Privacy Policy

Last updated: May 2026

Enersens SAS (“Enersens”, “we”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, or order our products.

This policy applies to data processing carried out by Enersens in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the French Data Protection Act (“Loi Informatique et Libertés” No. 78-17 of 6 January 1978, as amended).

Data controller

The data controller is:

ENERSENS SAS
46 rue Joseph Jacquard
38110 Rochetoirin, France
Email: contact ୭ enersens.fr
Phone: +33 (0)9 73 32 20 40

Data we collect

We collect personal data only when you actively provide it to us, or when it is automatically transmitted by your browser. The data we may collect includes:

  • Contact forms: name, email address, phone number, company, and the content of your message.
  • Sample orders and shop purchases: billing and delivery address, phone number, company details, payment information (processed by our payment providers Mollie or Stripe — Enersens does not store credit card details).
  • Technical data: IP address, browser type and version, operating system, pages visited, time and date of visit.
  • Cookies: see the Cookies section below.

Why we process your data

We process personal data for the following purposes and on the following legal bases (GDPR Article 6):

  • Responding inquiries (legal basis: legitimate interest or pre-contractual measures) — depending on the nature of your request.
  • Processing orders (legal basis: performance of a contract) — when you purchase samples or products through our online shop.
  • Business communications and B2B marketing (legal basis: legitimate interest or consent where required) — you may opt out at any time..
  • Statistical analysis (legal basis: legitimate interest) — to understand site usage and improve our services. We use anonymised or aggregated data where possible.
  • Legal compliance (legal basis: legal obligation) — to comply with accounting, tax, and regulatory requirements.

How long we keep your data

We retain personal data only as long as necessary for the purposes for which it was collected:

  • Contact form submissions: up to 3 years after the last contact, then deleted or anonymised.
  • Order and invoice data: 10 years (French legal obligation for accounting records).
  • Customer relationship data: up to 3 years after the end of the commercial relationship.
  • Server logs: up to 12 months.

Who has access to your data

Your personal data is accessed only by authorised Enersens employees who need it to perform their duties. We do not sell or rent your data to third parties.

We may share data with the following categories of recipients, only when necessary:

  • Our hosting provider (Gandi SAS, France) — for technical operation of the site.
  • Our payment providers — for processing shop transactions.
  • Shipping carriers — for delivery of physical orders.
  • French and EU authorities — when required by law (tax, accounting, judicial requests).

Where required, recipients and service providers are bound by contractual obligations designed to protect personal data in accordance with GDPR requirements.

International transfers

We aim to process and store personal data within the European Union. Some service providers may process data outside the EU/EEA. Where this occurs, we rely on appropriate safeguards under GDPR Articles 44 to 50, such as adequacy decisions or standard contractual clauses.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — obtain a copy of the personal data we hold about you.
  • Right of rectification — correct inaccurate or incomplete data.
  • Right of erasure (“right to be forgotten”) — request deletion of your data, subject to legal retention obligations.
  • Right to restrict processing — limit the use of your data in certain circumstances.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interests, including for marketing purposes.
  • Right to withdraw consent — at any time, where processing is based on your consent.

To exercise any of these rights, contact us at contact@enersens.fr or by post at the address above. We will respond within one month.

If you consider that we have not respected your rights, you may lodge a complaint with the French data protection authority:

CNIL — Commission Nationale de l’Informatique et des Libertés
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
www.cnil.fr

Cookies

A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow the site to recognise your device on subsequent visits and to provide certain functions.

This website uses the following categories of cookies:

  • Strictly necessary cookies — required for the site to function (e.g. session management, shopping cart). These cannot be disabled.
  • Preference cookies — remember your settings (e.g. language).
  • Statistics cookies — used to measure website audience and improve the site, subject to consent where required.

Cookies and consent records: retained for the duration specified in the cookie banner or consent management tool, generally not exceeding 13 months unless otherwise required.

You can accept or refuse non-essential cookies through the cookie banner displayed on your first visit. You can also change your preferences at any time through your browser settings or by clearing your cookies.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes HTTPS encryption, access controls, and regular backups.

Children’s privacy

This website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us so we can delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the date of the last update shown at the top.

For any question regarding this Privacy Policy, contact us at contact@enersens.fr.