Privacy policy

Purpose of processing (purpose and legal basis)

The company COSPHI Laser, whose head office is located at CASTANET TOLOSAN (31320), 10 Ter route d’Escalquens, has an online sales website. This site enables us to receive orders from our customers, and the data collected in this way is recorded and processed in a customer file.

This file allows you to :

Manage orders, payment and delivery.
Carry out marketing operations (loyalty, promotions) and send advertising by e-mail to our customers who have not objected or who have agreed to this:
- On products similar to those they have ordered.
- On other products offered by the company.

Legal basis for processing

Order management: the legal basis for processing is the performance of a contract (Cf. article 6.1.b) of the European Data Protection Regulation).
Sending commercial solicitations by e-mail on products similar to those ordered by customers: the legal basis for processing is the company’s legitimate interest (Cf. article 6.1.f) of the European Data Protection Regulation), namely to promote our products to our customers.
Sending commercial e-mail solicitations about other products offered by COSPHI Laser: the legal basis for processing is consent (Cf. article 6.1.a) of the European Data Protection Regulation), as required by article L. 34-5 of the French Post and Electronic Communications Code.
Transmission of e-mail address to business partners: the legal basis for processing is consent (Cf. article 6.1.a) of the European Data Protection Regulation).
Bookkeeping involving data retention for a period of 10 years: the legal basis for processing is the legal obligation (Cf. article 6.1.c of the European Data Protection Regulation).

Data categories

Identity: title, surname, first name, address, delivery address, telephone number, e-mail address, date of birth, internal processing code enabling customer identification, data relating to registration on opposition lists.
Order data: transaction number, purchase details, purchase amounts, invoice payment data (payments, outstanding payments, discounts), product returns.
Payment details: credit card number, expiry date, visual cryptogram (which is immediately deleted).
Data required for loyalty and prospecting campaigns: purchase history.

Data recipients

COSPHI Laser’s customer service and billing departments are the recipients of all categories of data.
Our subcontractors, who are responsible for delivering our orders, receive the identity, address and telephone number of our customers.

Data retention period

Data required for order management and invoicing: for the duration of the commercial relationship and ten (10) years for accounting purposes.
Data required for loyalty campaigns and canvassing: for the duration of the commercial relationship and three (3) years from the last purchase.
Payment details: These details are not stored by COSPHI Laser; they are collected at the time of the transaction and are immediately deleted once the purchase has been settled.
Data concerning opt-out lists: three (3) years.

Your rights

If you no longer wish to receive advertising from COSPHI Laser (exercise of the right to object or withdrawal of consent already given), please contact us.

If, after having consented to your data being passed on to our commercial partners, you wish to reverse this choice and no longer receive advertising from them, please contact us.

You can access, rectify or delete your personal data. You also have the right to portability and the right to limit the processing of your data (see cnil.fr for more information on your rights).

To exercise these rights or if you have any questions about the processing of your data under this system, please contact our DPO.

Contact our DPO electronically: contact.laser@cosphi.fr
Contact our DPO by post :

The Data Protection Officer

COSPHI Laser

10 Ter route d’Escalquens

31320 CASTANET TOLOSAN

If, after contacting COSPHI Laser, you feel that your rights with regard to information technology and civil liberties have not been respected, you may submit a complaint online to the CNIL.