Last updated: February 2025.

1 Data Protection Statement

We are pleased that you are interested in our company. The management of ANJOU AUTOMATION attaches particular importance to the security of user data and to compliance with data protection law. You can visit the website www.anjouautomation.com without providing any personal data. However, we may need to process your personal data if you wish to benefit from specific services offered by our company through our website. With this data protection statement, our company wishes to inform you of the nature, scope, and purpose of the personal data we collect, use, and process, as well as your rights in this regard. As Data Controller, ANJOU AUTOMATION has implemented numerous technical and organizational measures with the aim of ensuring the most complete protection possible of the personal data collected on this website. Our website contains links to other providers’ or partners’ websites. Our Privacy Policy does not extend to the protection of your data on these websites. The data that may be collected by the operators of these sites is beyond our knowledge and control. The transmission of data over the Internet may involve security gaps, outside of the tools we make available to you, making it impossible to guarantee absolute protection. We recommend the greatest caution when browsing the Internet. For this reason, you also have the option of sending us your data by other means, such as by phone or by mail.

2 Identity of the Data Controller

Data Controller entity: The Controller, within the meaning of the General Data Protection Regulation, any data protection law in force in the Member States of the European Union, or any other directive relating to data protection, is:

Société ANJOU AUTOMATION

1 rue de Tours 49300 CHOLET FRANCE Phone: +33 02 51 63 02 82 Email: contact@groupe-nadia.com Website: www.anjouautomation.com

Data Protection Officer contact details: Email: dpo@groupe-nadia.com

3 Definitions

This data protection statement is based on the terminology of the General Data Protection Regulation (GDPR).

3.1 Personal data

Personal data refers to all information concerning an identified or identifiable natural person (hereinafter “data subject”), including by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

3.2 Data subject

A data subject is an identified or identifiable natural person whose personal data is processed by the controller.

3.3 Processing

Processing means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

3.4 Controller

The controller is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing. Where the purposes and means of such processing are determined by Union or Member State law, the controller may be designated, or the specific criteria for their designation may be provided for, by Union or Member State law.

3.5 Processor

The processor is the natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

3.6 Recipient

The recipient is the natural or legal person, public authority, agency, or other body to which personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.

3.7 Third party

A third party is a natural or legal person, public authority, agency, or body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

3.8 Consent

Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

4 Information on the collection of personal data

4.1 General data and information collection

ANJOU AUTOMATION needs to collect personal information from you in order to provide you with a service. We collect personal information when you provide it to us, by phone, mail, email, or through your use of one of our websites or of our products and services. Please note that, in certain circumstances, when you do not provide the personal information we need, we will not be able to provide the products and services you have subscribed to, or we may not be able to comply with a legal obligation. Through data collection, ANJOU AUTOMATION can provide its customers with user-friendly services and optimize the information and offers presented on our site to better meet public expectations.

4.2 Categories of personal data

Each time a person visits the www.anjouautomation.com website, certain general data and information are recorded and stored in the server’s log files. The following data may thus be recorded:

  • the type and version of the web browser used,
  • the operating system of the computer,
  • the URL of the site from which the system accessed the www.anjouautomation.com site,
  • the sub-sites from which the system accessed the www.anjouautomation.com site,
  • the date and time of access to our site,
  • the system’s Internet service provider,
  • any other similar data and information that would allow us to guard against an attack on our IT systems.

This data and information, collected anonymously, will be evaluated by ANJOU AUTOMATION for statistical purposes and with the aim of improving the protection and security of our company’s data, thereby ensuring optimal protection of the personal data we process. The anonymous data from the server log files will be stored separately from all other personal data of the data subject. In the course of our business, we may process the following categories of personal data:

  • Contact data: for example, first name, last name, company name, address (private and/or business), date of birth, nationality; also phone number, email address (private and/or business).
  • Optional data: this is data you provide to us without our requesting it, such as your preferences regarding vehicle equipment or vehicle category. It may also include other information such as data concerning your travel to the agency (flight, train, transfer, etc.).

5 Use of social media and web tools

5.1 Use of Meta tools

A social network is a social platform on the Internet, an online community, which normally allows users to communicate with each other and interact in the virtual space. A social network can serve as a platform for the exchange of opinions and experiences or allow the Internet community to present personal or commercial information. ANJOU AUTOMATION is active on various social media.

ANJOU AUTOMATION Facebook page — Facebook: 1 Hacker Way, Menlo Park, California 94025, USA

ANJOU AUTOMATION Instagram page — Instagram: 200 Jefferson Dr, Menlo Park, CA 94025, United States.

We have no knowledge of the content of the data transmitted or of its use by these companies. You may consult the privacy policies of these individual companies for more information on the purpose and scope of their processing of data, as well as their provisions regarding the use of your personal data: Facebook Inc. For individuals residing outside the United States or Canada, the controller of personal data is Meta Platforms Ireland Limited, which you may contact online or by mail at: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

5.2 Use of Google tools

The website www.anjouautomation.com uses several tools offered by Google. This allows us to be more efficient, stay organized, grow our business, and always be there for you.

5.2.1 YouTube channel

ANJOU AUTOMATION YouTube channel — YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA — google.com/privacy?hl=en&gl=en#infocollect

5.2.2 Google Analytics

ANJOU AUTOMATION uses a website analysis service provided by Google. Analytics uses methods that allow a detailed analysis of website usage by visitors, while anonymizing most of the data collected. The service uses cookies, text files stored on the data subject’s computer, and transmits them to a Google server. Among other things, the following data is studied: the URL of the site (referrer) from which the system accessed another site, which individual pages of the website the user visited, how often, and for how long. Google uses this information to evaluate the use of the www.anjouautomation.com website by visitors, to compile reports on site activity, and to provide additional services related to the use of the Web and the Internet. This data essentially allows us to optimize the www.anjouautomation.com website and to carry out a cost-benefit analysis of internet advertising.

5.2.3 Google Ads

Our services use Google Ads, Google’s online advertising platform, in order to know the number of users who clicked on our ads and were directed to a page equipped with a conversion tracking tag. Google Ads installs a cookie on your computer (“Conversion Cookie”) when you arrive on our website via a Google ad. These cookies are valid for only 30 days and cannot personally identify you.

5.2.4 Remarketing

Through the Google Ads platform, we create remarketing or retargeting campaigns. Remarketing offers the ability to reach visitors who have already interacted with the www.anjouautomation.com website, whether on desktop or mobile. This allows us to reposition advertisements to our visitors as they browse Google or its partner websites. The display of advertising is done through the use of cookies. You can disable cookie storage by adjusting your browser settings accordingly and/or by opting out of Google remarketing data collection via the following link: www.google.com/policies/technologies/ads/.

5.2.5 Google’s privacy policy

Google’s privacy policy contains further information on the purpose and scope of Google’s use of data at safety.google.com. You will also find information there regarding your rights and the configuration options available to protect your privacy under their Privacy Rules. Google processes some of your personal data in the United States and relies on standard contractual clauses for such data transfers within its advertising and measurement products. Where applicable, Google may disclose personal data collected through this technique to third parties. We are awaiting legal developments to further ensure the security of your data during its transfer to the USA and will amend this Privacy Policy as soon as we are able to do so. You may contact Google online or at the following address: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

5.3 Purpose and legal basis of processing

Below we specify the legal bases on which we carry out our data processing:

The purposes for which we collect information are as follows:

Processing of this information is justified by:

Performance of a contract to which the data subject is party. This is the case, for example, for the processing of data related to the provision of a service. The same applies to the processing of data related to the performance of pre-contractual measures, for example for inquiries concerning our products or services, as well as to understand your requests and respond to them as best as possible.

Art. 6(1)(b) GDPR: processing of your request results from the performance of the Contract between You and Us.

Compliance with a legal obligation to which our company is subject, for example compliance with tax obligations.

Art. 6(1)(c) GDPR.

Protection of the vital interests of the data subject or of another natural person. For example, if a visitor is injured while visiting one of our agencies, we may need to provide their name, age, social security number, or other essential information to a doctor, hospital, or other third party.

Art. 6(1)(d) GDPR.

The data processing measures are necessary for the purposes of the legitimate interests pursued by our company or by a third party (unless overridden by the interests or fundamental rights and freedoms of the data subject). Such processing measures are permitted because they are specifically mentioned in European legislation, which considers that a legitimate interest may exist if the data subject is a customer of the controller (Recital 47, second sentence, GDPR).

The conduct of our business activities for the prosperity of all our employees, all our customers, and our shareholders. For example, among others: ensuring proper administration and management of our customer relationships; understanding how our customers use our services and optimizing our vehicle fleet; analyzing the services or products our customers want, or how they would like our services and products to be improved; understanding how our customers use our websites and identifying problems arising from this use; improving the customer experience; improving the promotions and benefits we can offer our customers.

Art. 6(1)(f) GDPR.

Apart from the above cases, our company uses consent as the legal basis for the processing of personal data for each specific purpose, such as informing our customers about the various products and services we offer and notifying them of new developments; understanding customer feedback and responding to it as best as possible; managing disputes and accidents and obtaining legal or professional advice.

Art. 6(1)(f) GDPR.

5.4 Retention period of personal data

The retention period of your personal data varies depending on the purpose of its collection:

Contact data, optional data, and contractual data are retained for the entire duration of the business relationship, and undergo selective archiving beyond that, not exceeding 3 years from the last date of contact.

Phone conversations with our customer support are not retained.

Cookies placed on your device are retained for the duration of your browser session, and in any case cannot be retained for more than 13 months, notably those from Google or HubSpot that you may have accepted.

6 Recipients of personal data

6.1 Internal transmission

ANJOU AUTOMATION transmits your data internally to various specialized departments (mainly the Marketing department and the Information Systems Department) in order to comply with its legal and contractual obligations. Personal data is only transmitted or disclosed to the extent necessary, according to the requests of the data subjects, and in compliance with applicable data protection regulations.

6.2 Transmission within the Group

ANJOU AUTOMATION is a subsidiary of Groupe Nadia, a company based in France operating at the European level. ANJOU AUTOMATION may share information concerning data subjects with other entities of Groupe Nadia if the contact request requires it.

6.3 Transmission to third parties

ANJOU AUTOMATION may transmit personal data to specific third parties in order to make available the corresponding services or applications. These third parties provide external services. They only process the data according to our instructions, and are prohibited from using this data for their own commercial purposes. These third parties notably include our host OVH, the website-building tool WordPress, or ANJOU AUTOMATION’s dealer partners when the request requires it.

6.4 Transfer to a third country or an international organization

ANJOU AUTOMATION may transfer personal data to recipients located in countries outside the European Economic Area (EEA) for the purposes mentioned above. Such transmission only takes place to fulfill our contractual and legal obligations or on the basis of your consent. Transfer conditions are protected in accordance with applicable personal data protection regulations.

7 Rights of data subjects

You may exercise any right described in this section with our Data Protection Officer, designated as competent under this Privacy Policy. To exercise these rights, please contact us by email at dpo@groupe-nadia.com or by mail at ANJOU AUTOMATION | Data Protection Officer | 1 rue de Tours, 49300 CHOLET, FRANCE.

7.1 Right of confirmation

European directives and regulations grant the data subject the right to obtain from the controller confirmation as to whether or not personal data concerning them is being processed.

7.2 Right of access

European directives and regulations grant the data subject whose personal data is processed the right to obtain, free of charge, from the controller information about the personal data collected concerning them, the purpose of the processing, the categories of data concerned, the recipients or categories of recipients to whom this data has been disclosed, the retention periods, as well as a copy of this information.

7.3 Right to rectification

You have the right to ask us to correct inaccurate or incomplete personal information concerning you. We will endeavor to update your personal data as soon as possible.

7.4 Right to erasure

In accordance with European directives and regulations, the data subject has the right to obtain from the controller the erasure, as soon as possible, of personal data concerning them where one of the following grounds applies and insofar as their processing is not required:

  • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • The data subject withdraws the consent on which the processing is based, pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
  • The data subject objects to the processing pursuant to Art. 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR.
  • The personal data has been unlawfully processed.
  • The data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data was collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.

If a data subject wishes for personal data recorded by ANJOU AUTOMATION to be erased, they may contact the Data Protection Officer at any time. The Officer will ensure that the request is dealt with as soon as possible. Please note that we may retain certain information about you when required by law or when we have a legitimate reason to do so.

7.5 Right to restriction of processing

The data subject has the right to obtain from the Controller the restriction of processing of personal data where one of the following applies:

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the data.
  • The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead.
  • The controller no longer needs the personal data for the purposes of processing, but it is still required by the data subject for the establishment, exercise, or defense of legal claims.
  • The data subject has objected to processing pursuant to Art. 21(1) GDPR, pending verification as to whether the legitimate grounds pursued by the Data Protection Officer override those of the data subject.

As a responsible company, we refrain from automated decision-making processes or profiling.

7.6 Right to data portability

The data subject also has the right to data portability, that is, the right to receive the Personal Data they have provided in a structured, commonly used, and machine-readable format, and the right to transmit that data to another controller. Where the data subject exercises their right to data portability pursuant to Art. 20(1) GDPR, they also have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided this does not adversely affect the rights and freedoms of third parties.

7.7 Right to object

In accordance with European directives and regulations, every data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data. From that point on, ANJOU AUTOMATION will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims. The data subject also has the right to object to the processing of their personal data for direct marketing purposes.

7.8 Withdrawal of your consent to data processing

In accordance with European directives and regulations, every data subject has the right to withdraw their consent to the processing of their personal data at any time. To do so, you may use the link to the Cookie Management Panel directly on the www.anjouautomation.com website, or contact our Data Protection Officer.

7.9 Right to lodge a complaint

The data subject has the right to lodge a complaint concerning the processing of personal data with our Data Protection Officer or with a supervisory authority (www.cnil.fr). In addition, you have the legal right to define directives regarding the fate of your personal data after death. To exercise these rights, you must contact our Data Protection Officer.

8 Amendment of the privacy policy

ANJOU AUTOMATION may make changes to this privacy policy. If we make any significant changes to this privacy policy and to the way we use your personal data, we will post such changes on this page and will make efforts to notify you of any significant changes.

9 Anjou Solar Drive mobile application

The Anjou Solar Drive application allows you to control solar-powered drive units via Bluetooth Low Energy (BLE). It is available on Android and iOS.

Data collected The application does not collect, store, or transmit any personal data. No internet connection is established. All communications take place exclusively locally between your mobile device and the motor within Bluetooth range.

Permissions requested

  • Bluetooth (Scan & Connect): to detect and connect to motors.
  • Location (Android and iOS): required by the operating system to enable Bluetooth Low Energy scanning. No geographic position is read, used, or stored.

Data exchanged with the device The data exchanged is purely technical in nature: motor status, battery level, ambient temperature, configuration settings (schedules, setpoints). This data does not leave your mobile device and is deleted when the application is closed.

Third parties The application does not integrate any advertising, analytics, or tracking SDK.