Effective 15/09/2026
On this page, you can find all the information relating to the processing of your personal data. Where, when, how and why we process your data, as well as your rights.
Who is the data controller?
The data you provide us with is processed by ADEO Services, a simplified joint stock company with capital of €31,674,335, registered in the Lille Trade and Companies Register under number 421 206 079, whose registered office is located at 135 rue Sadi Carnot, CS00001, 59790, Ronchin.
This is what is known as the data controller.
Why do we collect your data?
Depending on the circumstances, your personal data will be collected for different purposes. These purposes are referred to as the processing purposes.
These different purposes may be implemented if they are based on a valid legal basis. This is referred to as the legal basis. The basis for the processing of your data may be related to:
a legal obligation: we must comply with our legal and regulatory obligations
a contract: To perform a contract concluded with you or to provide you with pre-contractual information at your request
our specific needs: this is what we call our legitimate interests
your choice: when we have asked for your consent for a specific processing operation
The table below lists each of the uses in detail.
Data Processing Activity No. 1: Processing of Your Data in Connection with B2B Contact Requests / Business Partners | |
Sub-objectives | Enable professionals (architects, hotels, restaurants, offices, retail businesses, concierge services, etc.) to contact the Naterial team to obtain customized information tailored to their industry or to join the partnership/concept network. |
The processing is justified by… | The company’s legitimate interest in expanding its professional network, engaging with B2B prospects, and supporting potential partners in their projects. |
What categories of personal data are involved in this use? | Identifying and contact information: First Name, Last Name (Surname), Email Address, Phone Number, Country. Professional information: Sector of Interest (Office Spaces, Retail, Airbnb, Architect, Restaurant, Hotel, Other). Free-text field: Message to the teams. |
Which persons are authorised to obtain access to personal data recorded in connection with their duties? | The recipients of the data are:
|
How long is this data retained? | 3 years from the date of the last contact/interaction from the prospect/business partner, or until a request for erasure is submitted. |
Data Processing Activity No. 2: Processing of Your Data in Connection with Customer Support and General Contact Requests (B2C) | |
Sub-objectives | Respond to inquiries from customers and users regarding after-sales service, product availability, or any other general topics. |
The processing is justified by… | Processing of pre-contractual measures / contract (for after-sales service requests and product availability) or the company’s legitimate interest in ensuring high-quality customer relationship management. |
What categories of personal data are involved in this use? | Identifying and contact information: First Name, Last Name (Name / Surname), Email Address, Phone Number, Country. Order/product information: Reason for request (After-sales service, Product availability, Other), Order number or Product ID. Free-text field: Content of the explanatory message. |
Which persons are authorised to obtain access to personal data recorded in connection with their duties? | The recipients of the data are:
|
How long is this data retained? | 3 years from the closing of the support/SAV request, or for the legally required duration if related to a commercial contract / order warranty. |
Data Processing Activity No. 3: Management of Cookies and Trackers on the Website | |
Sub-objectives | Ensure the smooth technical operation of the Naterial.com website, track website traffic and visitor numbers, and offer relevant content or advertisements (social media, partners). |
The processing is justified by… | Legitimate interest for cookies that are strictly necessary for the website to function. User consent for audience, analytics, and marketing/social media cookies. |
What categories of personal data are involved in this use? | Technical connection and browsing data: IP address, session identifiers, browser characteristics, browsing data (pages viewed, language selection, products viewed). |
Which persons are authorised to obtain access to personal data recorded in connection with their duties? | The recipients of the data are:
|
How long is this data retained? | User consent choice is stored for 6 months. Audience and analytics cookie data are retained for a maximum of 13 months. |
Data Processing Activity No. 4: Website Administration, Maintenance, and Technical Logging | |
Sub-objectives | Perform technical maintenance operations, manage website security, prevent intrusions and cyber threats, and measure technical access performance. |
The processing is justified by… | The company’s legitimate interest in ensuring the security, availability, and proper technical functioning of the Naterial.com website. |
What categories of personal data are involved in this use? | IP address, request timestamps (date and time of connection), browser characteristics (user-agent), technical server logs, and application logs. |
Which persons are authorised to obtain access to personal data recorded in connection with their duties? | The recipients of the data are:
|
How long is this data retained? | Technical server logs: Retained for 1 year (with an automated purge executed twice daily). Application logs: Ephemeral processing transmitted directly to ADEO internal supervision tools (Datadog / Omnilog). Backups: Retained for 7 days (encrypted at rest). Complete and irreversible erasure following a deletion request is guaranteed at 7+1 days (J+8). |
Is there any profiling or automated decision-making based on this personal data? No. The data collected through the contact forms and the website is processed manually by human teams (customer support or B2B business teams). No automated decision-making or automated profiling produces legal or significant effects on users.
Is the data transferred outside the European Union? No. All personal data, technical data streams, connection logs, and backups related to the Naterial.com website are hosted and processed exclusively within the European Union (in France). No data is transferred to a third country outside the EU for hosting or infrastructure operations.
How is my data protected?
ADEO Services takes all necessary precautions to protect the security of Personal Data against any unauthorised loss, access, modification, intrusion, alteration, disclosure or destruction of the Personal Data it holds.
Access to Personal Data is strictly regulated and reserved for employees who need to access it in order to process it.
Your rights
Entrusting us with your data does not mean that you lose control over it – quite the contrary! Let us explain…
You have several rights. Some apply to all processing of your data, while others depend on the type of processing carried out and, more specifically, on the legal basis on which it is based (contract, legal obligation, consent, legitimate interest, etc.).
Below is a brief description of these rights and how they are implemented.
Right of access: This right allows you to ask us questions about the nature of the processing concerning you (type of data, origin of the collection, etc.). It also allows you to request a copy of all information concerning you. This right applies regardless of the legal basis for the processing concerning you.
The right to rectification: Data entry error, you wish to complete data: there are many situations that may lead you to update your data. This right applies regardless of the legal basis for the processing of your data.
Right to withdraw consent: if you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time.
Right to restriction of processing: you may request that the processing of your personal data be restricted.
Right to portability: This right allows you to request access to data concerning you, provided that such data is processed on the basis of your consent or a contractual relationship. How does this differ from the right of access? We are obliged to provide you with the data in a format that is technically usable by you.
The right to object: This is the right to say « no », the right not to be included in data processing or to be removed from it. This right applies when the processing is based on the « legitimate interest » of the data controller, provided that this interest is not « overriding ».
Right to erasure: When your data is processed based on your consent or on the legitimate (non-compelling) interest of the data controller, you may request the early deletion of your data. How? Simply express your wish to withdraw your consent or exercise your right to object to the processing.
Right of termination: You have the right to set guidelines regarding the storage, deletion, or disclosure of your personal data, applicable after your death.
You may exercise the rights listed above using the contact form available here.
In accordance with applicable regulations, you have the right to lodge a complaint with the competent supervisory authority, such as the CNIL (Commission Nationale de l’Informatique et de Libertés) in France.
How can you find out about changes made to this information document?
We invite you to review the latest version of this document on this page, and we will notify you of any substantial changes via our websites or our usual means of communication.
How to contact us?
If you have any questions regarding the use of your personal data covered by this document, you can submit a request via our contact form or write to our Data Protection Officer by email: dpoadeoservices@adeo.com