Privacy Policy
Version 1.0 — In force as of 17 July 2026
Document ref.: DGSpare_PolitiqueConfidentialite_v1.0_20260717 · Compliant with Regulation (EU) 2016/679 (GDPR) and French Act No. 78-17 of 6 January 1978 as amended (Data Protection Act)
This privacy policy describes how your personal data is collected, used and protected when you browse the website dg-spare-parts.com, create an account, place an order, contact us or subscribe to our newsletter. It is separate from the site’s legal notice and terms and conditions of sale.
1. Data controller
The controller of your personal data is:
DG SYSTEME, a simplified joint-stock company (SAS) with share capital of €4,000, operating the commercial brand DG Spare Parts.
Registered office: 506 route de Draguignan, 83510 Lorgues, France
SIRET: 510 348 006 00030 — RCS Draguignan — VAT No.: FR07510348006
Telephone: +33 (0)9 80 51 35 22
Email: contact@dg-spare-parts.com
For any question relating to the protection of your data or the exercise of your rights, you may contact us at the above address, by email or by post.
2. Personal data we collect
We only collect data that is strictly necessary for the purposes described below. Depending on how you use the site, this may include:
- Identification and contact data: title, surname, first name, email address, telephone number, company, VAT number where applicable;
- Account data: username, password (stored in encrypted form), order history;
- Order and delivery data: billing and delivery addresses, details of the products ordered, amounts;
- Payment data: payment is processed by our secure payment providers. We do not store any bank card data on our servers;
- Data from the contact form: name, email address and the content of your message;
- Technical connection data: IP address, connection logs, browsing data strictly necessary for the operation of the site.
3. Purposes and legal bases of processing
Your data is processed for the following purposes, each based on a legal basis provided for in Article 6 of the GDPR:
| Purpose | Legal basis |
|---|---|
| Management of orders, delivery, invoicing, after-sales service and customer account management | Performance of the contract (Art. 6.1.b) |
| Retention of invoices and compliance with accounting and tax obligations | Legal obligation (Art. 6.1.c) |
| Response to requests via the contact form | Pre-contractual measures / legitimate interest (Art. 6.1.b / 6.1.f) |
| Fraud prevention, site security, operating statistics | Legitimate interest (Art. 6.1.f) |
| Sending the newsletter and commercial communications | Consent (Art. 6.1.a), withdrawable at any time |
| Placing of non-essential cookies (audience measurement, etc.) | Consent (Art. 6.1.a) |
4. Mandatory nature of providing data
The data marked as mandatory in our forms (order, account creation, contact) is necessary to process your request. Otherwise, we would not be able to process your order, deliver your products or respond to your enquiry. Providing data for prospecting purposes (newsletter) is, however, optional and subject to your consent.
5. Recipients of your data
Your data is intended for the authorised internal departments of DG Système. It may be passed on, to the strict extent necessary to fulfil your order, to the following categories of processors:
- Website host: O2Switch (222 boulevard Gustave Flaubert, 63000 Clermont-Ferrand, France);
- Secure payment providers, including PayPal, for processing transactions;
- Carriers (La Poste, DPD, Chronopost or any other partner carrier) for delivery;
- Administrative or judicial authorities, only in the event of a legal request.
DG Système does not sell, exchange, rent or transfer your personal data to third parties for commercial purposes.
6. Transfers of data outside the European Union
Your data is hosted and processed within the European Union. However, some providers (for example a payment service) may be required to process data outside the European Union. In such cases, these transfers are governed by appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR (in particular the European Commission’s standard contractual clauses). In the event of delivery outside the European Union, the data strictly necessary for shipping is provided to the carrier concerned.
7. Retention periods
| Category of data | Retention period |
|---|---|
| Customer account and order history | Duration of the commercial relationship, then intermediate archiving in accordance with legal obligations |
| Invoices and accounting records | 10 years (Article L.123-22 of the French Commercial Code) |
| Quotation not followed by an order | 1 year |
| Contact form data | 2 years from the last exchange |
| Prospecting data (newsletter) | Until consent is withdrawn, and at the latest 3 years after the last contact |
| Connection data (logs) | 12 months |
| Proof of consent to cookies | 6 months |
8. Security of your data
DG Système implements appropriate technical and organisational measures to preserve the confidentiality, integrity and security of your personal data: encryption of communications via the SSL/TLS protocol, securing of card payments through the 3D Secure system, restricted access to data limited to authorised persons only, and no storage of bank data. We ensure that our processors provide equivalent security safeguards.
9. Your rights over your data
In accordance with Articles 15 to 22 of the GDPR and the Data Protection Act, you have the following rights over your personal data:
- Right of access — obtain confirmation that your data is being processed and receive a copy of it;
- Right to rectification — have inaccurate or incomplete data corrected;
- Right to erasure (“right to be forgotten”) — request the deletion of your data, within the limits of legal retention obligations;
- Right to restriction of processing — request the temporary freezing of the use of your data;
- Right to portability — receive your data in a structured, commonly used and machine-readable format;
- Right to object — object, on grounds relating to your particular situation, to processing based on legitimate interest, and object at any time to commercial prospecting;
- Right to withdraw consent — withdraw your consent at any time for processing that depends on it (newsletter, non-essential cookies);
- Right to set directives concerning the fate of your data after your death.
These rights may be exercised by email to contact@dg-spare-parts.com or by post to the registered office address, together with proof of identity in the event of reasonable doubt as to your identity. We undertake to respond within one month of receiving your request, this period being extendable by two months for complex requests.
10. Complaint to the CNIL
If, after contacting us, you consider that your rights are not being respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr — or with the supervisory authority of your country of residence.
11. Cookies and trackers
In accordance with the ePrivacy directive, Article 82 of the French Data Protection Act and the CNIL’s recommendations, our site uses only strictly necessary cookies for its technical operation (user authentication, retention of the shopping cart, choice of language and currency). These technical cookies do not require your consent.
Any additional cookie — in particular for audience measurement, social networks or personalised advertising — is only placed after your prior consent has been obtained, via a dedicated banner. You may accept or refuse these non-essential cookies, and withdraw your consent at any time with the same ease, by setting your preferences from this banner.
12. No automated decision-making
Your personal data is not subject to any fully automated decision producing legal effects concerning you, nor to profiling within the meaning of Article 22 of the GDPR.
13. Changes to this policy
DG Système reserves the right to amend this privacy policy at any time in order to adapt it to changes in the site or in regulations. The applicable version is the one in force on the date of your browsing. The date of the last update appears at the top of this document.
14. Contact us
For any question relating to this policy or to the processing of your personal data, write to us at contact@dg-spare-parts.com or at: DG SYSTEME – DG Spare Parts, 506 route de Draguignan, 83510 Lorgues, France.
♻ DG Spare Parts – European specialist in spare parts for large-format printers and plotters.
SP-CMS-v1.2.0-20260717