Privacy Policy

This Privacy Policy aims to inform you clearly and transparently about how we collect, process, and protect your personal data. It applies to all the services we offer. By using our services, you accept the practices described in this document. We are committed to complying with current regulations, including the General Data Protection Regulation (GDPR) and the Data Protection Act.

Your data is processed under the responsibility of:

Surron Europe
Address: 200 rue de la Croix Nivert, 75015, Paris, France
Email: [email protected]

If you have any questions regarding the protection of your personal data, you can contact our Data Protection Officer (DPO) at the following address: [email protected].

We collect data that you provide to us directly, especially when you:

• Create a customer account on https://surron-europe.com/en/>
• Place an order
• Subscribe to our newsletter
• Contact our customer service
• Participate in a contest or survey

Types of data

The data collected may include:

• Identification data: last name, first name, email address, phone number, postal address.
• Transaction data: order history, purchased products, amounts, payment methods (sensitive banking data is processed exclusively by our certified payment providers).
• Connection data: IP address, logs, browser type, navigation data on our site.
• Communication data: exchanges with our customer service.

Your personal data is processed for the following purposes:

• Fulfillment of your orders and management of customer relations (delivery, invoicing, after-sales service).
• Management of your customer account.
• Sending commercial information (newsletters, promotional offers) if you have consented.
• Improvement of our services and personalization of your experience on the site.
• Compliance with our legal and regulatory obligations (especially in accounting).
• Fraud prevention and transaction security.

Each processing of your data is based on a legal basis defined by the GDPR:

• Performance of a contract: the processing is necessary for the delivery of the ordered products.
• Consent: for sending newsletters and marketing communications. You can withdraw your consent at any time.
• Legal obligation: for the retention of invoicing data.
• Legitimate interest: for securing our website and improving our services, while respecting your rights and freedoms.

We retain your personal data only for the time necessary for the purposes for which it was collected, in accordance with legal obligations.

Reference periods

• Active customer account data: retained as long as the account is active. You can request its deletion at any time.
• Transaction and invoicing data: retained for the duration required by law (generally 10 years).
• Commercial prospecting data: retained for 3 years from your last active contact (e.g., opening an email, purchase).
• Cookie data: retained for a maximum period of 13 months.

Your data is intended for our authorized personnel and, where applicable, our technical providers and trusted partners, solely for the purposes described.

Categories of recipients

• Logistics and transport providers for the delivery of your orders.
• Secure payment providers for processing transactions.
• IT providers for site hosting and maintenance.
• Web analytics and marketing tools (in anonymized or pseudonymized form where possible).

We require all our providers to guarantee an adequate level of protection for your data and to use it only according to our instructions.

Your data is primarily stored and processed within the European Union.

In the event that some of our subcontractors operate from countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, in accordance with the GDPR, such as:

• An adequacy decision from the European Commission.
• The adoption of Standard Contractual Clauses (SCCs).
• Certification under the “Privacy Shield” framework for transfers to the United States (where applicable).

You can obtain more information about these safeguards by contacting us at [email protected].

In accordance with data protection regulations, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that data concerning you is being processed and receive a copy.
• Right to rectification: request the correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): request the deletion of your data, under certain conditions.
• Right to restriction of processing: request the suspension of processing in specific cases.
• Right to object: object to processing based on our legitimate interest, including for marketing purposes.
• Right to data portability: receive the data you have provided to us in a structured, machine-readable format.
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, contact us at [email protected] or by postal mail. We may ask you for proof of identity to verify who you are.

You also have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL).

Our site https://surron-europe.com/en/> uses cookies and other similar trackers.

What is a cookie?

A cookie is a small text file placed on your device when you visit a site. It allows your browser to be recognized and to remember certain information.

Purposes of cookies

• Essential cookies: necessary for the site to function (shopping cart, login). They cannot be disabled.
• Performance/analytics cookies: to analyze site traffic and improve its usability.
• Personalization cookies: to remember your preferences (language).
• Advertising/targeting cookies: to display relevant ads on our site or others.

You can manage your cookie preferences at any time via the information banner that appears on your first visit, or by configuring your browser settings. Refusing certain cookies may affect your browsing experience.

We implement all appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

These measures include, in particular:

• Encryption of sensitive data (such as login information).
• Securing our hosting infrastructures.
• Restricted access to data to authorized personnel only.
• Internal procedures for managing security incidents.

Despite all our efforts, no method of transmission over the Internet or electronic storage is 100% secure. In the event of a security incident affecting your data, we commit to informing you as soon as possible and to notifying the supervisory authority if the breach poses a risk to your rights and freedoms.

We reserve the right to modify this Privacy Policy at any time to comply with legal, regulatory, jurisprudential, or technological developments.

Any substantial modification will be brought to your attention in a visible manner, for example, via a notification on our website https://surron-europe.com/en/> or by email.

We encourage you to consult this page regularly to be aware of any updates. The date of the last update is indicated at the bottom of this policy.

By continuing to use our services after a modification has been published, you accept the new policy.

For any questions regarding this privacy policy or the protection of your personal data, you can contact us:

By email: [email protected] (for questions related to data protection)
By mail:
Surron Europe – Personal Data Service
200 rue de la Croix Nivert, 75015, Paris, France