Privacy Policy

Last updated: September 5, 2025

Interstiss SAS, mindful of individuals’ rights, particularly with regard to automated processing, and in a spirit of transparency with its clients, has implemented a privacy policy detailing all such processing, the purposes pursued, and the means available to individuals to best exercise their rights. For more information on personal data protection, we invite you to consult the website: https://www.cnil.fr/ Continuing to browse this site constitutes unreserved acceptance of the provisions and conditions of use set out below. The use of cookies by Interstiss SAS is governed by a specific policy, available below.

Article 1 – Data Controller Identity

The data controller of your personal data is: Interstiss SAS
7, boulevard des Frères Lumière, 42360 Panissières, FRANCE
+33 (0)4 74 01 99 80
interstiss@interstiss.com
SIRET No.: 41289903100048

Article 2 – Collection of Personal Data

Interstiss SAS collects and processes your personal data fairly and transparently, for specific, explicit, and legitimate purposes. The personal data that may be collected on the site or during our interactions include:

• Identification data: Last name, first name, title, date of birth, customer ID.
• Contact data: Postal address, email address, phone number.
• Connection/navigation data: IP address, pages visited, browsing history, technical identifiers (via cookies).
• Order/purchase data: Order history, details of purchased products, delivery and billing addresses.
• Financial data: Bank information (IBAN for transfers, encrypted payment data if applicable).
• Communication data: Content of messages sent via forms or emails.
• Professional data: Company name, position, SIRET number (for B2B clients, suppliers).
• Product personalization data: Texts or images provided for customization.
• Application data: CV, cover letter, professional background, diplomas.

Article 3 – Purposes of Processing

Your personal data is processed for the following purposes, based on the corresponding legal grounds:

Purpose of Processing	Legal Basis
Order and delivery management	Performance of a contract
Billing and payment tracking	Performance of a contract, Legal obligation
Customer relationship management (after-sales service, support)	Performance of a contract, Legitimate interest
Sending newsletters, commercial offers	Consent, Legitimate interest (for existing clients)
Product customization	Performance of a contract
Application and recruitment management	Performance of pre-contractual measures
Personnel management (contracts, payroll)	Performance of a contract, Legal obligation
Improvement of our products and services	Legitimate interest
Website statistics and audience analysis	Consent (for non-essential cookies)
Fraud prevention and security	Legitimate interest, Legal obligation
Management of customer reviews and comments	Consent, Legitimate interest
Dispute and litigation management	Legal obligation, Legitimate interest
Premises video surveillance	Legitimate interest (security of property and people)

Article 4 – Data Recipients

The recipients of your personal data are primarily:

• Internal departments of Interstiss SAS (sales, marketing, production, accounting, HR, IT).
• Our subcontractors acting on our behalf and under our instructions (web host, payment provider, carriers, marketing service, accounting firm).
• Administrative and judicial authorities where required by law.
• Our business partners, only with your explicit consent.

Article 5 – Data Retention Periods

Interstiss SAS keeps your personal data only for as long as necessary for the purposes for which it was collected, in accordance with legal and regulatory requirements.

• Customer data: Duration of the commercial relationship + 3 years for marketing purposes, then archived with restricted access for the legal retention period (e.g.: 10 years for invoices).
• Prospect data: 3 years from the last contact.
• Candidate data: 2 years after the last contact, unless the candidate objects.
• Connection/cookie data: See our Cookie Management Policy.

Article 6 – Your Rights

In accordance with personal data protection regulations, you have the following rights:

• Right of access: Obtain confirmation that your data is being processed and, if so, access it.
• Right of rectification: Request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): Request deletion of your data in certain cases.
• Right to restriction of processing: Request suspension of data processing in certain cases.
• Right to data portability: Retrieve your data in a structured format and transfer it to another controller.
• Right to object: Object to the processing of your data for legitimate reasons, or to commercial prospecting.
• Right to withdraw consent: At any time, for processing based on your consent.
• Right to define post-mortem directives: Regarding the fate of your data after your death.

To exercise your rights: Send your request by email to interstiss@interstiss.fr or by mail to: Interstiss SAS, 7 boulevard des frères Lumière 42360 PANISSIERES. Your request must be accompanied by a copy of your identity document (national ID card or passport) to prove your identity. A response will be sent within a maximum of one month after receipt of the request. This period may be extended by two months in case of complexity or high number of requests. Complaint to the CNIL: If you believe your rights have not been respected, you may file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL): https://www.cnil.fr/fr/plaintes.

Article 7 – Cookies

The website interstiss.com uses cookies. For more information on their management, please see our “Cookie Management Policy.”

Article 8 – Data Security

Interstiss SAS implements all appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of your personal data, including preventing it from being altered, damaged, or accessed by unauthorized third parties. This includes physical and logical security measures, staff training, access controls, encryption of sensitive data, and regular backups.

Article 9 – Changes to the Privacy Policy

Interstiss SAS reserves the right to amend this Privacy Policy at any time. Any changes will be published on this page and take effect immediately upon publication. We encourage you to review it regularly.