Privacy Policy
Version effective as of September 1, 2026
1 – Purpose of this Policy
This Privacy Policy is intended to inform users of www.norvaed.com website about how Norvaed collects, uses, retains, protects and, where applicable, shares their personal data.
Norvaed attaches particular importance to respecting privacy and undertakes to process personal data in accordance with applicable regulations, including Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data (GDPR) and the French Data Protection Act (Loi Informatique et Libertés), as amended.
This Privacy Policy applies to anyone using www.norvaed.com, whether they browse its content, create an account, place an order, subscribe to the newsletter or contact Norvaed.
2 – Data Controller
The data controller for personal data collected on www.norvaed.com is:
Norvaed
Brand operated by Florian Guillier, sole trader under the French micro-entrepreneur regime.
SIREN – 104 546 031
Registered office
6 Rue des Clefs
72650 La Milesse
France
Email address - hello@norvaed.com
For any questions about the processing of personal data or to exercise your rights, you may contact Norvaed at the email address above.
3 – Personal Data Collected
Depending on how you use www.norvaed.com website, Norvaed peut être amené à collecter les catégories de données personnelles suivantes :
•Identification data, such as your first and last name.•Contact details, including your email address, postal address and telephone number.•Order-related data, such as the products ordered, amounts paid, delivery information and purchase history.•Payment data, processed by partner payment service providers. Norvaed never retains customers’ full bank card details.•Connection and browsing data, such as IP address, device type, browser used, pages viewed, browsing duration and interactions performed on the website.•Newsletter data, when you choose to subscribe.•Data voluntarily provided, in particular when you contact Norvaed via the contact form or by email.
Certain data is necessary to provide the services offered on the website. Failure to provide it may prevent an order from being processed, a product from being delivered or a request from being answered.
4 – Purposes of Processing
Personal data collected by Norvaed is used only for specified, explicit and legitimate purposes.
It may in particular be processed in order to:•manage the creation and administration of customer accounts;•process, prepare and dispatch orders;•provide delivery tracking and after-sales service;•communicate with customers in connection with an order or contact request;•manage payments and refunds, and prevent fraud;•send information, news or commercial offers to people who have given their consent or where permitted by law;•measure website traffic, analyse its use and improve performance, user experience and the services offered;•comply with Norvaed’s applicable legal, accounting and tax obligations;•ensure website security, prevent misuse and protect Norvaed’s rights.
Personal data is not used for purposes incompatible with those described in this Privacy Policy.
5 – Legal Bases for Processing
Norvaed processes personal data only where a legal basis provided for by applicable regulations permits it.
Depending on the processing concerned, personal data is processed on the following legal bases:•Performance of a contract, in particular for the management of orders, payments, deliveries, after-sales service and customer relations.•Compliance with a legal obligation, in particular in relation to the retention of accounting and tax records, and the management of regulatory obligations applicable to Norvaed.•The data subject’s consent, in particular for sending commercial communications, newsletter subscriptions, or placing certain cookies and other trackers where consent is required.•Norvaed’s legitimate interests, in particular to ensure website security, prevent fraud, improve the services offered, compile visitor statistics and defend its rights in the event of a dispute, provided that this does not disproportionately affect the rights and freedoms of the data subjects.
6 – Data Recipients
Personal data collected by Norvaed is accessible only to persons authorised to process it in the course of their duties.
Where necessary, it may be disclosed to the following categories of recipients:•payment service providers, to enable secure processing of transactions;•carriers and logistics service providers, to ensure the preparation, dispatch and tracking of orders;•technical service providers involved in hosting, operating, maintaining and securing the website;•service providers used for audience measurement, traffic analysis, electronic communications or customer relationship management;•administrative or judicial authorities, where required by law or where such disclosure is necessary to defend Norvaed’s rights.
Norvaed ensures that personal data is disclosed only to recipients who need access to it in the course of their duties and, where possible, ensures that its service providers offer appropriate safeguards for the protection of personal data.
Norvaed does not sell or rent its users’ personal data to third parties.
7 – Data Retention Periods
Norvaed retains personal data only for as long as necessary to fulfil the purposes for which it was collected, as well as to meet its legal, accounting, tax and regulatory obligations.
Retention periods may vary according to the nature of the data and the applicable obligations.
Once the applicable retention periods have expired, data is deleted or, where permitted by law, anonymised or archived under conditions that ensure its security.
8 – Data Transfers Outside the European Union
When using certain technical or service providers, personal data may be transferred to or accessed from countries outside the European Union.
Where such transfers take place, Norvaed ensures that they are based on a mechanism recognised by applicable regulations, in particular an adequacy decision by the European Commission or the implementation of appropriate safeguards, such as standard contractual clauses approved by the European Commission.
Users may obtain further information about these safeguards by contacting Norvaed at the email address stated in this Privacy Policy.
9 – Data Security
Norvaed implements appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.
These measures are appropriate to the nature of the data processed and the risks associated with the processing carried out.
However, despite the precautions taken, no data transmission or storage system can guarantee absolute security. In the event of a personal data breach likely to result in a risk to the rights and freedoms of data subjects, Norvaed will comply with the obligations set out in the applicable regulations.
10 – Your Rights
In accordance with applicable personal data protection regulations, you have the following rights:•the right of access, to obtain confirmation that personal data concerning you is being processed and to receive a copy of it;•the right to rectification, to request the correction of inaccurate or incomplete data;•the right to erasure, under the conditions provided for by applicable regulations;•the right to restriction of processing, in the cases provided for by regulations;•the right to object, where processing is based on Norvaed’s legitimate interests or carried out for direct marketing purposes;•the right to data portability, for data you have provided where this right applies;•the right to withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise your rights, or for any questions about the processing of your personal data, you may contact Norvaed at:
Email address: hello@norvaed.com
Norvaed undertakes to respond to all requests within the time limits provided for by applicable regulations.
11 – Cookies and Other Trackers
The website www.norvaed.com website uses cookies and other trackers to ensure its proper operation, improve browsing experience, measure website traffic and, where applicable, offer tailored content or advertising.
Where required by law, the placement of certain cookies is subject to the user’s prior consent, which may be withdrawn at any time.
For more information about the cookies used by Norvaed, their purposes, retention periods and how to manage your preferences, please consult the Cookie Policy, which is available at any time on www.norvaed.com.
12 – Complaint to the CNIL
If you believe that the processing of your personal data does not comply with applicable regulations, you have the right to lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL).
However, we invite you to contact Norvaed first, so that we can review your request and try to provide a satisfactory response.
For more information, you can consult the CNIL’s official website.
13 – Changes to this Privacy Policy
Norvaed reserves the right to amend this Privacy Policy at any time, in particular to adapt it to legal, regulatory, technical or business developments.
The version in force is the one published on www.norvaed.com on the date you consult it.
We invite you to review this Privacy Policy regularly to become aware of any updates.
14 – Contact
For any questions about this Privacy Policy or the processing of your personal data, you may contact Norvaed at:
Email address: hello@norvaed.com