Legal conditions

Last updated: 4 September 2026

Legal notice
Personal data protection policy

Legal notice

Publisher

Website created by StemInov
2 avenue de la Forêt de Haye, 54500 Vandœuvre-lès-Nancy, France
Siret: 845 327 352 00017
VAT number: FR03845327352

Hosting

Site hosted by OVH
2 rue Kellermann, 59100 Roubaix, France
Siret: 424 761 419 00045

Intellectual property

This entire site is subject to French and international legislation on copyright and intellectual property. All reproduction rights are reserved for the texts and photographs on this site. The reproduction of all or part of this site on any electronic or other medium whatsoever is strictly forbidden without the written authorization of the author, in accordance with Article L 122-4 of the Intellectual Property Code.

Photos: all rights reserved.
Design and production: StemInov.

Hypertext links

The hypertext links set up within the framework of this website to other resources present on the Internet, and in particular to its partners, have been the subject of prior, express and written authorisation from the publisher.

Right of reply

Any person named on the site may assert a right of reply. A simple request will be sent by post.

Privacy

Under no circumstances will the data collected on the https://www.steminov.com site be transferred or sold to third parties. No email address will be transmitted to third parties, including our partners, except with the written consent of the interested parties.

Personal data protection policy

Preamble

As part of its activities, StemInov (whose registered office is at 2 avenue de la Forêt de Haye, 54500 Vandœuvre-lès-Nancy, registered under number 845 327 352 00017) is required to collect and process personal data concerning you.

The processing of personal data is governed by:

French Law No. 78-17 of 6 January 1978 relating to information technology, files and civil liberties (hereinafter the « French Data Protection Act »);
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, which entered into force on 25 May 2018 (hereinafter « GDPR »).

StemInov is committed to protecting your privacy and personal information by complying with the legislation in force. This Policy informs you of our data handling practices and how your personal information is protected.

Definitions

Personal data: any information that directly or indirectly identifies a natural person. Examples: name, registration number, telephone number, photograph, date of birth, municipality of residence, fingerprint, etc.
Processing: refers to any operation or set of operations applied to your personal data.
Data controller: refers to the entity that determines the means and purposes of the processing of personal data.
Processor: any person processing personal data on behalf of the data controller.
Terminal: refers to all electronic devices that allow the exchange and processing of data (touch tablets, mobile phones, computers, etc.).

Identity of the data controller

Your personal data is collected and processed by the company StemInov.

1. What categories of personal data may be collected and processed?

StemInov may collect and process several types of personal data:

Identification data: title; surname; first names; date of birth; email; telephone number (landline and/or mobile); fax number; address; internal processing code allowing the identification of the customer; business; SIREN number; and, where applicable, a copy of the identity card, for the purpose of proving the exercise of a right of access, rectification or opposition or to meet a legal obligation.
Data relating to the means of payment: postal or bank account details; cheque number.
Data relating to the transaction: such as transaction number, details of the purchase, the goods or services subscribed to.
Data relating to the monitoring of the commercial relationship: requests for documentation, test requests, product purchased, quantity, amount, frequency, delivery address, purchase history, return of products, correspondence with the customer and after-sales service, exchanges and comments from customers and prospects, person(s) in charge of customer relations.
Data relating to the payment of invoices: payment methods, discounts granted, receipts, balances and unpaid debts that do not result in the exclusion of the person from the benefit of a right, service or contract. Where applicable, information relating to the loans taken out (amount and duration, name of the lending institution) may also be processed by the merchant in the event of financing of the order by credit.
Data necessary to carry out loyalty, prospecting, study, survey, product testing and promotional actions.
Data relating to professional life such as training and professional experience, CV and cover letter and any information that the candidate wishes to send us in this context.
Data relating to the organisation and processing of competitions, lotteries and any promotional operation such as the date of participation, the responses given to the competitions and the nature of the prizes offered.
Data relating to the contributions of people who leave reviews of products, services or content, in particular their pseudonym.
Connection data: IP addresses, cookies, trackers (date/time/duration of visit to our website, pages viewed), device identifiers, browser type.

When you are asked for personal data, you can refuse to provide it. However, if you choose to do so, we may not be able to provide you with the relevant product or service.

Please note that we may also market third-party connected products and we invite you to read their personal data protection policies that apply to you.

2. How do we collect your personal data?

Your personal data is collected only directly from you when:

visiting our website, as soon as you accept web browsing cookies (for more information, see Article 7 of our policy);
filling in forms, for example contact and application forms;
the purchase and supply of our products;
the administrative and financial management of customer relations;
our oral and written correspondence: the content of your messages, emails, letters or telephone calls;
the sending of commercial offers, satisfaction surveys, prospecting and/or newsletters, or when participating in a competition if applicable.

When it is necessary by law, StemInov undertakes, as the case may be, to obtain your consent and/or to allow you to object to the use of your data for certain purposes.

StemInov can send commercial solicitations to individuals. If people subsequently no longer wish to receive such solicitations by e-mail, people can send an e-mail at any time free of charge and without providing any further reason via the contact form on our website.

3. What are the purposes of the processing of your personal data?

Your various data may be collected by StemInov for explicit, legitimate and specific purposes in order to ensure:

customer relationship management: contracts, orders, deliveries, invoices, accounting and in particular the management of customer accounts, a loyalty program, customer relationship monitoring such as carrying out satisfaction surveys, complaint management and after-sales service if applicable, credit management;
management of unpaid invoices and litigation;
improving our product and service offering: surveys, analysis and business statistics where applicable;
the proper functioning and continuous improvement of our website;
operations relating to prospecting;
the updating of its prospecting files by the body in charge of managing the list of opposition to telephone canvassing, in accordance with the provisions of the Consumer Code;
application management;
the organisation of competitions, lotteries or any promotional operation, if applicable;
the management of requests for the right of access, rectification and opposition, erasure, limitation, portability;
legal obligations to which we are subject in general, for example accounting and tax obligations.

In any case, and for each defined purpose, StemInov will use all the means in its possession to ensure the security and confidentiality of the personal data entrusted to us, in compliance with the laws and regulations in force.

4. What is the legal basis for processing your personal data?

Depending on the case, StemInov processes your personal data on the following legal bases:

the processing is necessary for the performance of a contract to which you are a party or for the execution of your request (in particular when making contact);
the processing meets the legitimate interests pursued by StemInov (e.g. fraud prevention);
in some cases, we need to keep your data, as we are required to do so by law (e.g. to ensure security in general, for tax reasons, etc.);
and if required, based on your consent.

5. To whom is personal data transferred?

The authorised persons of our company are recipients of your data.

We may also share your personal data with partners and/or subcontractors for any of the purposes listed above. Our contractors and partners must comply with our privacy and security policies, and are not allowed to use it for any other purpose.

The body in charge of managing the list of opposition to telephone canvassing may also be the recipient of personal data.

In addition, we may disclose your personal data to the following persons:

to the judicial, police or administrative authorities legally entitled to hear them;
to parties involved in legal proceedings to defend us or exercise our rights.

We will not sell or rent your personal information to any third party without your permission.

6. How long is personal data stored?

StemInov undertakes to ensure that the data collected is kept for a period that does not exceed the time necessary for the purposes for which this data is collected and processed.

Personal data may be retained to comply with contractual and legal obligations. The natural person is also informed that StemInov will retain the data transmitted in accordance with the criteria and recommendations of the CNIL available in its reference standard: simplified standard n°48.

Customers: data is kept for the duration of the commercial relationship and may be kept for commercial prospecting purposes for a maximum of 3 years from the end of the commercial relationship. Beyond that, the data is archived for the period in which our company’s liability may be called into question.
Prospects: personal data relating to a non-customer prospect is kept for a period of 3 years from its collection or the last contact from the prospect.
Applications: kept for the duration of their review and the recruitment process for the position concerned. In the event of a negative outcome to an application, StemInov will keep the candidate’s file with its agreement. The latter has the option of requesting its destruction in accordance with the procedures defined in Article 11 below. If a candidate does not request the destruction of his or her file, the data will be automatically destroyed 2 years after the last contact. Only the formal agreement of the candidate will allow a longer retention.
Requests to exercise your rights: your data is kept for a maximum of 1 year. In the event that a copy of an identity document is provided to prove your identity, we will keep it for one (1) year, or three (3) years when this communication is made in the context of exercising a right to object.
Objection to direct marketing: when a person exercises his or her right to object to receiving direct marketing, the information allowing his or her right to object to be taken into account will be kept for three years from the exercise of the right to object.
Cookies: the information stored in the users’ terminal (cookies) or any other element used to identify users and allow the traceability of users is kept for a maximum of 13 months.

7. Cookies

This section allows you to better understand how cookies work and how to use current tools to configure them.

7.1 – What is a cookie?

A cookie is a small computer data file, also known as a tracker, that is transmitted from a website to the hard drive of your computer, tablet or mobile phone. It is saved in your browser while you are browsing a website. Its purpose is to facilitate your browsing and to offer you personalised services by collecting information as you visit this site, and to do so during the period of validity of the cookie.

Cookies that are stored by a website or by third parties when you visit a website do not recognise you personally as an individual; they only recognise the device you are using. Cookies do not cause any damage to your device of any kind, but they do allow you to benefit from certain features of a website. They also help the publisher keep the website secure, remember your preferences, and personalise content.

7.2 – The different categories of cookies used on our site

The types of cookies we use may be:

Session or persistent cookies: session cookies only persist during the browsing session, they are deleted when you close your browser. Persistent cookies are installed for a fixed period of time.
First-party or third-party cookies.

Third-party statistics cookies (performance analysis, audience measurement). These cookies are used to anonymously distinguish users and make it possible to establish statistics and volumes of traffic and use of the various elements that make up our site (number of pages viewed, number of visits, activity, frequency of returns, etc.).

List of statistical cookies (name — retention period — description and categories of data collected):

_ga – expires after 24 months – Google Analytics is a Google web analytics tool that allows website and app owners to better understand their users’ behaviour. This tool uses cookies to collect information and generate reports on traffic (number of visits, time spent on the site, average number of page views, device and browser used, geographical location), traffic origin (sources and campaigns that led to visits) and navigation (pages viewed, actions taken).
_gid – expires after 1 day.
_gat – expires after 1 day.

Third-party marketing cookies, to improve the interactivity of the site. These cookies are used to track visitors across websites. Our site relies on certain services offered by third-party sites. These include LinkedIn share buttons. They improve the user-friendliness of the site and help promote it through sharing.

List of marketing cookies (name — provider and purpose — retention period):

JSESSIONID – cookie installed by LinkedIn. Keeps users configuring settings across page requests. Expires after the session.
bcookie – browser identification cookie installed by LinkedIn. It is used to identify the visitor and helps to strengthen interactions. For example, it allows the visitor to log in to a website through its LinkedIn app. Cookie requiring the user’s consent (13 months).
bscookie – this cookie is associated with LinkedIn. It is used to identify safe browsing and track usage of the integrated services. Cookie requiring the user’s consent (13 months).
lidc – used by the social service LinkedIn. Used for redirection from share buttons. Expires after 4166 days.
/collect – this cookie is used to send data to Google Analytics about the visitor’s device and behaviour. It tracks the visitor across marketing devices and channels. Expires after 4166 days.

7.3 – How do I accept or refuse cookies?

When you visit our site for the first time, a banner informs you of the use of cookies and offers you the option of accepting or refusing them. The banner will remain active until you indicate your choice. You can set cookies via the banner present when you first browse the site, or via your web browser.

You can choose to delete or disable cookies at any time in your browser. Each browser offers a configuration solution to inform you of the cookies that are placed on your computer and to allow you to accept or refuse them, on a case-by-case basis or systematically. The configuration of each browser is different: we invite you to refer to the help menu of your browser to configure it according to your wishes.

Managing cookies in Mozilla Firefox
Managing cookies in Google Chrome
Managing cookies in Safari

To go further, you can visit the pages of the CNIL website dedicated to cookies and the tools to control them.

8. What are the means used to secure your personal data?

StemInov and its partners/subcontractors undertake to implement all technical and organisational measures to ensure the security of the processing of personal data and the confidentiality of your data, in accordance with the Data Protection Act, the European Data Protection Regulation (GDPR) and Law No. 2018-133 of 26 February 2018 « containing various provisions for adapting to European Union law in the field of security ».

As such, StemInov takes the necessary precautions, with regard to the nature of your data and the risks presented by our processing, to preserve the security of the data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised third parties (physical protection of premises, logging of connections, encryption of certain data, etc.). We regularly review the technical and organisational measures put in place to protect our information and communication systems.

Nevertheless, the security and confidentiality of personal data depend on the best practices of each person and we invite you to be vigilant. On the other hand, StemInov does not control all the risks associated with the operation of the Internet and we draw your attention to the existence of possible risks inherent in its use and operation. We will not be liable for any damage caused by access to or use of our site, including viruses infecting your computer or other property damage.

9. Do we transfer personal data outside the EU?

StemInov undertakes not to transfer your personal data outside the European Union. In the event that StemInov were to do so, it would respect its duty to inform by indicating the measures taken to control this transfer and ensure that the confidentiality of their data is respected.

10. What are your rights?

You have the following rights:

Right of access: you have the right to know what personal data we hold about you and to request a copy of it, as well as to request information about the purpose of this processing. However, if these requests are manifestly unfounded or excessive, in particular because of their repetitive nature, StemInov is not required to respond to them.
Right to rectification: you have the right to obtain the rectification of inaccurate personal data concerning you, and in some cases the erasure or restriction of its processing.
Right to erasure: you can ask us to erase your personal data under certain conditions (in particular when it is inaccurate, incomplete, ambiguous, outdated, or the collection, use, disclosure or storage of which is prohibited).
Right to object: you have the right to object to the processing of personal data concerning you, in particular if they are used for commercial prospecting purposes.
Right to restriction of processing: you have the right to ask us to freeze the use of your data in certain cases.
Right to data portability: where applicable, you have the right to receive a copy of the personal data you have provided to us (in a machine-readable format) or to have this data transmitted to another company.
Right to withdraw your consent: you may withdraw the consent you have given for the use of your personal data at any time when this is required.
Right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) by visiting their website.
Right to determine the fate of your data after your death and to choose whether or not we communicate your data to a third party that you have previously designated. In the event of your death and in the absence of instructions from you, we undertake to destroy your data, unless its retention is necessary for evidentiary purposes or to meet a legal obligation.

11. How to exercise your rights?

These rights can be exercised, by simple request, by post:

StemInov
2 avenue de la Forêt de Haye
54500 Vandœuvre-lès-Nancy

Please indicate your contact details (surname, first name, address), specify your request, justify your identity and mention a legitimate reason when this is required by law (in particular in the event of opposition to processing).

To find out more about your rights, you can also consult the website of the Commission Nationale de l’Informatique et des Libertés at the following address: https://www.cnil.fr.

12. Use of data in the event of a change of control of the company

The personal data collected by StemInov may be transferred to third parties in the context of a change of control of the company, an acquisition, insolvency proceedings or a sale of the company’s assets.

13. Updating the Personal Data Policy

Our policy may be modified at any time, in particular to take into account the evolution of the technologies used, the release of new services and new regulations, in which case the new version will be published on our website and in store. We therefore advise you to check this page regularly for any changes.

Contents