Personal data protection policy
KEYENA may process personal data concerning users when they browse the website https://keyena.com/en (hereinafter referred to as “the Site”) or place an order online via the Site.
This Personal Data Protection Policy (hereinafter referred to as “the Policy”) informs you of how we process, protect, and share your personal data collected in the context of your use of the Site.
It also includes important information about your rights regarding your personal data.
Please read it carefully to understand how we process your personal data.
Please note that this Policy may be modified or updated at any time, particularly to comply with any changes in legislation or regulations. In such cases, the date of the latest update will be clearly indicated at the top of the Policy. These modifications are binding upon the user as soon as they are posted online. We therefore invite you to regularly review this Policy.
For more information on the protection of personal data, you may visit the CNIL (French Data Protection Authority) website: https://www.cnil.fr.
1. Who is the Data Controller?
The data controller is the entity that determines the purposes (why personal data is processed) and the means (how personal data is processed), including the collection, storage, transmission, deletion, and/or use of personal data.
KEYENA, a simplified joint-stock company with a single shareholder, with a capital of €10,600, registered with the Lyon Trade and Companies Register under number B 880 214 051, whose registered office is located at 110 rue Frédéric Fays – 69100 Villeurbanne, acts as the data controller.
Phone: +33 (0)667 047 990 : 0667047990
Hereinafter referred to as “KEYENA.”
2. What Types of Personal Data Does KEYENA Collect?
Personal data refers to any information that can directly or indirectly identify a natural person, such as name, surname, postal address, phone number, email address, or IP address.
When you use the Site, KEYENA collects and processes different types of personal data.
2.1. 2.1. Data You Provide Directly
- When you create a customer account on the Site, you provide us with:
- Your first and last name
- A valid email address
- A password
These details are mandatory. Without them, you will not be able to create a customer account.
- When you order a product from the Site, you provide us with:
- Your first and last name
- Your company name
- A billing and shipping address
- A valid email address
- A mobile phone number
These details are mandatory. Without them, you will not be able to place an order on our Site.
- When you sign up for our newsletter, you provide us with your email address.
- Data you provide when contacting KEYENA via the Site’s contact form.
- Data you provide when posting a review on the Site.
- Data you provide when contacting KEYENA by any other means.
2.2. Data We Collect During Your Use of Our Site
2.2.1. Technical Data
While using the Site, we collect technical information related to your connection and browsing, such as: your web browser, IP address, browsing history (date and time of your last visit).
Different technologies may be used to collect this data, including cookies.
For more information about cookies, please refer to our Cookie Policy, available here and on our Site under the “Cookie Policy” tab.
2.2.2. Transaction Data
When you place an order, we also collect transaction data related to the use of our delivery services, such as delivery details, and the date and time of delivery completion.
2.3. Rules Regarding Banking Data
Banking data transmitted during your purchase of Products via the Site is collected by our payment service provider STRIPE. Its privacy policy (available in English only) can be accessed here : https://stripe.com/fr/privacy.
At no point do your banking details pass through KEYENA’s IT system.
Your IP address may also be collected by [KEYENA and shared with STRIPE OR directly by STRIPE] in order to secure online payments and combat fraud.
For What Purposes Does KEYENA Process My Personal Data?
We use your personal data for the following purposes:
- To provide the products offered on the Site
- To manage your customer account on the Site
- To manage and track customer orders
- To manage billing and payment operations
- To handle your information requests
- To manage your data subject rights
- To handle customer complaints
- To strengthen and personalize communication with you, including through newsletters and marketing campaigns
- To measure customer satisfaction through reviews and improve our products and services via satisfaction surveys
- To carry out statistical studies
- To prevent fraud
- To ensure the security of the Site
- To investigate and prosecute illegal activities
- To resolve disputes
- To publish customer reviews on the Site
4. What Is the Legal Basis for Processing My Personal Data?
Legal Basis | Examples of Data Processing Activities |
|---|---|
Contract | Execution of the General Terms and Conditions of Sale (e.g. order management, billing, delivery). |
Consent :
Execution of the General Terms and Conditions of Sale (e.g. order management, billing, delivery).
| – Use of data collected via the contact form on the Site – Sending newsletters and marketing campaigns
|
Legitimate interest
| Processing is necessary for the purposes of the legitimate interests pursued by KEYENA, provided such interests are not overridden by your fundamental rights and freedoms.
Collecting IP addresses to protect against fraud and cyberattacks – Measuring customer satisfaction (e.g. reviews, surveys) – Conducting statistical studies – Handling inquiries |
5. Who Are the Recipients of Your Personal Data?
Your personal data may be processed by authorized personnel of KEYENA, its partners, or service providers. The use of these partners or service providers is necessary for the proper performance of the contract between you and KEYENA.
The following entities may have access to your personal data:
- KEYENA staff members who need access as part of their duties;
- Technical subcontractors involved in:
- Hosting your data on servers located exclusively in France;
- Our payment service provider STRIPE;
- Successors in title in the event of business or asset transfer;
- The consumer mediator and, where applicable, any competent authority.
6. How Long Do We Retain Your Personal Data?
The retention period for your personal data depends on the purpose of the processing and legal or regulatory obligations:
- All your client account data is retained until the account is closed;
- Your data is retained for three (3) years from the date of your last contact with KEYENA;
- Your IP address and other technical data collected during your use of the Site’s services are retained for a duration proportionate to the purpose of the processing, and shall not exceed _____ months;
- Data collected when exercising your rights are retained for ___________, except for a copy of your identity document, which is retained for ___________________.
To be completed if necessary.
7. What Are Your Rights Regarding Your Personal Data?
In accordance with applicable regulations, you have the following rights regarding your personal data:
7.1. Right of Access and Communication
You have the right to know whether your personal data is being processed by KEYENA and, if so, to obtain a copy in an understandable format.
To fulfill your request, we are legally required to verify your identity. We may ask you for additional information (e.g. a copy of your ID).
7.2. Right to Rectification and Erasure
You have the right to have inaccurate data corrected and incomplete data completed, as well as to request the erasure of your personal data, in accordance with the law.
7.3. Right to Restriction of Processing
You have the right to temporarily suspend the use—partially or fully—of your personal data.
This right allows you to pause processing while certain verifications are carried out, such as the accuracy of data or the legitimacy of the processing in case of objection.
7.4. Right to Object
You may object at any time, for reasons relating to your particular situation, to the processing of your personal data based on KEYENA’s legitimate interests. You also have the right to object to direct marketing.
7.5. Right to Data Portability
You have the right to receive the personal data you provided in a structured, commonly used and machine-readable format and to transmit it to another controller.
This right applies only to data collected based on your consent or a contract.
7.6. Right to Define Instructions in Case of Death
You may define general or specific instructions regarding what should happen to your personal data after your death.
These instructions can be modified or revoked at any time.
7.7. Exercising Your Rights
You may exercise your rights by writing to us at:
KEYENA – DPO, GASSAMA – 110 rue Frédéric Fays – 69100 Villeurbanne, France
or by email: contact@keyena.fr
7.8. Contacting the Relevant Supervisory Authority
If you believe that KEYENA is not complying with its data protection obligations, you may contact the relevant supervisory authority. In France, this is the CNIL: https://www.cnil.fr/.
8. Are Your Personal Data Transferred Outside the European Union?
All our subcontractors and partners are located within the European Union.
9. How Is Your Personal Data Secured?
We are committed to taking all necessary measures—based on the nature of the data and the risks involved—to ensure the security of your personal data and prevent it from being altered, damaged, or accessed by unauthorized third parties.
Security measures include physical, electronic, and administrative safeguards, such as firewalls, physical access control systems, and restricted access to data.
.
10. Cookies
To find out more, please consult our Cookie Policy, available here.
