Privacy policy

Controller

The controller is Schulhof Energies, [Forme juridique et capital social – à compléter], 101 Chemin des Serres, 04700 Puimichel, France, RCS Manosque B 920 558 079, represented by Mr Christian Schulhof, managing director. Contact: christian.schulhof@gmail.com, +33 6 16 25 23 74.

Data protection officer: [Délégué à la protection des données – non désigné à ce jour / coordonnées à compléter le cas échéant].

How the Website works

The Website is a static website. The fonts and software libraries it uses are hosted on its own server: browsing it does not trigger any calls to third-party services such as Google Fonts.

The 3D configurator and the PDF quotation are generated directly in your browser. The choices you make in the configurator are not sent to us unless you submit a quotation request [à vérifier : utilisation éventuelle du stockage local du navigateur pour conserver la configuration].

Like any web server, the hosting provider's server records technical logs (IP address, date and time, page requested, browser) that are necessary for the security and proper functioning of the Website. These logs are kept by the hosting provider for [durée de conservation des journaux – à vérifier auprès de l'hébergeur] and are not used for marketing purposes.

Cookies and trackers

As at the date of this policy, the Website does not place any cookies or other trackers on your device and does not use any audience measurement, advertising or social media tools. No consent banner is therefore displayed.

Should a privacy-friendly audience measurement tool be added, this policy would be updated beforehand and, where required, your consent would be obtained in accordance with Article 82 of French Law No. 78-17 of 6 January 1978 and the recommendations of the CNIL.

Data collected

When you request a quotation using the form on the Website, we collect the following data: first name, last name, postal address, postcode, city, country, email address, mobile phone number, the configuration chosen (shape, finish, any accessories) and your agreement expressed by ticking the checkbox. Mandatory fields are marked in the form; if they are not completed, we will be unable to process your request.

When you become a customer, we also process the data needed to perform the contract: information on the order, delivery and installation, billing and payment data, the stove's serial number, and communications relating to after-sales service and the warranty.

Current and intended operation: [à adapter selon l'outil d'envoi retenu : e-mail / CRM, et ses sous-traitants]. In the version online at the date of this policy, the form does not transmit any data: the information entered remains in your browser and is used only to generate your PDF quotation. Once sending is activated, your request will be forwarded to Schulhof Energies by email so that we can prepare your quotation and call you back; this policy describes that intended operation.

Purposes and legal bases

Your data are processed for the following purposes, each based on a legal basis provided for in Article 6 GDPR:

• Responding to your quotation request, calling you back, arranging the technical appointment and drawing up the final quotation: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
• Managing the pre-contractual and contractual relationship: order, invoicing, delivery, installation where applicable, legal guarantees and commercial warranty, after-sales service, remote maintenance: performance of the contract (Article 6(1)(b) GDPR).
• Commercial follow-up of your quotation request (follow-up about the quotation requested): legitimate interest of Schulhof Energies in responding to your request (Article 6(1)(f) GDPR).
• Sending you marketing communications if you are a private individual (offers, news, by email, text message or telephone): your prior consent (Article 6(1)(a) GDPR, Article L. 34-5 of the French Postal and Electronic Communications Code and Article L. 223-1 of the French Consumer Code [à vérifier : régime issu de la loi n° 2025-594 du 30 juin 2025]), subject, for existing customers, to the exception for similar products or services provided for in Article L. 34-5.
• Sending you marketing communications related to your business if you are a professional: legitimate interest of Schulhof Energies (Article 6(1)(f) GDPR), which you may object to at any time.
• Complying with our legal obligations, in particular accounting and tax obligations: legal obligation (Article 6(1)(c) GDPR).
• Establishing, exercising or defending legal claims and handling any disputes: legitimate interest of Schulhof Energies (Article 6(1)(f) GDPR).
• Ensuring the security of the Website (technical logs): legitimate interest of Schulhof Energies (Article 6(1)(f) GDPR).

Retention periods

Your data are kept for a limited period proportionate to the purpose pursued:

• Prospects (quotation request not followed by an order): three years from your last contact with us; at the end of this period we may ask whether you wish to continue receiving our information, failing which your data are deleted.
• Customers: for the entire duration of the contractual relationship, including the term of the commercial warranty (up to 15 years), and then for the applicable statutory limitation periods, in restricted-access intermediate archiving [durée exacte à préciser].
• Accounting records and invoices: ten years from the end of the financial year (Article L. 123-22 of the French Commercial Code).
• Consent to marketing and requests to exercise rights: for as long as necessary for evidential purposes, in particular five years from the closure of the request to exercise a right [à faire valider].
• Server technical logs: [durée de conservation des journaux – à vérifier auprès de l'hébergeur].

Recipients of the data

Your data are accessible only to authorised Schulhof Energies staff, within the limits of their duties. Where relevant to them, they may be disclosed to:

• partner installers responsible for the technical appointment and installation, where you have requested installation [liste ou catégories d'installateurs partenaires – à préciser];
• carriers responsible for delivery;
• our technical processors acting on our instructions: Website hosting provider, email provider, customer relationship management tool [à adapter selon l'outil d'envoi retenu : e-mail / CRM, et ses sous-traitants];
• our advisers, chartered accountant and, where applicable, statutory auditors, who are bound by professional secrecy;
• administrative or judicial authorities, upon request, in the cases provided for by law.

Transfers outside the European Union

Your data are processed within the European Union and are not transferred outside the European Economic Area, subject to the tools to be selected [à vérifier selon l'hébergeur, la messagerie et le CRM choisis]. Should a transfer take place, it would be covered by an adequacy decision of the European Commission or by standard contractual clauses adopted by the Commission, in accordance with Articles 44 et seq. GDPR, and this policy would be updated.

Your rights

In accordance with Articles 15 to 22 GDPR and French Law No. 78-17 of 6 January 1978, you have the following rights regarding your data:

• right of access to your data and to obtain a copy;
• right to rectification of inaccurate or incomplete data;
• right to erasure of your data;
• right to restriction of processing;
• right to object to processing based on our legitimate interest, on grounds relating to your particular situation, and right to object at any time, without giving reasons, to direct marketing;
• right to data portability for data you have provided to us, where processing is based on your consent or on a contract and is carried out by automated means;
• right to withdraw your consent at any time;
• right to give instructions regarding the storage, erasure and disclosure of your data after your death (Article 85 of French Law No. 78-17 of 6 January 1978).

Exercising your rights

These rights are exercised under the conditions and within the limits laid down by the applicable regulations. Where processing is based on your consent, withdrawing it does not affect the lawfulness of processing carried out before its withdrawal. You are not subject to any decision based solely on automated processing, including profiling, producing legal effects concerning you.

You may exercise your rights by writing to christian.schulhof@gmail.com or to Schulhof Energies – Personal data, 101 Chemin des Serres, 04700 Puimichel, France [adresse électronique dédiée aux données personnelles – à créer le cas échéant]. If there is reasonable doubt as to your identity, proof of identity may be requested. We will reply within one month of receiving your request; this period may be extended by two months, taking into account the complexity and number of requests, in which case you will be informed.

You may unsubscribe from our marketing communications at any time using the link in each email or by replying STOP to a text message.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the supervisory authority of your Member State of residence.

Security

Schulhof Energies implements appropriate technical and organisational measures to protect your data against unauthorised destruction, loss, alteration, disclosure or access: encrypted connection to the Website (HTTPS), static architecture limiting the attack surface, access to data restricted to authorised persons and protected by strong passwords, and selection of processors providing sufficient guarantees within the meaning of Article 28 GDPR [mesures à compléter selon les outils retenus]. In the event of a personal data breach likely to result in a high risk to your rights and freedoms, you will be informed under the conditions laid down by the GDPR.

Minors

The Website and our offers are intended for adults. We do not knowingly collect data relating to minors.

Changes to this policy

This policy may be amended, in particular in the event of changes to the Website, the tools used or the regulations. The date of the last update is shown at the top of the page. In the event of a substantial change, you will be informed by appropriate means. This policy is drawn up in French, English and German; in the event of any discrepancy, the French version shall prevail.