1. Introduction
This Privacy Policy explains how Saze Investissement (SASU with a share capital of 1000 €, SIRET 897 849 048 00011, registered office: 229 rue solferino, 59000 Lille, France) collects, uses, stores, shares, and protects the personal data of visitors to and customers of the website saze-diffusion.com.
It applies to any use of the website, whether you are a business customer or a private individual, and supplements our General Terms and Conditions of Sale (GTC) and our Return and Refund Policy.
2. Data Controller
Company name: Saze Investissement
Legal representative: Nassim Baghdad - President of the SAS
Contact details: contact@saze-diffusion.com / 07.81.08.68.75
3. Personal data we collect
We may collect:
Identification data: title, last name, first name, company name, SIRET number or intra-Community VAT number.
Contact details: postal address, email address, telephone number.
Transaction data: products ordered, quantity, amount, payment method, purchase history, invoices.
Payment data: the last four digits of the card, transaction token (full card details are never stored by Saze Investissement).
Browsing data: IP address, logs, device type, browser, pages viewed, cookies.
Communications: emails, messages sent via the contact form, recorded calls where applicable.
4. Purposes and legal bases for processing
Performance of the contract: management of orders, payments, deliveries, returns, and warranties.
Legal obligations: invoicing, accounting, fraud prevention, tax and customs obligations.
Legitimate interest: continuous improvement of the website, internal statistics, IT security, fraud prevention, B2B customer relationship management.
Consent: sending newsletters and commercial prospecting by email or SMS, where required. Placement of certain non-essential cookies (see § 6).
Vital interests / task carried out in the public interest: no processing based on these legal bases is currently carried out.
5. Data recipients
Internal: sales, logistics, accounting, support departments.
Processors: payment providers, hosting provider, carriers, email marketing providers, IT maintenance providers.
Competent authorities (customs, tax authorities, police) where required by law.
All our processors are bound by contract and subject to confidentiality and security obligations in compliance with the GDPR.
6. Cookies and similar technologies
The website uses:
Strictly necessary technical cookies (session, cart, authentication).
Audience measurement cookies (anonymised statistics).
Prospecting / marketing cookies only with your free and specific consent.
On your first visit, a cookie banner allows you to accept, refuse, or configure these trackers. You may change your choices at any time via the “Manage my cookies” link at the bottom of the page.
7. Retention periods
Customer account data: active for the duration of the contractual relationship, then archived for 5 years.
Accounting records: 10 years from the end of the financial year.
Logs and browsing data: maximum 12 months.
Commercial prospecting: 3 years after the last active contact or until consent is withdrawn.
Retention periods may be extended in the event of litigation or increased legal obligations.
8. Transfers outside the European Union
Data is hosted within the EU. Some processors (messaging services, marketing tools) may be located outside the EU; in such cases, we ensure that an adequate level of protection is guaranteed (European Commission standard contractual clauses or an adequacy decision).
9. Data security
We implement physical, logical, and organisational measures appropriate to the risks:
TLS encryption of communications.
Encrypted storage of databases.
Restricted access on a need-to-know basis.
Regular vulnerability testing and audits.
Redundant backups and a business continuity plan.
10. Your rights
In accordance with the GDPR and the French Data Protection Act, you have:
The right to access your data.
The right to rectification if your data is inaccurate or incomplete.
The right to erasure (“right to be forgotten”) within legal limits.
The right to object to processing based on legitimate interest or to commercialprospecting.
The right to restriction of processing.
The right to data portability for the data you have provided, in a structured format.
The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.
11. Exercising your rights
Send your request:
by email to contact@saze-diffusion.com; or
by post to: Saze Investissement – 229 rue solferino, 59000 Lille, France.
Please specify the subject of your request and attach proof of identity where required. We will respond within a maximum of one (1) month, which may be extended by two (2) months in the event of a complex request, in accordance with Article 12 of the GDPR.
12. Complaint to the supervisory authority
If, after contacting us, you believe that your rights have not been respected, you may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés):
cnil.fr – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
13. Automated decisions and profiling
No decision producing significant legal effects is made solely on the basis of automated processing. Statistical analyses may be carried out to personalise the display of products, without legal effect or significant impact on users.
14. Policy updates
We may amend this Policy to reflect changes in our practices or in applicable regulations. The applicable version is the one available on saze-diffusion.com on the date of your visit.
Last revised: 1 April 2026