Last updated : 20 September 2026
This privacy policy describes how Symétrie collects, uses and protects the personal data of users of the website https://symetrie.com, in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the amended French Data Protection Act of 6 January 1978.
This translation is only provided to help non French readers to understand our policy. The French version alone has legal value.
1. DATA CONTROLLER
The data controller is:
Symétrie, a limited liability company (S.A.R.L.) with a share capital of €100,000, whose registered office is situated at 30 rue Jean-Baptiste Say, 69001 Lyon, registered with the Lyon Trade and Companies Register (R.C.S.) under number 424 745 453
Website: https://symetrie.com
Contact (GDPR Data Protection Officer): contact@symetrie.com
If you have any questions regarding the processing of your data, please write to the address above.
2. DATA COLLECTED
When using the symetrie.com website, the following data may be collected:
- Email address collected when you subscribe to the newsletter, with your explicit consent
- Account details (username, email address, encrypted password, preferences) relating to your customer account
- Billing and transaction data (name, address, order history). Bank details are processed directly by our secure payment provider and are never stored on our servers.
3. PURPOSES OF PROCESSING
Your personal data is processed for the following purposes:
- To send you our newsletter and marketing communications
- To manage your user account and grant you access to your customer account
- To process your orders, payments and invoicing obligations
- To ensure the security, maintenance and proper functioning of the website.
4. LEGAL BASIS FOR PROCESSING
Each processing operation is based on a specific legal basis within the meaning of Article 6 of the GDPR:
- Newsletter: consent of the data subject (Article 6(1)(a) of the GDPR)
- Customer account and orders: performance of a contract (Article 6(1)(b) of the GDPR)
- Security and legal obligations: legal obligation and legitimate interest (Articles 6(1)© and 6(1)(f) of the GDPR)
5. RETENTION PERIOD
Data is retained only for as long as is necessary for the purposes for which it was collected:
- Newsletter data: until unsubscription, then for a maximum of 3 years of inactivity
- Account data: for the entire lifetime of the account, then deleted within 12 months
- Billing data: 10 years (accounting and tax requirements)
- Log files: for a maximum of 12 months
6. RECIPIENTS AND HOSTING
The data collected is intended for Symétrie’s internal departments. The website is hosted by Alwaysdata, which ensures the secure storage of data. Emails are sent via Sparkpost. Payment data is transmitted to our secure payment service provider (a data processor within the meaning of Article 28 of the GDPR). No data is transferred or sold to third parties for commercial purposes.
7. YOUR GDPR RIGHTS
In accordance with Articles 15 to 22 of the GDPR, you have the following rights in relation to your data:
- Right of access (Article 15)
- Right to rectification (Article 16)
- Right to erasure (Article 17)
- Right to restriction of processing (Article 18)
- Right to data portability (Article 20)
- Right to object (Article 21)
- Right to withdraw your consent at any time
To exercise these rights, please send your request to: contact@symetrie.com. You will receive a response within one month at the latest.
8. COMPLAINTS TO THE CNIL
If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL):
CNIL, 3 place de Fontenoy, 75007 Paris
Website: www.cnil.fr
9. CONTACT
For any queries regarding this privacy policy or the processing of your personal data: contact@symetrie.com.