At SBE, we are fully committed to the security of your personal data and apply the same security and confidentiality rules to it as we do to our own data.

Your connection to the sbedirect website is secure

Your personal data is stored securely

Regarding your personal data stored on our servers (no banking data), please note that these are subject to close monitoring and a real security strategy, with regular backups to prevent any disclosure or unauthorized use of your personal data.

Your personal data is for SBE only (no partners)

All information you provide to SBE is strictly confidential and will remain so. This is a very important point for us.

As we state on the "My personal information" page of your account:

"The information you provide to us allows us to ensure high-quality processing and follow-up of your requests. It is intended exclusively for SBE and is never transmitted to other companies."

This processing complies with the General Data Protection Regulation (GDPR). Your data is processed based on contract performance, compliance with legal obligations, or your consent when required.

In accordance with the French Data Protection Act of January 6, 1978, you have the right to access and correct your personal data.

Privacy Policy

SBE (“we”) takes the greatest care to respect your privacy and fulfill its responsibilities regarding the processing of personal data. This privacy policy informs you about how we process your personal data and is an integral part of the General Terms and Conditions of Sale and Use.

In accordance with current regulations, this personal data protection policy (the “Policy”) applies when you browse the site and aims to inform you of the collection, use, and broader processing of your personal data.

The personal data we process

We only collect the personal data necessary for the purpose for which it is processed. The mandatory nature of providing certain information is indicated in the collection form when you register or modify your details.

This data includes:

• Your identification data, such as your first name, last name, gender.
• Your contact details, such as your postal address and email address.
• Your transactional information, including all details related to your orders on the site, such as purchased products, and payment method information.
• Your connection data, such as information about your computer or mobile device hardware and software, including your IP address, device type and model, browser type, and device ID. This information is used to ensure the site’s proper functioning, maintain its quality, for general statistics, and to comply with our legal and regulatory obligations.
• Cookies: please refer to the section on cookies below.

All or part of this personal data is obtained when you:

• Visit our site (e.g., via cookies) or take part in a promotional campaign.
• Provide this information through our site, by phone, email, postal mail, or form.
• Send us comments or questions.
• Or, more generally, by any other means through which you contact us.

Your personal data may be collected by us and/or third-party service providers that help us operate the site, such as hosting providers, partners, or subcontractors.

Cookies placed when browsing the site

A “cookie” is a text file placed on your device by a browser tool. Cookies allow the issuer, and only the issuer, to identify the terminal in which they are stored for the duration of the cookie’s validity or storage, and cannot be used to run programs or transmit viruses to your computer.

We use cookies or similar technologies to:

• Facilitate your navigation on the site.
• Use the main site features and secure your connection, as well as directly access personal areas of the site using identifiers or data you may have previously provided.
• Adapt the site’s display to your device’s display preferences during your visits.
• Conduct statistical studies.

You can accept or refuse cookies. Most browsers automatically accept cookies, but you can usually change your browser settings to refuse them. If you refuse cookies, you may not be able to fully enjoy all site features.

You can configure your browser so that:

• Cookies are stored or rejected, either systematically or depending on their sender.
• Acceptance or refusal of cookies is offered each time before they may be stored on your device.
• Cookies stored on your device can be deleted at any time.

For cookie management, each browser’s configuration is different. It is described in the help menu of each browser and available at the following addresses (for reference):

• For Chrome
• For Firefox
• For Microsoft Edge
• For Opera
• For Safari

On your first visit to our site, a banner informs you of the presence of cookies and invites you to accept, refuse, or configure them. No non-essential cookies will be placed without your explicit consent.

You can change your preferences at any time by clicking the "Manage my cookies" link at the bottom of the page. Refusing cookies may limit some site features but will not prevent browsing.

In accordance with CNIL guidelines, your consent is stored for a maximum of 6 months, after which it will be requested again.

The purposes for which we process your personal data

The personal data we collect is processed in accordance with applicable regulations to meet explicit, legitimate, and specific purposes, based on the general terms and conditions of sale or use, to comply with legal and/or regulatory obligations, or subject to your prior consent. These purposes include...

Processing is based, as applicable, on:

(i) Contract performance (e.g., order management),
(ii) Compliance with legal obligations (e.g., invoicing, fraud prevention),
(iii) Our legitimate interest (e.g., site security, B2B prospecting),
(iv) Your consent when required (e.g., sending newsletters, placing cookies).

We collect and use your personal data to provide the orders we offer via the site. This data is processed in particular to:

1. Manage your online registration request and validate it.
2. Process orders, including monitoring and payment, and handle any incidents (fraud management, payment issues, etc.).
3. Provide support.

Inform you about our products and/or services

We may use your personal data to inform you about products or services we offer to customers, either after obtaining your prior consent to receive such information or following a purchase on our site.

If you no longer wish to receive promotional information, advertisements, or other messages from us, you can click the link at the bottom of our emails.

Secure the site

We ensure the security of your personal data, as well as that of third parties, against any fraudulent access, use, or disclosure. However, please note that no security system is infallible, and we cannot guarantee that your information will be completely secure.

Comply with our legal and regulatory obligations

This data may also be used for identifying authors of content with an unlawful character.

Recipients of the processed personal data

We process your personal data solely for the purposes described in this policy. We may use trusted partners acting as processors to provide all services offered on the site. These third parties are contractually prohibited from using the personal data we transmit for any other purpose.

We will only disclose your personal data, without notice, if:

• Required by applicable regulations.
• To comply with law, regulation, legal process, and/or an injunction.
• To protect our rights or those of our partners.
• To ensure user safety.

For site and service operation, your personal data may be processed by processors acting on our behalf and according to our instructions (hosting provider, email service provider, CRM tool, etc.), who are contractually committed to ensuring data security and confidentiality.

Data retention period

• Account data: 5 years from account closure.
• Bank data: only for the time of the transaction, unless explicit consent is given.
• Cookies: 13 months.
• Possible archiving for claims, disputes, or legal obligations.

Transfer of your data outside the European Union

We may transfer your data to non-EU countries. In such cases, all transfers are covered by recognized legal safeguards, such as Standard Contractual Clauses (SCCs) or the Data Privacy Framework. You can obtain more information or a copy of the applicable safeguards by contacting us at contact@sbedirect.com.

Your rights and how to exercise them

You have the right to access, object to, rectify, erase, limit processing, request portability, and determine the fate of your data after death. These rights can be exercised by email at contact@sbedirect.com with proof of identity. If, after contacting us, you believe your rights have not been respected, you can file a complaint with the competent supervisory authority in France: the CNIL – www.cnil.fr.

To exercise your right to portability, we will provide a structured, commonly used, machine-readable file (CSV or Excel) containing the personal data you provided, within legal limits. For any questions regarding your rights or this policy, you can contact our data protection officer at the same address.

Protection of minors

The sbedirect.com site is not intended for minors under the age of 15. Creating a customer account is strictly reserved for adults or minors over 15 with parental authorization. No personal data should be submitted without such authorization. If you are a parent or legal guardian and believe your child has provided us with personal data, you can contact us at contact@sbedirect.com to request its deletion.

Changes to this policy

We may update this Policy at any time, notably because we update our services and/or because current regulations require us to do so. These changes will apply to personal data collected after the effective date stated in the Policy, and we will inform you via a notice on the Site or by any other means. We recommend regularly reviewing this Policy to stay informed about our privacy practices, with the most up-to-date version being the one dated at the bottom of the document.

Last updated: 03/28/2025