Data Protection Policy.

Article 1: General
In accordance with the provisions of the General Data Protection Regulation (GDPR), the collection and processing of your personal data respect the following principles:

- the collection and processing of personal data can only be based on a previously defined legal basis (performance of a contract, legal obligation, consent, legitimate interest, protection of vital interests).

- the collection and processing of personal data are carried out to meet one or more defined objectives.

- data minimization: only data strictly necessary for the proper fulfillment of the pursued objectives are collected.

- time-limited data retention: the data controller is required to define retention periods for the processed personal data.

- integrity and confidentiality of collected and processed data: the data controller undertakes to guarantee the integrity and confidentiality of the collected data.
 

Article 2: Data Controller
As the data controller, SAOLA SAS (27 rue Adrastée, 74650 Chavanod, SIREN No.: 823 558 689, hereinafter "We") undertakes to comply with the obligations regarding the collection and processing of personal data.

We implement all technical and organizational measures to ensure the protection of your personal data.

Article 3: Data Subjects
This policy is intended for internet users browsing the Saola.com or fr.saola.com sites, customers who have placed orders, our partners who wish for more detailed information on data processing, and more generally all individuals who have been in contact with us.


Article 4: Personal data collected and processed
In accordance with the principle of minimization, we only collect data necessary for the proper functioning of the SAOLA brand's business.

SAOLA may collect this data either directly from you, or via the website, its partners (business introducers, web agency, etc.).
Thus, as part of our sales activity, SAOLA may collect and process the following information:

Surname, first name, gender, date of birth, address, telephone number, initial temporary login IDs and passwords for the customer area, IP address, connection history, cookies, audience measurement, browsing data, e-mail address, payment method (credit card/RIB), opening and interaction status with our e-mails (via tracking pixel).

We do not collect any sensitive data such as:

Data revealing racial or ethnic origin
Data revealing political opinions
Data revealing religious or philosophical beliefs
Data revealing trade union membership
Genetic data
Biometric data for the purpose of uniquely identifying a natural person
Data concerning health
Data concerning a person's sex life or sexual orientation
Data relating to criminal convictions or offenses


Article 5: Personal data collected and processed, why?
All data related to site browsing, advertising targeting, account creation, order management, statistics, shipping management, customer support and return management, newsletters and automation scenarios, and geolocation allow us to:

  • send you informational communications, such as the newsletter (if you have requested it from us)

    - contact you when you fill out the contact form
    - carry out audience analyses or produce statistics (if agreed)
    - process your registration request for our training courses
    - allow you to access your customer area
    - offer you personalized services
    - monitor and improve our website
    - secure our website
    - measure the opening rate of our e-mails and adapt the frequency and relevance of our communications (if consent is given)


If you wish to obtain detailed information on the specific processing of your data, please do not hesitate to send your request to the following e-mail address: connect@saola.com.
We regularly update these elements to keep them as current as possible.


Article 6: Your rights
In accordance with the regulations in force, you have the following rights regarding your personal data:
- right of access (by e-mail to connect@saola.com)
- right to rectification (by e-mail to connect@saola.com)
- right to object (by e-mail to connect@saola.com)
- right to restriction of processing
- right to erasure
- right to data portability
 

Article 7: The DPO
As stipulated by law, SAOLA has appointed an internal contact person, and you can exercise your rights by contacting us at connect@saola.com or at:


SAOLA SAS
27 rue Adrastée
74650 Chavanod
France

Article 8: Complaint to the CNIL
You may at any time lodge a complaint with the competent authority, namely the Commission Nationale de l'Informatique et des Libertés (CNIL), by following this link: https://www.cnil.fr/fr/plaintes.


Article 9: Our security measures
The company SAOLA SAS attaches paramount importance to the protection of personal data in accordance with the General Data Protection Regulation (GDPR). To guarantee the security and confidentiality of sensitive information, we have implemented rigorous security measures.

In accordance with Article 32 of the GDPR regarding the security of processing, SAOLA SAS has implemented the following measures:

  • devices ensuring the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
  • means to restore the availability of and access to data in a timely manner in the event of a physical or technical incident.
  • a systematic procedure to regularly test, analyze, and evaluate the effectiveness of the technical and organizational measures ensuring the security of processing.
  • secure partnerships: when we collaborate with partners and suppliers, we ensure that they also respect high data protection standards. Specific confidentiality clauses are included in our agreements.
  • Privacy by Design and by Default: We integrate privacy by design and ensure that, by default, only the data necessary for processing is collected, processed, and stored.

It is important to emphasize that the security obligation remains an obligation of means, meaning that we make every effort necessary to guarantee the confidentiality and integrity of your personal data.
All persons with access to your personal data have been made aware of best practices regarding data protection.
They are bound by an obligation of confidentiality and are subject to disciplinary sanctions in the event of non-compliance with this provision.

Article 10: Cookies
Our website uses cookies which can be classified into five categories:

  • Advertising:
    These cookies are designed to offer you more targeted advertisements from our partners, based on your browsing activities and your customer profile.

  • Social Networks:
    Thanks to these cookies, you have the ability to share your interactions on our site with social media platforms. We invite you to consult the privacy policies of these platforms to understand how their cookies work.

  • Functionality:
    These cookies remember your choices to enrich your experience on our site, making it more personalized and user-friendly. The data collected by these cookies may be anonymized and will not be used to track your browsing activities on other websites.

  • Performance:
    These cookies collect anonymous data on your use of our site. The information gathered is used exclusively to optimize your experience on our platform, without ever being used to identify you. Sometimes, these cookies are placed by third-party web traffic analysis service providers, such as Google Analytics.
  • Strictly necessary:
    These cookies are essential to facilitate your browsing on our websites and to take advantage of their features, for processing your orders, managing billing, accounting, and customer account management.

Article 10 bis: The tracking pixel in our e-mails

Our marketing e-mails may contain a tracking pixel (invisible image) allowing us to measure their open rate. This tracking allows us to adapt the frequency of our mailings and to offer you more relevant content.

The placement of this pixel is based on your prior consent, collected at the time of your registration for our communications, which is separate from your consent to receive our marketing e-mails.

The data collected via this pixel (date and time of opening, IP address, type of device) is kept for the same duration as your other contact data and is processed by our emailing platform, Klaviyo.

You may at any time withdraw your consent to the tracking of your e-mail opens, without affecting your subscription to our newsletter, from your [preferences area].

Article 11: Update of the data protection policy

This personal data protection policy may be subject to change.

Last update performed on 08/04/2026.