Last updated: January 1, 2025
The purpose of our privacy policy is to formalize our commitment to protecting the privacy of users of the sanalyslab.com website, operated by SanalysLab SAS.
What is personal data?
Personal data refers to any information that allows a natural person to be identified, directly or indirectly ("Personal Data").
A person can be identified: directly (e.g., by their first and last name) or indirectly (e.g., by an identifier such as a customer number, phone number, biometric data, several specific elements of their physical, physiological, genetic, psychological, economic, cultural, or social identity, but also by their voice or image).
We collect and process Personal Data exclusively for the purpose of marketing our products, in strict compliance with the French Data Protection Act No. 78-17 of January 6, 1978, as amended, and the GDPR (European Regulation No. 2016/679). The data collected is essential for these processing operations. You will never be required to provide so-called "sensitive" Personal Data, such as your racial or ethnic origins, political, philosophical, or religious opinions.
By registering on the site, you authorize us to process your Personal Data in accordance with this Policy. If you do not agree to these terms, please do not use the site.
How is your personal data collected and processed?
Who is the data controller?
The company responsible for data processing on the website www.sanalyslab.com is SANALYSLAB, a simplified joint-stock company with a capital of €5,000, whose registered office is located at 335 rue Ferdinand Perrier, 69800 Saint-Priest, France, registered with the Aix-en-Provence Trade and Companies Register under number 884 514 688, and identified under intra-community VAT number FR48884514688.
Scope and purpose of processing: why is my data being collected?
Personal data is collected on the www.sanalyslab.com domain in several contexts, including:
– When browsing our website www.sanalyslab.com, we collect connection and browsing data;
– When creating an account;
– During the checkout process, which requires the prior creation of an account;
– When adding products to the shopping cart, via functional cookies;
– When paying for your order via an external service provider such as PayPal, Stripe, or others;
The personal data collected on www.sanalyslab.com is necessary and mandatory for the following purposes:
– Management of your newsletter subscription and sending of related commercial communications (emails and/or text messages);
– Ensuring the proper functioning of credit card payment processing services;
– Managing and tracking your membership in the loyalty program;
– Managing, tracking, and processing your order on the e-commerce site;
– Managing deliveries;
– Managing after-sales service, tracking requests sent to our Customer Service department, and confirming your personal information;
– Personalization of your customer experience on the e-commerce site;
– Implementation of targeted advertising;
– Allowing you to complete the purchase of products added to your shopping cart at a later date.
Legal basis: what is the legal basis for the processing?
In accordance with Article 6 of the GDPR, the legal basis authorizing the processing of your personal data is:
– Article 6.1.a of the European regulation on the protection of personal data (consent) for subscribing to the newsletter, sending commercial communications by email, managing and monitoring your membership of the loyalty program;
– Article 6.1.b of the European General Data Protection Regulation (performance of a contract or pre-contractual measures) for processing your order.
Who receives personal data?
In accordance with Article 13.1.e of the GDPR, the recipients of your personal data are:
– The data controller, SANALYSLAB, a simplified joint-stock company with a capital of €5,000, whose registered office is located at 335 rue Ferdinand Perrier, 69800 Saint-Priest, registered with the Aix-en-Provence Trade and Companies Register under number 884 514 688, identified under intra-community VAT number FR48884514688;
– Its service providers and subcontractors, within the framework of the following tasks: customer service management; processing and delivery of your order on the e-commerce site; routing of commercial SMS and emails;
– Any person legally authorized to access the data (judicial services, where applicable).
How long is the data retained?
The data retention period is limited to the period during which you are registered for our communication services and, where applicable, to ensure the provision of products or services, bearing in mind that you can unsubscribe at any time by clicking on the link provided for this purpose in each email sent by SANALYSLAB.
Obligation to provide personal data:
In accordance with Article 13.2.e of the GDPR:
– Providing your email address is necessary in order to receive the communications mentioned above, and remains entirely optional;
– Providing your last name, first name, email address, and date of birth is necessary to create your customer account. Refusal to provide this information will prevent the creation of a customer account;
– Providing your last name, first name, email address, address, and bank details is necessary to finalize your order. Refusal to provide this information will prevent the finalization of your customer order.
Where is my data transferred to?
Data may be transferred outside the European Union. Certain subcontractors, particularly in the context of data processing for social networks, may potentially transfer your data outside the European Union, always in accordance with Article 46.2.d of the GDPR. All SANALYSLAB subcontractors have provided adequate protection clauses in accordance with the model established and validated by the European Commission.
SANALYSLAB, as the controller of your personal data, undertakes to take all necessary measures to ensure the security and confidentiality of the personal data transmitted, in accordance with the legal provisions in force.
How is your personal data collected and processed?
DEFINITIONS, CHARACTERISTICS AND APPLICATION OF RULES
Cookies are small text files that websites you visit send to and store on your computer or mobile device, and which are sent back to the same websites each time you visit them. Thanks to these cookies, the website remembers your actions and preferences (e.g., login details, preferred language, font size, other display settings, etc.) so that you do not have to re-enter them when you return to the website or when you visit another page on the same website.
Cookies are used for electronic authentication, session tracking, and storing information about the activities of users visiting the Site. They may also contain a unique identifier that allows a system to track your browsing activities on the Site for statistical or advertising purposes. During your visit, you may also receive cookies on your computer or mobile device from other sites or servers (third-party cookies). Certain operations may be impossible without the use of cookies, which are sometimes technically necessary for the proper functioning of the Site.
There are different types of cookies depending on their characteristics and functions, and the length of time they are stored on your computer or mobile device varies. Session cookies are automatically deleted when you close your browser, while persistent cookies remain on your device until a predefined expiration date.
The Personal Data Regulation does not always require your consent for the use of cookies. For example, consent is not required for "technical cookies." These cookies are used exclusively to transmit messages over an electronic communications network or to provide a service expressly requested by the user. In other words, these cookies are essential for the functioning of the Site or for carrying out the activities you request.
Technical cookies that do not require your express consent also include, according to the CNIL (see the Recommendation entitled "Cookies: how can I make my website compliant?"):
– "analytical cookies" used directly by the website manager to collect information, in aggregate form, on the number of users and how they visit the website;
– navigation or session cookies (for logging in);
– functional cookies, which allow you to visit a site according to a set of selected criteria (such as language, products chosen for purchase) and which are intended to improve the service provided.
On the contrary, "profiling cookies," used to create user profiles and send advertising messages corresponding to the preferences you have indicated while browsing the network, require your specific consent.
TYPES OF COOKIES USED BY THE SITE AND DEACTIVATION OPTIONS
The Site uses the following cookies, which can be disabled, with the exception of third-party cookies, for which you must refer directly to the activation and deactivation methods indicated via the links:
– navigation cookies or technical session cookies strictly necessary for the functioning of the Site or to allow you to use the content and services you have requested,
– analytical cookies that allow the system to track user traffic on the Site. These cookies do not collect any information about the user's identity or any personal data. This data is processed in an aggregated and anonymous manner,
– functional cookies used to activate certain functions of the Site and a set of selected criteria (such as language, products chosen for purchase), with the aim of improving the service,
– profiling cookies used to send advertising messages corresponding to your preferences recorded during navigation,
When browsing, Internet users have the right to choose which cookies they wish to authorize. PLEASE NOTE: deleting technical and/or functional cookies from the Website may prevent browsing, render certain services or functions of the Website unavailable, or cause malfunctions, requiring you to modify or manually enter certain information or preferences each time you visit the Website.
What are my rights?
You have the right to ask the Data Controller for access to your personal data, its correction or deletion, the limitation of its processing, opposition to its processing, and the portability of your data. You can modify all your personal information in the "My Account" section. For any other request concerning the correction or deletion of personal data, please contact us.
Finally, you may object to direct marketing at any time. To make it easier for you to exercise your rights, each newsletter sent by SANALYSLAB contains an unsubscribe link allowing you to easily unsubscribe from newsletters and updates with a single click. You can also manage your marketing preferences directly from your web account or by writing to us at the address below.
If you wish to exercise these rights, please contact us:
– in writing at the following address: 335 rue Ferdinand Perrier, 69800 Saint-Priest, France;
– or contact our partners at the following email address: [email protected]
To facilitate the processing of your request, we recommend that you provide us with your first and last name and your email address. In addition, SANALYSLAB may, if necessary, verify the customer's identity using any valid identity document.
SANALYSLAB undertakes to respond to you within a maximum period of one month from the date on which you exercise your right. This period may be extended by two months depending on the complexity and number of requests.
If you believe that SANALYSLAB is using your personal data inappropriately, you can contact us.