Privacy Policy
Last updated: 9 October 2026
This policy explains which personal data we process when you use the alden.fr website, for what purpose, on what legal basis, for how long, and what your rights are.
1. Controllers
The website is published by Alden SAS, 14 Route de Strasbourg, F-67230 Huttenheim, France (SIRET 399 474 758 00022), which is the controller of the data collected on the website. Contact: info@alden.fr.
Requests sent from the German and English versions of the website are handled by ALDEN Deutschland GmbH, Fehrenkamp 12, 49434 Neuenkirchen-Vörden, Germany, which provides ALDEN customer service in Germany. For these requests, Alden SAS and ALDEN Deutschland GmbH act as joint controllers. Contact: service@alden-deutschland.de.
You may exercise your rights with either company.
2. Data processed, purposes and legal bases
Browsing and website security
- Data: IP address, date and time, pages viewed, browser type.
- Purpose: running the website, protecting it against attacks (Wordfence firewall) and diagnosing technical errors (Sentry, without IP addresses).
- Legal basis: our legitimate interest in keeping the website secure and working properly (Article 6(1)(f) GDPR).
- Retention: 12 months at most.
Contact form
- Data: last name, first name, email address, phone number, message, website language.
- Purpose: answering your request, by email or by calling you back.
- Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b)) and our legitimate interest in answering people who contact us (Article 6(1)(f)).
- Retention: 3 years from your request, then automatic deletion.
Support form
- Data: last name, first name, email address, phone number, message, device concerned, type of equipment, warranty and, where applicable, the photo or document you send us.
- Purpose: handling your support request and, where applicable, your warranty claim.
- Legal basis: performance of the contract and the warranty (Article 6(1)(b)).
- Retention: 3 years from your request, then automatic deletion, attached files included.
Professional account request
- Data: last name, first name, email address, phone number, company.
- Purpose: reviewing your request and, if accepted, creating your account.
- Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b)).
- Retention: 3 years from the request, then automatic deletion.
Professional area
- Data: account identity and contact details, company, orders, search history within the area.
- Purposes: managing your account and orders; measuring how the area is used in order to improve it (PostHog, servers located in the European Union, without cookies or storage on your device).
- Legal bases: performance of the contract (Article 6(1)(b)); accounting obligations (Article 6(1)(c)); our legitimate interest in improving the professional area (Article 6(1)(f)), which you may object to.
- Retention: for as long as the account exists; accounting records relating to orders are kept for 10 years, as required by law.
Dealer map (Google Maps)
- The map, address search and autocomplete are provided by Google Maps (Google Ireland Limited). They only load after you consent; Google then receives your IP address and the address you search for, and may set cookies.
- The “Locate me” button uses the location provided by your browser, with your permission, only to centre the map. We do not store it.
- Legal basis: your consent (Article 6(1)(a)), which you may withdraw at any time.
Videos (YouTube)
- Our videos are hosted by YouTube (Google Ireland Limited) and played in privacy-enhanced mode. They only load after you consent; Google then receives your IP address and may set cookies.
- Legal basis: your consent (Article 6(1)(a)), which you may withdraw at any time.
3. Cookies
The website only sets the cookies it needs to work (session, shopping cart, remembering your cookie choices), unless you accept external content (Google Maps, YouTube). You can change your choice at any time via the “Manage cookies” link at the bottom of every page. The cookies are listed in our cookie policy.
4. Recipients
Your data is only accessible to the teams of Alden SAS and, for requests sent from the German and English versions of the website, of ALDEN Deutschland GmbH, who need it to handle your request (customer service, support, sales). It is never sold or rented.
We use the following service providers, who act on our instructions:
- OVH SAS (Roubaix, France): website hosting, servers located in France;
- Functional Software Inc. (Sentry): technical error tracking, data hosted in the European Union;
- PostHog Inc.: usage measurement of the professional area, data hosted in the European Union;
- Defiant Inc. (Wordfence): protection of the website against attacks;
- Google Ireland Limited: Google Maps and YouTube, only after your consent.
5. Transfers outside the European Union
Google and Defiant (Wordfence) may process data in the United States. These transfers are based on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.
6. Security
The website is served exclusively over HTTPS and protected by a web application firewall, and access to the administration is limited to authorised staff. Files sent through the support form are not public and can only be accessed by our teams.
7. Your rights
Under the GDPR, you have the following rights over your data:
- right of access and to obtain a copy of your data;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to data portability;
- right to object, in particular to processing based on our legitimate interest;
- right to withdraw your consent at any time, without affecting processing already carried out.
To exercise them, write to service@alden-deutschland.de or info@alden.fr, or to Alden SAS, 14 Route de Strasbourg, F-67230 Huttenheim, France. We will reply within one month.
8. Complaints
If you believe your rights have not been respected, you may lodge a complaint with the data protection authority of your country of residence. For ALDEN Deutschland GmbH, the competent authority is the Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany, www.lfd.niedersachsen.de. For Alden SAS, it is the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
9. Changes
We may update this policy, in particular when the website or the regulations change. The date of the last update is shown at the top of this page.