Privacy policy — GDPR

Cable Avenue SAS, acting as data controller, is committed to protecting the personal data of its customers and visitors, in compliance with the General Data Protection Regulation (EU 2016/679).

1. Data collected

Cable Avenue collects only the data necessary to provide its services:

• Identity: last name, first name, company name, job title.
• Contact: business email, phone number, postal addresses (delivery, billing).
• Company data: SIRET number, intra-EU VAT number, KBIS, bank details.
• Transactional data: order history, quotes, invoices, outstanding balances.
• Technical data: IP address, browser type, pages viewed (for purely anonymized statistical purposes).

2. Processing purposes

• Performance of the B2B sales contract (orders, invoices, deliveries).
• Management of the customer account and the B2B portal.
• Creditworthiness checks (Banque de France lookup for new Pro accounts).
• Transactional communications (confirmations, tracking, reminders).
• Marketing communications (monthly newsletter, opt-in only).
• Accounting and tax obligations (10-year retention of accounting records).

3. Legal basis

Processing is based on the performance of the contract (orders, deliveries), on legal obligations (accounting, anti-money-laundering) and on our legitimate interest (service improvement). Marketing communications rely on the recipient's explicit consent.

4. Retention periods

• Active customer account: for the entire duration of the business relationship.
• Inactive account: 3 years after the last order, then anonymization.
• Accounting records: 10 years (legal obligation).
• Newsletter data: until unsubscription, and 3 years after the last interaction.
• Technical logs: 12 months maximum.

5. Recipients

Data is accessible only to:

• Cable Avenue's internal departments (sales, logistics, accounting, support).
• Our technical subprocessors under GDPR contract (Vercel EU hosting, Stripe payment, UPS / DPD / Chronopost carriers).
• Administrative or judicial authorities upon legal request.

No data is sold to third parties. No transfer outside the European Union is carried out.

6. Your rights

In accordance with the GDPR, you have the following rights at any time:

• Access to the data concerning you.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”), within the limits of our legal obligations.
• Restriction of processing.
• Portability of your data in a structured format (CSV, JSON).
• Objection to processing, in particular for marketing.
• Withdrawal of consent at any time.

To exercise your rights, write to dpo@cableavenue.fr (Data Protection Officer). You will receive a response within 30 days maximum. In the event of disagreement, you may lodge a complaint with the CNIL.

7. Security

Cable Avenue implements appropriate technical and organizational measures to ensure data security (TLS encryption, encrypted daily backups, strict access control, annual ISO 27001 audit). Any significant incident is reported to the CNIL within 72 hours.

Last updated: 14 May 2026. DPO contact: dpo@cableavenue.fr.