy Policy covers the collection of personal data both online and offline, including personal data we may collect through various channels such as this website (the “Site”), other websites of the Etienne Lacroix Group, social media, client interactions, and events (trade shows, etc.). Third-party websites or applications accessible through the Site are not covered by this Policy. Personal data refers to information that can identify you personally, either alone or in combination with other information we hold.

We strive to be as clear as possible. However, if you are not familiar with terms such as “cookies,” “IP addresses,” or “browsers,” please seek clarification beforehand.

By using this Site, you accept the practices described in this Policy (including the cookie management policy available on this Site). If you do not accept this Policy, please do not use the Site.

What personal information do we collect?

Personal information includes any information that allows us to identify you.

We may ask you to provide your first and last name, addresses, telephone numbers, email, geographic location, and, when interacting in a professional context, certain information about your company, position, or any other information you voluntarily provide, including through our contact form. When your personal data is required, you will be informed whether it is mandatory or optional, indicated by an asterisk (*).

These details may be stored in our administrative and contact databases depending on the work we have done or are performing with you, or because you wish to receive documentation regarding our company and services. This enables us to manage our relationship with you effectively and to improve our Site. Our databases are hosted in France and Spain. Accounts are hosted by the service providers associated with them.

In addition to the personal data mentioned above, the Site automatically records connection information provided by the browser used to access the Site (Internet Explorer, etc.). This includes data regarding the visitor's IP address, pages viewed from that address, and the last website visited before arriving at the Site. European jurisdictions consider IP addresses as personal information; however, we inform you that none of this browsing data is used by us to directly or indirectly identify the user accessing the Site. Browsing data is anonymized and used to identify potential server issues, administer the Site, and gather general demographic data to make the Site more useful and engaging for our visitors.

Cookies

A cookie is a small data file that websites store on a visitor’s hard drive when they visit a site. Cookies contain information that may allow a site to recognize a visitor whenever they return. Data is encrypted for security.

We use cookies to measure activity and traffic on the Site and to collect information to continually improve the Site experience and support certain features. For example, we may use these technologies to understand how visitors interact with the Site—pages visited, links used, and time spent on each page.

Generally, the information collected via cookies does not directly identify you. If you do not wish to receive cookies, you can configure your browser to reject cookies or notify you when cookies are placed on your computer. You may also delete our cookies when you leave the Site.

For more information, please refer to the “SERVICE MANAGEMENT” section.

How we use the data we collect

In general, we use personal information for the following purposes:

• To improve the content, functionality, and usability of our Site, platforms, or applications;
• To enhance our products and services;
• To improve our marketing and promotional activities (statistical studies);
• To respond to questions about our activities and products (customer service);
• To provide offered services (training, recruitment, database access);
• For other legitimate business purposes;
• To protect against threats or other security risks.

Legal basis for collecting data

We process personal data based on the following legal grounds:

When you enter into a contract with our company, the purposes for processing your personal data are primarily determined by the contract, and we process your data to provide the associated products or services.

When you have given your consent for us to process your personal data for certain services, you may withdraw your consent at any time by following the instructions provided during the application process or by contacting us at dpo@etienne-lacroix.com .

We may process your personal data without your consent if necessary for our legitimate interests. Examples include:

• Site analysis and optimization;
• IT security and operations of the Etienne Lacroix Group;
• Prevention and investigation of criminal acts;
• Compliance with legal obligations or in the public interest.

Who we share your data with

We may disclose personal data to any entity within the Etienne Lacroix Group and, where necessary, to third-party companies providing services to perform certain tasks related to the purposes described above. Third-party providers are contractually obligated to use personal data solely to provide such services.

Data will not be sold, rented, or shared with other third parties except to judicial or administrative authorities when required by law or security considerations.

By submitting your personal data via this Site, you consent to the collection, use, and transfer of your data within or to France, the UAE (Dubai), or any other country offering equivalent security guarantees.

If you do not want us to share your personal data outside our company, you may withdraw your consent at any time by emailing dpo@etienne-lacroix.com or by postal mail to:

Data Protection Officer, Etienne Lacroix,
6 Boulevard de Joffrery, 31605 MURET CS 30213, France

International data transfers

Given the international scope of the Etienne Lacroix Group, personal data transfers outside your country or the European Economic Area (EEA) may occur, including to the UAE. In such cases, we ensure the security and confidentiality of your data via Standard Contractual Clauses established by the European Commission or transfers to countries deemed adequate by the European Commission.

Direct marketing

Before using your personal data for direct marketing (or allowing affiliates to do so), you will be given the opportunity to choose whether your data may be used for this purpose. No direct marketing will occur without prior consent.

To unsubscribe from our marketing communications, email dpo@etienne-lacroix.com or mail the above postal address. Include your full name, address, and email so we can identify you in our lists.

Children and privacy

This Site is not directed to children (unemancipated minors) and does not knowingly collect information from them without parental or legal guardian consent. If you are a minor, do not provide personal data. If we learn that a minor has provided personal data, we will take reasonable steps to delete such data.

Your rights

You may exercise your right to access, rectify, delete, limit, or port your data at any time via postal mail or email to the addresses above. Requests must be signed and accompanied by a copy of an ID. Withdrawal of consent may prevent us from providing certain services.

We will respond within one month of receipt of your request; this may be extended to two months for complex cases, with notification of the reason for delay. No fees are required unless requests are manifestly unfounded or excessive.

You also have the right to contact supervisory authorities:

• France: CNIL
• Spain: AEPD

Data retention

Personal data is retained only as long as necessary for the purposes described above and in accordance with legal and regulatory obligations.

Data protection measures

We take all appropriate precautions to protect the security and confidentiality of personal data, preventing unauthorized access, alteration, or disclosure. Measures include access controls, authentication, logging of system actions, and reporting of incidents affecting your data.

Links to other websites

This Site may contain links to other websites operated by third-party companies. This Privacy Policy only applies to data processed by Etienne Lacroix Group entities, except for Pelipackaging, which has separate policies. Please review privacy policies on any linked sites.

Governing law

This Policy is governed by French law and complies with local regulations applicable in the UAE (Dubai) regarding data collection and processing.