Privacy Policy

Nouryla SAS, whose registered office is located at 25-32 Avenue des Frères Lumières, 78190 Trappes, is a semi-industrial manufacturer based in Trappes, specialized in fresh vacuum-packed fries and ultra-fresh bakery for professionals (Versailles Trade Register 810 670 471, share capital EUR 50,000). As data controller, Nouryla undertakes to protect the privacy of users of its nouryla.fr website as well as its customers, partners and professional prospects.

This Privacy Policy aims to inform you about how we collect, use, store and protect your personal data, in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and French Act No. 78-17 of January 6, 1978 as amended relating to data processing, files and freedoms.

As part of our activities, we may collect the following categories of personal data:

• Identity data: first name, last name, position within the company.
• Contact data: professional email address, phone number, postal address.
• Company data: company name, SIRET number, registered office address, sector of activity.
• Order data: order history, products ordered, amounts, delivery conditions.
• Browsing data: IP address, browser type, pages visited, visit duration, connection data on nouryla.fr.
• Communication data: email exchanges, requests via the contact form, claims.

Your personal data is collected and processed for the following purposes:

• Management of orders, invoicing and deliveries of food products (fresh vacuum-packed fries and ultra-fresh bakery).
• Customer relationship management and commercial follow-up (quotes, reminders, after-sales service).
• Commercial prospecting and sending of marketing communications relating to our products and services (with your prior consent or on the basis of our legitimate interest for existing customers).
• Improvement of our services and our website through the analysis of browsing data.
• Compliance with our legal and regulatory obligations (accounting, taxation, food traceability).
• Management of claims and litigation.

Each processing of personal data is based on a legal basis compliant with the GDPR:

• Performance of a contract: processing necessary for the management of your orders, product delivery and invoicing.
• Consent: commercial prospecting by electronic means, deposit of non-essential cookies, newsletter subscription.
• Legitimate interest: improvement of our services, analysis of site traffic, commercial prospecting to existing customers.
• Legal obligation: retention of invoices and accounting documents, compliance with traceability obligations in the food sector, response to requests from competent authorities.

Our nouryla.fr website uses cookies and similar technologies to ensure its proper functioning and improve your browsing experience.

We use the following categories of cookies:

• Essential cookies: indispensable for the operation of the site (session, security, technical preferences). These cookies do not require your consent.
• Analytical cookies: used to measure site traffic and analyze visitor browsing (e.g.: Google Analytics or equivalent solution). These cookies are deposited only with your prior consent.

You can at any time manage your cookie preferences via the consent banner displayed on your first visit, or by modifying your browser settings. Refusing analytical cookies does not affect your access to the site.

Your personal data is retained for a period proportionate to the purpose for which it was collected:

• Active customer data: for the entire duration of the commercial relationship, then 3 years after the last contact or order for prospecting purposes.
• Invoicing and accounting data: 10 years in accordance with legal accounting and tax obligations.
• Browsing data (cookies): 13 months maximum in accordance with CNIL recommendations.
• Prospecting data: 3 years from the last contact from the prospect.
• Claim data: 5 years from the closing of the file.

Beyond these periods, the data is irreversibly deleted or anonymized.

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that your data is being processed and receive a copy.
• Right to rectification: request the correction of inaccurate or incomplete data.
• Right to erasure: request the deletion of your data under the conditions provided by the GDPR.
• Right to restriction: request the restriction of the processing of your data in certain cases.
• Right to portability: receive your data in a structured, commonly used and machine-readable format, and transmit it to another data controller.
• Right to object: object at any time to the processing of your data for direct marketing purposes or for legitimate reasons.

To exercise your rights, you can contact us at the following address: dpo@nouryla.fr

We undertake to respond to your request within one month. This period may be extended by two additional months in case of complex requests, in which case you will be informed.

If you believe that your rights are not respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

Nouryla implements appropriate technical and organizational measures to ensure the security, confidentiality and integrity of your personal data, and in particular to prevent any unauthorized access, loss, alteration or disclosure of such data.

These measures include in particular: encryption of data in transit (HTTPS protocol), strict access controls to information systems, regular data backups, training of our employees on data protection issues, and the use of hosts and providers offering sufficient security guarantees.

For any question relating to this Privacy Policy or to exercise your rights, you can contact us:

By email: dpo@nouryla.fr

By mail: Nouryla SAS, Data Protection Officer, 25-32 Avenue des Frères Lumières, 78190 Trappes

In case of persistent difficulty, you can also send a complaint to the CNIL: Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 (www.cnil.fr).