FREN

Version updated on 24/09/2026

1 - Data controller

The data controller for personal data collected via the website and the EVIACORE platform is: EVIACORE SAS Share capital: €30,000 RCS Bordeaux: 994 666 436 Registered office: 8 Allée Isaac Newton - 33650 Martillac Email: contact@eviacore.com EVIACORE determines the purposes and means of processing in accordance with: Regulation (EU) 2016/679 of 27 April 2016 (GDPR); the amended French Data Protection Act No. 78-17.

2 - Scope

This policy applies to all processing carried out in the context of: browsing the EVIACORE marketing website; creating client accounts; quote requests; use of the app.eviacore.com platform; execution of electronic assembly orders; commercial and technical exchanges. As EVIACORE services are intended exclusively for professionals, processing takes place in a B2B context.

3 - Personal data collected

EVIACORE may collect the following categories of data: Professional identification data first and last name; company; job title; professional phone number; professional email address. Business and contractual data quote and order history; billing information; commercial exchanges. Technical data industrial files transmitted (BOM, Gerber, Pick & Place, drawings, technical instructions); documents linked to electronic projects. Technical connection data IP addresses; connection logs; browsing information. Collected data is limited to what is strictly necessary to provide the services.

4 - Purposes of processing

Personal data is used for: creating and managing client accounts; issuing quotes; performing electronic assembly services (PCBA); administrative and accounting management; communication with clients; securing and administering the platform; service improvement and statistical analysis.

5 - Legal bases for processing

Processing is based on: performance of the contract between EVIACORE and the Client; compliance with legal and accounting obligations; EVIACORE's legitimate interest (security and service improvement); consent where required (non-essential cookies).

6 - Cookies

The site uses technologies needed to operate and to record your privacy choices through c15t. Google Analytics 4 measures website traffic only with your consent: no request to this service is made before consent. You can accept, reject, or change your audience measurement consent at any time through the "Manage cookies" link in the footer. The Contact form uses reCAPTCHA to protect message submission.

7 - Hosting and data recipients

Personal data is accessible to authorized persons within EVIACORE and to providers needed for the relevant services. Website hosting and services: O2Switch: hosting of presentation pages; OVHcloud - France: hosting of the app.eviacore.com platform, client accounts, orders, and technical documents; c15t (Inth), project hosted in Ireland: management and retention of consent choices; Google: audience measurement with Google Analytics 4 after consent, display of Google Maps when the Contact page is viewed, and reCAPTCHA verification of the Contact form. Operational client data on the platform is hosted within the European Union. EVIACORE does not sell or rent personal data.

8 - Retention periods

Data is retained only for the period necessary for the purposes pursued: technical documents: 1 year after the end of the commercial relationship; business data: for the duration of the contractual relationship; accounting documents: 10 years (legal obligation); technical logs: for the period necessary for system security. At the end of these periods, data is deleted or anonymized.

9 - Data security

EVIACORE implements appropriate technical and organizational measures to ensure: confidentiality; integrity; availability of personal data. These measures are intended to prevent unauthorized access, loss, alteration, or disclosure of data.

10 - Data subject rights

In accordance with the GDPR, any person has the following rights: right of access; right to rectification; right to erasure; right to object; right to restriction of processing. Requests may be sent to: contact@eviacore.com EVIACORE undertakes to respond within the applicable legal timeframes.

11 - Complaint to the supervisory authority

EVIACORE favors an amicable resolution of any request relating to personal data. In accordance with the GDPR, any data subject may lodge a complaint with the competent supervisory authority: Commission Nationale de l'Informatique et des Libertés (CNIL) https://www.cnil.fr

12 - Acceptance of the policy

When creating an account or validating an order, the user acknowledges having read this Privacy Policy and accepts the processing of their personal data in accordance with these provisions.