Version effective as of 07/08/2026
This Privacy Policy informs users of the website www.derfi.fr, as well as DERFI's prospects, customers and professional contacts, about how their personal data is collected, used, retained and protected.
DERFI attaches particular importance to personal data protection and undertakes to process it in accordance with the General Data Protection Regulation (RGPD) and applicable French legislation.
Privacy Policy
1. Data controller
The controller of the processing described in this policy is :
DESIGN EQUIPEMENTS REPRESENTATION FRANCE INTERNATIONAL – DERFI
SAS with a share capital of 100 000 €
RCS Bordeaux 814 254 264
SIREN : 814 254 264
Registered office :
Lot 27 – 43 bis rue Newton
33370 Tresses
France
Email : contact@derfi.fr
Telephone : +33 (0)1 39 78 26 31
DERFI determines the purposes and means of personal data processing carried out in the course of its business.
Privacy Policy
2. Data subjects
This policy mainly concerns individuals acting in a professional capacity, including :
- prospects and professional contacts ;
- representatives, employees and contacts at customer companies ;
- people requesting a quote or information ;
- people requesting or downloading the DERFI catalogue ;
- contacts involved in an order, delivery, maintenance request or after-sales service request.
Privacy Policy
3. Data that may be collected
Depending on the nature of your relationship with DERFI, the following data may be processed :
Identification and contact data
- first name and surname ;
- professional email address ;
- professional telephone number ;
- company or organisation ;
- position or department, where this information is provided.
Data relating to commercial enquiries
- content of an information request ;
- quote request ;
- product or service sought ;
- technical information provided as part of a project ;
- history of exchanges with DERFI.
Data relating to the customer relationship
- quote and order references ;
- delivery and billing details ;
- information needed for order follow-up ;
- commercial relationship history ;
- information relating to payments and invoices ;
- complaints and commercial correspondence.
DERFI does not seek to collect the banking data needed to execute a transfer where this data continues to be processed directly by the relevant banks.
Data relating to maintenance and after-sales support
DERFI may process information needed :
- to identify the customer and their equipment ;
- to follow up a repair or maintenance request ;
- to establish a diagnosis or a quote ;
- to follow up interventions ;
- to manage the warranty and after-sales service.
Catalogue request
When someone requests the DERFI catalogue, the professional contact details needed to send the catalogue and process the request may be collected.
Privacy Policy
4. Purposes and legal bases
DERFI processes personal data only where a specific purpose justifies it.
Responding to contact and quote requests
Data is used to :
- respond to requests received ;
- advise prospects ;
- prepare and send quotes ;
- follow up commercial exchanges.
This processing is based primarily on DERFI's legitimate interest in responding to professional enquiries and developing its commercial activity and, where applicable, on taking pre-contractual steps requested by the data subject.
Customer and order management
Data is used to :
- record and process orders ;
- provide commercial follow-up ;
- organise deliveries ;
- issue invoices ;
- manage payments ;
- follow up contracts and services.
Depending on the circumstances, this processing is based on performance of the contractual relationship, on DERFI's legitimate interest in managing its professional relationships and on compliance with its legal obligations, particularly accounting and tax obligations.
Maintenance, repair and after-sales support
Data is used to process requests for assistance, maintenance, repair, warranty and after-sales service.
This processing is necessary to perform the requested services and manage the commercial relationship.
Catalogue download and delivery
Data provided when requesting a catalogue is used to send the requested documentation and, where appropriate, provide commercial follow-up to that request.
B2B direct marketing
DERFI may use the professional contact details of prospects and customers to present products, services, new developments or solutions that may be relevant to their professional activity.
This processing is based on DERFI's legitimate interest in developing and maintaining its professional commercial relationships.
Each recipient may object at any time, free of charge, to the use of their data for direct marketing purposes.
Privacy Policy
5. Source of the data
Data is primarily collected directly from data subjects, including :
- through website forms www.derfi.fr ;
- when requesting a quote ;
- when requesting a catalogue ;
- by email ;
- by telephone ;
- during exchanges with DERFI sales representatives ;
- as part of an order, service, repair or after-sales support.
Privacy Policy
6. Mandatory information
Information identified as necessary in forms or requested by DERFI is essential to process the relevant request.
Without this information, DERFI may be unable to respond to a quote request, process an order, provide a service or offer after-sales follow-up.
Other information is optional.
Privacy Policy
7. Data recipients
Data is accessible only to those who need it in the course of their duties.
Depending on the processing concerned, it may be accessible, in particular :
- to DERFI's sales teams ;
- to staff responsible for sales administration ;
- to accounting and administrative departments ;
- to staff responsible for support, maintenance and after-sales service ;
- to IT and technical service providers working on DERFI's behalf ;
- to the supplier of the CRM solution or sales management tool used by DERFI ;
- to carriers where necessary to deliver an order ;
- to advisers, accountants, financial institutions, public bodies or authorities where their involvement is necessary or required by law.
Service providers entrusted with personal data by DERFI may use it only for their assigned tasks and in accordance with applicable data protection rules.
Privacy Policy
8. Data disclosure
DERFI discloses personal data to third parties only where necessary to achieve the purposes described in this policy, fulfil an order or service, comply with a legal obligation or defend its rights.
DERFI's service providers must not use the data for their own direct marketing unless there is a specific legal basis and the data subjects have been informed in advance.
Privacy Policy
9. Data transfers outside the European Economic Area
DERFI must check whether the technical, software, CRM, hosting or other processing providers used for the website and commercial relationship result in personal data transfers outside the European Economic Area.
Where such transfers exist, they must be governed in accordance with RGPD requirements.
Privacy Policy
10. retention periods
DERFI retains personal data only for as long as necessary for the purposes for which it was collected and then, where needed, for the archiving periods required by regulations.
Prospects
Data used for direct marketing may be retained for a maximum of 3 years from collection or the last contact initiated by the prospect.
Customers
Data needed to manage the commercial relationship is retained for the duration of that relationship.
Data used for direct marketing may then be retained for a maximum of 3 years from the end of the commercial relationship or the last relevant contact with the customer.
Some information may be archived for longer where necessary to establish, exercise or defend legal claims.
Contractual and commercial documents
Some data may be archived for the limitation periods applicable to contractual relationships.
Accounting data and invoices
Accounting documents and supporting records subject to a statutory retention requirement are retained for 10 years.
Requests to exercise rights
Information needed to process a request concerning an individual's rights is retained for the time needed to handle the request and may then be archived where necessary to demonstrate DERFI's compliance with its obligations.
Privacy Policy
11. Direct marketing and the right to object
As part of its exclusively professional business, DERFI may send commercial communications to professional contacts where these relate to their activity or role.
Data subjects are informed of this use and may object at any time, simply and free of charge, to receiving such communications.
The right to object may be exercised, in particular :
- through the unsubscribe link or mechanism included in communications, where available ;
- by replying directly to the message received ;
- by writing to contact@derfi.fr.
Someone who has exercised their right to object will no longer receive direct marketing under the circumstances concerned.
DERFI may nevertheless retain the information strictly necessary to continue respecting that objection.
Privacy Policy
12. Your rights
Under applicable data protection regulations, data subjects may have the following rights, depending on the legal basis and nature of the processing :
- right of access to their personal data ;
- right to rectification of inaccurate or incomplete data ;
- right to erasure, where the legal conditions are met ;
- right to restriction of processing ;
- right to object, particularly to direct marketing ;
- right to portability of data in the situations provided for by the RGPD.
Where processing is based on consent, the data subject may withdraw that consent at any time without affecting the lawfulness of processing carried out previously.
Privacy Policy
13. How can you exercise your rights?
To exercise your rights or obtain information about the processing of your personal data, you may contact DERFI :
By email : contact@derfi.fr
DERFI
Lot 27 – 43 bis rue Newton
33370 Tresses
France
To protect personal data against fraudulent requests, DERFI may request additional information to verify the applicant's identity where necessary.
DERFI responds to requests within the time limits set by applicable regulations.
Privacy Policy
14. Complaint to the CNIL
If, after contacting DERFI, you believe your personal data rights are not being respected, you may lodge a complaint with the :
French National Commission for Information Technology and Civil Liberties – CNIL
Contact details and complaint procedures are available on the official website www.cnil.fr.
Privacy Policy
15. Data security
DERFI implements technical and organisational measures to protect personal data against unauthorised destruction, loss, alteration, access, use or disclosure.
Access to data is limited to staff and service providers who need it for their duties.
Privacy Policy
16. Cookies and trackers
The use of cookies and other trackers on the website www.derfi.fr is covered by a separate policy.
For information about the cookies used, their purposes, retention periods and how to manage your choices, please consult the :
Cookie Policy : https://derfi.fr/politique-de-cookies
Privacy Policy
17. Amendments to the Privacy Policy
DERFI may amend this Privacy Policy to reflect, in particular, changes in its activities, tools, service providers or applicable regulations.
The date of the latest update is shown at the top of this page.