Legal information
Privacy policy
What data we process when you visit the website, place an order or write to us, why we process it, who receives it, how long we keep it and how to exercise your rights.
1. Data controller
The controller of your personal data is Ateliers Bobinage Languedociens (ABL Transfo), a French limited liability company (SARL) registered with the Nîmes Trade and Companies Register (RCS) under number 390 167 070, with its registered office at ZI Lou Quiquilhan, 30260 Gailhan, France.
If you have any questions about your data, email us at [email protected] or write to ABL Transfo, ZI Lou Quiquilhan, 30260 Gailhan, France.
2. The data we process
- Identity and contact details: surname, first name, email address, telephone number, billing and delivery addresses; for business customers, company name and EU VAT number.
- Orders: products ordered, amounts, chosen delivery method and pickup point, invoices, parcel tracking, returns and correspondence with our customer service team.
- Payment: payment method used, transaction status and reference. We never receive your card number: it is processed by our payment service providers.
- Customer account: username, password (stored in irreversibly encrypted form), saved addresses; for a trade account, the information provided in your application.
- Your enquiries: the content of the messages you send us through the Contact and Quote forms, by email or by telephone, and, where applicable, any documents you send us.
- Live chat: the messages you exchange with us in the chat window, and any information you choose to give there.
- Reviews: the rating and comment you post about a product, published with the name you give.
- Blog questions and comments: the name, email address and text you post under an article, together with the IP address used to send it; the name and text are published once approved, the email address never is.
- Browsing: IP address, browser and device type, pages viewed, technical server logs, and the information collected by the cookies and trackers described in our cookie policy.
On the Order tracking page, the order number and email address you enter are used solely to find your order: they are not stored.
3. Why we process your data
| Purpose | Legal basis |
|---|---|
| Processing, preparing and delivering your orders, invoicing them, and handling returns, after-sales service and guarantees | Performance of the contract (Article 6(1)(b) of the GDPR) |
| Keeping our accounts and complying with our tax and commercial obligations | Legal obligation (Article 6(1)(c)) |
| Managing your customer account; reviewing trade account applications and applying business terms | Performance of the contract and pre-contractual steps (Article 6(1)(b)) |
| Responding to your contact and quotation requests | Pre-contractual steps taken at your request (Article 6(1)(b)) or our legitimate interest in replying to you (Article 6(1)(f)) |
| Securing the website and payments, and preventing fraud and abuse | Our legitimate interest (Article 6(1)(f)) |
| Establishing, exercising or defending our rights in the event of a dispute | Our legitimate interest (Article 6(1)(f)) |
The live chat window is used to answer the questions you ask us, at your request (Article 6(1)(b) of the GDPR).
After an order, we may invite you by email to leave a review and then publish it on the product page: this is based on our legitimate interest in gathering our customers’ feedback (Article 6(1)(f) of the GDPR). Every such email allows you to stop receiving them.
Audience measurement and tracking where visits come from help us understand how the website is used and improve it; they are based on your consent, under Article 6(1)(a) of the GDPR and Article 82 of the French Data Protection Act (loi Informatique et Libertés).
Measuring our Google Ads advertising and showing our adverts to people who have visited the website are also based on your consent.
If we send you marketing offers by email, we do so with your consent or, if you are already a customer, for products similar to those you have bought; business customers may receive offers related to their line of business. You can opt out of these emails at any time, free of charge, using the link in each message or by writing to us.
4. Who receives your data
Your data is processed by the people in our company who need it (sales, workshop, shipping, accounting) and by the following service providers, each within the scope of its own role:
- Hosting and maintenance: netcup GmbH (Germany), which hosts the website, our email and our management tools; astr.studio, which maintains the website; Cloudflare, Inc. (United States), which delivers and protects the website’s pages and provides the anti-bot check on our forms (Turnstile).
- Business management: Odoo SA (Belgium), our business management software (customers, orders, invoices), hosted in the European Union.
- Live chat: Odoo SA, which provides the website’s chat window.
- Card payments: WooPayments, a service of Automattic Inc., with card processing provided by Stripe (Stripe Payments Europe, Ltd., Ireland).
- PayPal payments: PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg).
- Bank transfers: our bank, for payments you make by bank transfer.
- Parcel delivery: Chronopost SAS (France) and, for shipments outside France, the companies in the DPD/Geopost network to which Chronopost entrusts delivery.
- Pallet delivery: Kuehne + Nagel.
- Audience measurement: Google Ireland Limited (Google Analytics, Google Tag Manager).
- Advertising: Google Ireland Limited (Google Ads).
- Website statistics: Automattic Inc. (United States), publisher of the Jetpack Stats and WooCommerce Analytics modules.
- Audience measurement and session recording: astr.studio, using the Rybbit tool hosted by netcup GmbH (Germany).
- Fonts: Google Ireland Limited, which provides some of the website’s fonts (Google Fonts).
- Security: Defiant, Inc. (United States), publisher of the Wordfence firewall, which receives the IP addresses from which intrusion attempts originate.
Our payment and delivery providers, and Google for its own services, also process certain data on their own account, in accordance with their privacy policies. Finally, your data may be disclosed to authorities that request it within a legal framework and, where necessary, to our advisers who are bound by professional secrecy (lawyer, chartered accountant).
We do not sell your data.
5. Transfers outside the European Union
Some of these providers, or their parent companies, are established in the United States (Google, Cloudflare, Automattic, Stripe, PayPal, Defiant). Where your data is transferred there, these transfers are based on the European Commission’s adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) for certified companies, or on the standard contractual clauses adopted by the European Commission.
For deliveries outside the European Union, the data needed for shipping is passed on to carriers in the destination country, as this is necessary to fulfil your order.
6. How long we keep your data
| Data | Retention period |
|---|---|
| Orders, invoices and accounting records | 10 years from the end of the financial year, under Article L123-22 of the French Commercial Code (Code de commerce) |
| Contracts concluded with a consumer for €120 or more | 10 years, under Article L213-1 of the French Consumer Code (Code de la consommation) |
| Customer account | Until it is deleted; an account with no login or order for 3 years is deleted |
| Contact and quotation requests with no follow-up, live chat conversations | 3 years from the last exchange |
| Guarantees and after-sales service | Duration of the guarantee, plus the applicable limitation periods |
| Customer reviews | For as long as the review is published |
| Blog questions and comments | For as long as the comment is published |
| Technical and security logs | 12 months maximum |
| Google Analytics audience measurement data | 14 months maximum |
| Rybbit audience measurement and session recordings | Visit statistics: 8 weeks; session recordings: 30 days |
| Cookies and other trackers | See our cookie policy |
We do not keep any payment card data. If you save your card in your account, it is stored by Stripe until you delete it.
7. Security
The website can only be accessed over an encrypted connection (HTTPS). Payments go through PCI DSS-certified providers; passwords are stored in irreversibly encrypted form; access to data is restricted to the people who need it; encrypted backups are made every night and stored in the European Union.
We do not take any decision based solely on automated processing that would produce legal effects concerning you. Our payment service providers use automated fraud detection tools, which may result in a payment being declined.
8. Your rights
You have the right to access, rectify and erase your data, the right to restrict processing, the right to portability of the data you have provided to us, and the right to object to processing based on our legitimate interest, in particular to direct marketing. Where processing is based on your consent, you may withdraw that consent at any time. You may also give instructions on what is to happen to your data after your death.
To exercise these rights, write to us at [email protected] or to ABL Transfo, ZI Lou Quiquilhan, 30260 Gailhan, France. We will reply within one month, which may be extended by two months for a complex request; if we have reasonable doubts about your identity, we may ask you to prove it.
Some data cannot be erased for as long as the law requires us to keep it (invoices, for example).
9. Complaints
If you believe that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – www.cnil.fr – or with the data protection authority of the European Union country in which you live.
10. Cookies
The cookies and other trackers used on the website, their purpose, how long they last and how to make your choices are described in our cookie policy.
11. Updates to this policy
We update this policy when our processing changes; the date of the last update is shown at the top of the page.
Printed from abltransfo.com — version of 30 September 2026.