Last updated: July 4, 2025
1. Data Controller
IN’OYA, SAS with a share capital of €1,000, headquartered at 128 rue de la Boétie, 75008 Paris, acts as the data controller for personal data collected on the website www.inoya-laboratoire.com. For any questions regarding the protection of your personal data, you can contact our DPO at: contact@inoya-laboratoire.com.
2. Personal Data Collected
We collect, among others: name, surname, email and postal address, phone number, payment information, purchase history, browsing data (via cookies or trackers).
3. Purposes and Legal Bases of Processing
Your data is processed for: order processing (contract), customer service (legitimate interest), sending offers (consent), statistics (legitimate interest), legal obligations.
4. Data Retention Periods
Data is retained as long as necessary: up to 10 years for legal obligations, and 3 years for marketing communications.
5. Data Recipients
Data may be transferred to subcontractors (payment, logistics, marketing), all GDPR-compliant.
6. Transfers Outside the European Union
Where applicable, transfers are governed by the European Commission’s standard contractual clauses.
7. Data Security
Measures in place: encryption, backups, restricted access, internal audits.
8. Your Rights
You have the right to access, rectify, delete, object, and request portability of your data. Contact: contact@inoya-laboratoire.com. In case of dispute, contact the CNIL: www.cnil.fr
9. Breach Notification
In the event of a breach, the CNIL and affected individuals will be notified within 72 hours.
10. Children’s Data
The site is not intended for minors under 15 years old. Data will be deleted upon request.
11. Profiling and Automated Decisions
No automated legal decisions are made. Personalization is possible and can be refused at any time.
12. Cookie Policy
Our website only uses strictly necessary cookies. No marketing trackers are enabled without consent.
13. Third-Party Websites
We are not responsible for third-party websites accessible through our site.
14. Customer Reviews
Reviews may be moderated. You may request their deletion.
15. Archiving and Deletion
Expired data is securely archived or deleted.
16. Changes to the Policy
Any changes will be published on this page or sent by email.