PRIVACY AND COOKIE MANAGEMENT POLICY

Preamble

The company Jacquet Nederland B.V. (hereinafter “We” or “the Company”) publishes and operates the website https://shop.myjacquet.nl/ (hereinafter, the “Site”).

As the data controller within the meaning of the applicable regulations on the protection of personal data, the Company attaches great importance to the protection and respect of your privacy.

This privacy policy is intended to inform you, in accordance with Regulation (EU) No. 2016-679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the General Data Protection Regulation or “GDPR”), about our practices regarding the collection, use, and sharing of personal data you may provide to us through our Site.

This document aims to inform you about the categories of personal data we collect about you, how we use them, with whom we share them, how we protect them, and the rights you have over your personal data in accordance with applicable regulations.

1. THE DATA WE COLLECT

When browsing and/or using our Site, you may provide us with information, some of which may identify you and therefore constitute personal data (hereinafter referred to as “Data”). This is the case, for example, when you create a Client Account or place orders for products sold on our Site.

This information includes the following Data:

Account Data: This refers to the Data you provide when creating your Client Account by filling out the registration form (name, first name, company name, client number, job title, business sector, postal address, postal code, email, phone number).
Order Data: This refers to the Data you provide when placing an order for products on our Site (order information: order number, order reference, date, total amount, comments, etc.; information about the products ordered: products concerned, prices, quantities, etc.).
Transaction and Delivery Data: This refers to the Data you provide when purchasing our products (information related to your payment method, billing and delivery information). Please note that our Site does not provide for online payment.
Browsing Data on our Site: This refers to Data we collect via cookies and other trackers placed on your device during your browsing on our Site, such as the date and time of connection and/or browsing, browser type and version, browser language, your IP address, or data related to your shopping cart. For more information, please refer to Article 8 “Cookie Management” below.
Identity Verification Data: In cases of suspected identity theft or disputes related to orders, we may ask you to provide a copy of your ID card or other supporting documents if necessary.

We only collect your Data when it is adequate, relevant, and limited to what is necessary in relation to the purpose of its processing (purpose). In this regard, we commit to collecting only the minimum Data necessary for the purposes detailed in Article 2 of this privacy policy.

Furthermore, when collecting your Data, you will be informed whether certain Data must be provided or if it is optional, in accordance with applicable regulations.

2. PURPOSES AND LEGAL BASES FOR PROCESSING YOUR DATA

We use your Data for the purposes listed below, and according to the following legal bases:

Purposes	Legal Basis
Creation and management of your Client Account	Performance of a contract resulting from the acceptance of our Terms of Use (Art. 6.1.b of the GDPR)
Management of quote requests and product orders via the Site	Performance of a contract resulting from the acceptance of our Terms of Sale (Art. 6.1.b of the GDPR)
Management of billing and delivery	Performance of a contract resulting from the acceptance of our Terms of Sale (Art. 6.1.b of the GDPR)
Management of our customer service, handling complaints	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Responding to your information requests (contact form, online chat, etc.)	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Management of loyalty programs and other promotional activities (clients)	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Management of commercial prospecting activities (prospects)	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR) (commercial prospecting aimed at professionals)
Monitoring the quality and continuous improvement of our products and services	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Monitoring our activities (reporting)	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Management of company audits in the event of asset sale, asset purchase, merger, etc.	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Management of disputes related to orders and payments	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Ensuring the operation and maintenance of our Site	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Implementation of security measures on our Site	Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR)
Management of accounting and other administrative obligations	Legal obligation (Art. 6.1.c of the GDPR)
Responding to requests to exercise your rights over your Data	Legal obligation (Art. 6.1.c of the GDPR)

3. RECIPIENTS OF YOUR DATA

The Data we collect, as well as those collected subsequently, are intended for us in our capacity as data controller.

We ensure that only authorized persons have access to your Data. Our subcontractors/service providers may be recipients of this Data in order to perform the services we entrust to them.

3.1. Data transmitted to authorities and/or public bodies

In accordance with applicable regulations, your Data may be transmitted to competent authorities upon request, as well as to public bodies, legal auxiliaries, ministerial officers, debt collection agencies, and administrations, exclusively to meet our legal obligations, as well as in the case of investigations into offenses committed on the Internet.

3.2. Data transmitted to third-party recipients

We may also transmit your Data to other recipients, namely:

Other companies within the JACQUET METALS group, to whom we transmit your Data for internal administrative management purposes;
Our carriers and delivery service providers, whom we use to ensure the logistics and delivery of your product orders;
Our consent management platform (CMP) provider, which we use to collect your consent or refusal regarding the placement of cookies on your device;
Our hosting provider, which we use to host our Site.

We only transmit to these recipients the Data they need to perform their services, and we require that they do not use your Data for other purposes. When they act as processors within the meaning of the GDPR, these recipients process your Data in accordance with our instructions and are contractually required to ensure a level of security and confidentiality for your Data equivalent to ours, as well as to comply with applicable regulations on the protection of personal data.

4. DATA RETENTION PERIODS

Your Data is not kept beyond the period strictly necessary to achieve the purposes set out in this privacy policy, and in accordance with the GDPR and applicable regulations.

In this respect, Data used for managing your Client Account is kept for the duration of our contractual relationship. Your Data is then archived for 5 years from the closure of your Client Account.

Data used for managing your orders and invoicing is kept in our active databases and then archived for a maximum period of 10 years, to satisfy accounting and tax retention requirements.

Data we use to respond to your requests is kept for the time necessary to process your request and then archived for evidentiary purposes, in accordance with applicable legal retention periods under national law.

Data used for our commercial prospecting activities is used until you object to receiving such communications, and at the latest 3 years after the collection of your Data or your last contact with us.

Regarding cookies and other trackers, the retention period is the legal duration of 13 months.

In any case, your Data is deleted from our active databases or anonymised when their retention periods expire. However, your Data may be archived beyond the periods provided for the purposes of investigation, establishment, and prosecution of criminal offences, solely to make your Data available to judicial authorities as needed. Your Data is also archived for evidentiary purposes up to the applicable statutory limitation periods.

Archiving means that your Data will no longer be accessible online but will be extracted and kept on a separate and secure medium.

5. INTERNATIONAL TRANSFERS OF YOUR DATA

Your Data is hosted within the European Union.

However, by using certain of our technical service providers, your Data may be transferred outside the European Economic Area (EEA).

In the event of a transfer of your Data outside the EEA, we ensure that this transfer is carried out securely and in compliance with applicable regulations:

Either by transferring your Data to a recipient located in a country that has been the subject of an adequacy decision by the European Commission certifying that it provides an adequate level of protection;
Or by executing or having our service providers execute the Standard Contractual Clauses approved by the European Commission as ensuring an adequate level of protection for your Data;
Or by using Binding Corporate Rules validated by the competent data protection authorities;
Or by using any appropriate safeguards referred to in Article 46 of the GDPR.

For any questions regarding the international transfers of your Data, please contact us at the following address: rgpd.digital@jacquetmetals.com.

6. SECURITY MEASURES WE DEPLOY

As the data controller, we take all reasonable precautions to preserve the security and confidentiality of your Data by implementing organizational, technical, software, and physical measures, and we require our service providers to do the same.

In this context, we require our staff and service providers to comply with strict rules regarding data security and protection (such as confidentiality obligations, the use of encryption and anonymization techniques, the implementation of logical and physical security measures, etc.).

7. YOUR RIGHTS

In accordance with the regulations in force regarding the protection of personal data, you have a number of rights concerning your Data, namely:

Right of access and information: Through this privacy policy, you are informed in a concise, transparent, intelligible, and easily accessible manner about how your Data is processed by the Company. You also have the right to obtain at any time (i) confirmation that Data concerning you is being processed by the Company and, if so, (ii) to access this Data and obtain a copy.
Right to rectification: You have the right to obtain the rectification of inaccurate Data concerning you. You also have the right to complete your Data if necessary, by providing a supplementary statement. If you exercise this right, we undertake to communicate any rectification to all recipients of your Data.
Right to erasure: You have the right to obtain the erasure of your Data. However, this is not an absolute right and we may, in order to comply with our legal obligations or for legitimate reasons that will be communicated to you, retain your Data.
Right to restriction of processing: You have the right to obtain the restriction of processing of your Data if you contest the accuracy of the Data we use or if you object to your Data being processed. We are authorised to carry out a verification or review of your request for a certain period. During this period, you may ask us to freeze the use of your Data.
Right to data portability: You have the right to receive the Data you have provided to us, in a structured, commonly used, and machine-readable format, for your own use or to transmit it to a third party of your choice. This right only applies when the processing of your Data is based on your consent, on a contract, and when this processing is carried out by automated means.
Right to object to processing: You have the right to object at any time to the processing of your Data for processing based on our legitimate interest. This is not an absolute right and we may, for legal or legitimate reasons, refuse your objection. You also have the right to object at any time to the processing of your Data for direct marketing purposes.
Right to withdraw your consent at any time: You may withdraw your consent to the processing of your Data at any time when such processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL) if you consider that your rights are not being respected.
Right to give instructions regarding the fate of your data after your death: You have the right to give us instructions regarding the use of your Data after your death.

To exercise these rights, you can contact us at the following address: rgpd.digital@jacquetmetals.com.

If there is any doubt about your identity, we may ask you for proof of identity in order to exercise these rights.

8. COOKIES MANAGEMENT

8.1.Statement regarding the use of cookies

When you visit our Site, cookies are placed on your computer, tablet, or any device you use. This allows us, in particular, to analyse page traffic and improve our Site. Cookies are used differently depending on their nature and the purposes pursued, as indicated below.

You have the option to accept or refuse cookies using the mechanism integrated into the banner on our Site or the tools described below.

8.2. What is a cookie?

A cookie (hereinafter the "Cookie(s)") is a text file placed on a device when visiting the site or viewing an advertisement. A Cookie is intended, in particular, to collect information relating to your browsing on the website and to provide you with personalised services and content.

8.3. What types of Cookies do we use and for what purposes?

Different types of Cookies are used on our Site, serving different purposes. Some are necessary to use the Site, others are optional depending on your choices.

a.Strictly necessary technical Cookies

These Cookies are necessary for the operation of the Site. They allow you to use the main features of the Site. Without these Cookies, you cannot use our Site normally. These Cookies only require information to be provided to users to be placed on their device and do not allow any tracking of their browsing. These include Cookies that:

Retain your choices regarding the placement of Cookies;
Authenticate you to a service, including services aimed at ensuring the security of the authentication mechanism (for example, by limiting robotic or unexpected access attempts).

b.Functional personalisation Cookies

These Cookies allow you to personalise your experience on our Site by remembering your preferences, and in particular:

Adapting the presentation of our Site to your device’s display preferences (language used, display resolution, operating system used, etc.) during your visits, according to the hardware and browsers;
Remembering the contents of a shopping cart;
Providing access to your Client Account using your credentials;
Implementing security measures, for example, when you are asked to log in again to content or a service after a certain period.

c.Audience measurement Cookies

Audience measurement Cookies help to establish statistics on the traffic and use of the various elements composing our Site (sections and content visited, paths taken). They allow us to improve the interest and ergonomics of the Site.

d.Advertising Cookies

Advertising Cookies determine which advertisement to display based on your browsing on the Site, in particular to limit the number of displays, measure the effectiveness of an advertising campaign, or adapt advertisements according to your preferences, if you have previously accepted this possibility.

e.Social network sharing Cookies

We offer features allowing you to share content published on the Site through social networks. These Cookies also allow social networks to target their advertising offers. Social network Cookies are managed by the publisher of the relevant social network. You are invited to consult the Cookie management policy of the relevant social networks on their respective sites.

8.4. How can you manage Cookies?

a.Managing third-party Cookie placement

When you first connect, you are informed that our partners and any other identified third parties may place Cookies via the Site. Only the issuer of a Cookie is likely to read the information contained therein, and we have no access to the Cookies that third parties may use. The issuance and use of Cookies by third parties are subject to their privacy policies in addition to the provisions of this privacy policy. Consequently, you are invited to visit the sites of these third parties for more information on the Cookies they store and how you can manage them.

b.Managing the placement of proprietary Cookies

The User can manage the placement of Cookies as follows:

The placement of strictly necessary technical Cookies is enabled by default and cannot be disabled by you, as these Cookies are essential for the operation of our Site;
You can disable or enable the placement of Cookies subject to your consent (audience measurement Cookies, advertising Cookies, etc.) via the information banner on our Site. Any deactivation results in the refusal by the user of the placement of the relevant Cookie.

If you enable the storage of Cookies on your device, the Cookies integrated into the pages and content you have viewed may be stored temporarily in a dedicated space on your device. They will be readable only by their issuer. Your consent is valid for a period of six (6) months from the first placement on your device.

If you disable the storage of Cookies on your device or browser, or if you delete those that are stored, please note that your browsing and experience on our website may differ from other users who have enabled Cookies (non-personalised content).

c. Details of Cookies used by the Company

Cookies	Purpose	Retention period
1. Necessary Cookies
__cfduid	Reliable web traffic identification	1 year
PHPSESSID	Retention of user settings configuration	Session duration
TawkWindowName	Site chat box functionality	Session duration
Hl	Site locale identification	1 year
2. Statistics
_ga	Records a unique identifier to generate statistical data on Site usage	2 years
_gat	Google Analytics cookie to reduce request rate	1 day
_gid	Records a unique identifier to generate statistics on Site visits	1 day
_hjid	Unique session identifier for statistical purposes	1 year
collect	Sends data to Google Analytics about the device and visitor behaviour. Tracks the user across devices and marketing channels	Session duration
TawkConnectionTime	Recognises the visitor to optimise chat box functionality	Session duration
tawkUUID	Analyses interaction between the user and the Site chat	6 months
3. Marketing
_hjIncludedInSample	Determines whether user navigation should be recorded in a dedicated statistics area	Session duration
r/collect	Sends data about the device and visitor behaviour to Google Analytics. Tracks the user across devices and marketing channels	Session duration

d.For more information

You can visit the website of the Autoriteit Persoonsgegevens for information about Cookies, especially via the following page: https://www.autoriteitpersoonsgegevens.nl/themas/internet-slimme-apparaten.cookies

You can also visit the Youronlinechoices.com website, offered by digital advertising professionals grouped within the European Digital Advertising Alliance (EDAA). You can refuse or accept the Cookies used by companies registered on the platform, in order to adapt the advertisements displayed on your device, via the following link: https://www.youronlinechoices.com/uk/your-ad-choices.

9. CHANGES TO OUR PRIVACY POLICY

We may occasionally modify this policy in order to comply with regulatory, legal, editorial, or technical developments. If we do so, we will change the “last updated” date and indicate the date on which the changes were made. We recommend that you check this page regularly to review any changes or updates to our privacy policy.

10. CONTACT

For any questions regarding this policy or for any request relating to your Data, you can contact us at the following address: rgpd.digital@jacquetmetals.com.

Version_202509 updated on: 24.12.2025