PRIVACY POLICY
FEBUS Optics SAS (« FEBUS Optics »)
SIREN : 811 377 613
Capital social : 89 990,00 €5 rue Sophie Germain, 64000 Pau, France
Phone: +33 (0)5 64 27 07 43
General Contact Email: info@febus-optics.com
Contact DPO : dpo@febus-optics.com
This policy was last revised on February 24, 2026.
GENERAL
FEBUS Optics acts as a data controller of the personal data collected in the course of its activities. As such, we ensure that the collection, use and retention of your data complies with the General Data Protection Regulation (GDPR) and applicable privacy laws.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR"), as well as French data protection legislation, every data subject has the right to protection of his or her privacy and protection against misuse of his or her personal data.
The operators of this website take the protection of personal data very seriously and treat it confidentially in accordance with the applicable legal provisions and this privacy policy.
In cooperation with our hosting providers, we do everything possible to protect the databases against unauthorised access, loss, misuse or falsification.
We would like to point out that the transmission of data via the Internet (e.g. communication by e-mail) may be subject to security gaps. Complete protection against third-party access is not possible.
By using this website, the data subject explicitly consents to the collection, processing and use of his or her personal data, in accordance with this Privacy Policy. This consent is obtained through affirmative action, such as submitting a form, selecting a checkbox, or any other equivalent action. The site can generally be accessed without registration. Data such as pages viewed, files accessed, date and time are stored on the server for statistical purposes, without being directly linked to the data subject.
When personal data (name, address or e-mail addresses) is collected, this is done on a voluntary basis as far as possible. This data will not be passed on to third parties without the explicit consent of the data subject.
PROCESSING OF PERSONAL DATA
Personal data is any information about an identified or identifiable person.
A data subject is one about whom personal data is processed.
Processing includes any manipulation of personal data, regardless of the means and procedures used, including storage, communication, acquisition, deletion, retention, modification, destruction and use of personal data.
FEBUS Optics processes personal data in accordance with French law and the GDPR.
Categories of data collected: FEBUS Optics may collect and process the following categories of personal data:
- Identity data: surname, first name.
- Contact information: email address, phone number, mailing address.
- Business data: job title, company, order information.
- Browsing data: IP address, pages viewed, files accessed, date and time of consultation.
- Content of messages sent: information contained in contact forms or emails.
- Optional additional data: Geographic area or any information provided via the drop-down menus in the form.
Purposes of processing: The personal data collected by FEBUS Optics is used only for legitimate and specific purposes, in particular:
- Management of contact requests and requests for information.
- Customer relationship management and order tracking.
- Technical support and customer assistance.
- Invoicing and administrative management.
- Compliance with legal and accounting obligations.
- Site security and protection against unauthorized access.
- Statistical analysis of attendance and improvement of services.
Legal basis and consent: In accordance with Article 6(1) of the GDPR, each processing carried out by FEBUS Optics is based on a specific legal basis. The correspondence between the purposes and the legal bases is as follows:
- Management of contact and information requests: Consent (Art. 6(1)(a) GDPR) when the person voluntarily fills in the form and provides their data.
- Customer relationship management, order tracking and services: Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
- Technical support and customer assistance: Performance of a contract (Art. 6(1)(b)), when the assistance is related to a service rendered. Legitimate interest (Art. 6(1)(f)), to respond to non-contractual technical requests.
- Invoicing, administrative management and legal obligations: Legal obligation (Art. 6(1)(c)), including accounting and tax obligations.
- Site security, prevention of unauthorized access, log management: Legitimate interest (Art. 6(1)(f)), consisting of ensuring the security of the site, the network and data.
- Statistical analysis of traffic and improvement of services: Consent (art. 6(1)(a)) when it involves non-essential cookies. Legitimate interest (Art. 6(1)(f)) when the data is strictly anonymised or necessary for the operation of the website.
- Compliance with legal obligations and response to public authorities: Legal obligation (Art. 6(1)(c)).
Consent is collected explicitly when collecting personal data, e.g. via online forms or checkboxes. The data subject may withdraw his/her consent at any time, without justification, by contacting the address indicated in this policy or by using the mechanisms provided (unsubscribe link, account settings, etc.). The withdrawal of consent does not affect the lawfulness of the processing carried out before such withdrawal.
Automated Decisions and Profiling: FEBUS Optics does not carry out any automated decision-making, including profiling, that has legal or significant effects on data subjects. All decisions involve human control and are only used for the purposes described in this Privacy Policy.
Retention period: FEBUS Optics retains personal data only for the time strictly necessary for the purposes for which it was collected, in accordance with the principle of minimization provided for by the GDPR. The retention periods are as follows
- Contact form data: Kept for 3 years from the last contact or interaction initiated by the data subject, in the absence of a contractual relationship.
- Data necessary for the execution of a contract / orders: Kept for the duration of the contract, then 10 years after its end to comply with legal obligations in accounting and tax matters.
- Browsing data and server logs (logs): Kept between 6 months and 1 year, exclusively for security reasons, incident detection and prevention of unauthorized access.
- Technical support data: Retained for the time necessary to process the request and then archived for 2 years for follow-up purposes.
- Data used for statistical purposes: Kept in an anonymised version, without any particular limit, or deleted after 13 months when they come from cookies subject to consent.
- Data subject to specific legal obligations: Retained for the period imposed by applicable law. (E.g.: accounting documents = 10 years.)
- Data for which consent is withdrawn: Deleted within a maximum period of 30 days after the withdrawal of consent, unless otherwise required by law.
RECIPIENTS OF THE DATA
The personal data collected by FEBUS Optics may only be communicated to the following recipients:
- Authorized internal personnel within FEBUS Optics
- Service providers required for data processing (hosting provider, CRM, IT support, marketing tools, etc.)
- Group subsidiaries, in connection with customer contact management and technical support
FEBUS Optics ensures that all recipients respect data privacy and security in accordance with the GDPR.
DATA SECURITY
FEBUS Optics implements appropriate technical and organizational measures, such as regular security audits, vulnerability tests, as well as procedures for rapid response in the event of a data breach. These measures include SSL/TLS encryption to secure the transmission of confidential data, rigorous access controls and regular backups to ensure the integrity and availability of data:
- SSL/TLS encryption to secure the transmission of confidential data, such as requests sent by data subjects.
- Access controls to systems and data to limit access to authorized individuals.
- Regular backups of stored information to ensure its integrity and availability.
- Internal organizational measures to raise awareness among staff and prevent unauthorized access or use of data.
COOKIES
For more information about the use of cookies on this site and the data subject's choices regarding them, please see our Cookie Policy.
SSL/TLS SECURITY
This website uses SSL/TLS encryption to protect the transmission of confidential content, such as requests from the data subject. A secure connection is recognizable by the "https://" in the address bar and the padlock symbol.
SERVER LOG FILES
The site provider automatically collects and stores certain information in log files:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the request
This data cannot be attributed to a specific individual and is not combined with other sources of data that can be identified.
These files are kept for a limited period of time, usually between 6 months and 1 year, to ensure the security of the site and to follow up on incidents. This data is used exclusively for security purposes and is not combined with other data sources that allow users to be identified.
THIRD-PARTY SERVICES
The site can use Google Maps, Google Invisible reCAPTCHA and YouTube. These services may use cookies and transfer data to the United States. FEBUS Optics has taken measures to protect personal data in accordance with the GDPR. You can manage your cookie preferences through our Cookie Policy. For more information on how these services process your data, see their respective privacy policies:
All Youtube videos embedded on the site use the domain https://www.youtube-nocookie.com which corresponds to Youtube's official Advanced Privacy Mode and ensures that no YouTube advertising cookies are dropped when the page is loaded. By performing an action on the site (when clicking on "Play"), the technical data is transmitted:
- IP address
- user-agent
- Referrer
RIGHTS OF DATA SUBJECTS
In accordance with the GDPR, any person whose personal data is processed by FEBUS Optics has the following rights:
- Right of access: to obtain confirmation that their data is being processed and, where applicable, to receive a copy of the personal data.
- Right to rectification: to request the correction of inaccurate data or the completion of incomplete data.
- Right to erasure ("right to be forgotten"): to request the deletion of data when it is no longer necessary or when consent is withdrawn.
- Right to restriction of processing: to request that processing be restricted in certain situations, for example if the accuracy of the data is contested.
- Right to data portability: to receive your data in a structured and machine-readable format and, if possible, to request their transmission to another data controller.
- Right to object: to object at any time to the processing of data, in particular for direct marketing.
- Right to withdraw consent: at any time for processing based on consent, without affecting the lawfulness of the processing carried out before the withdrawal.
Exercising rights: The data subject may exercise his/her rights by contacting the Data Protection Officer at: dpo@febus-optics.com. FEBUS Optics will respond within one month in accordance with the GDPR. This period may be extended by a further two months if necessary, taking into account the complexity and number of applications. The person concerned will be notified of any extension within one month of the request.
Appeal: If the data subject believes that his or her rights have not been respected, he or she has the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) https://www.cnil.fr/fr or the competent authority.
Proof of identity may be requested in order to ensure data security.
TRANSFER OF DATA TO THIRD COUNTRIES
FEBUS Optics may transfer personal data to countries outside the European Economic Area (EEA), in particular when some of our service providers are located outside the EU.
In this case, FEBUS Optics ensures that these transfers are made in accordance with the GDPR, applying appropriate protection mechanisms, such as Standard Contractual Clauses (SCCs), or any other mechanism approved by the European Commission. If a new mechanism is put in place, the person concerned will be informed.
No data is transferred outside the EEA without adequate safeguards in place.
AMENDMENTS
FEBUS Optics reserves the right to modify this privacy policy at any time, in particular in order to take into account legal, regulatory, jurisprudential or technical developments. The version in force is the one published on the site at the time of the consultation. Where the changes are likely to substantially affect the rights of the data subject, the data subject will be informed by any appropriate means.
In the event of a substantial change, a notification by email or banner on the site will be made.