Privacy Policy for Biosera
Effective Date: 31-05-2025
Last Updated: 20-03-2026
Biosera (“the Company,” “we,” “us,” “our”) is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR), the French Data Protection Act (Loi Informatique et Libertés), and related regulations.
1. Identification & Data Controller
- Company Name: Biosera
- Head Office: 15 Rue du Mans, 49300 Cholet, France
- RCS: 453 811 770
- Share Capital: €400 330
- SIC Code (APE): 7219Z
- Publication Director: Samuel BOUTIN
- Editorial Manager: Samuel BOUTIN
Contact:
• Email: sales@biosera.com
• Tel: +33 2 41 64 73 41
2. Personal Data We Collect
We collect and process the following categories of personal data:
- Identity & Contact Data: name, postal address, email address, telephone number
- Account & Service Data: customer number, order history, service agreements
- Communications Data: emails, contact-form submissions, support tickets
- Usage & Technical Data: IP address, pages viewed, device and browser information, timestamps
3. Purposes of Processing
We use your personal data to:
- Create, manage, and authenticate your user or client accounts
- Provide the products, services, quotes, and support you request
- Send transactional communications and service notifications, including the transmission of website form submissions via email delivery services
- Compile aggregated statistics to improve our website, products, and services
- Conduct marketing campaigns (only with your prior consent)
All processing—excluding consent-based marketing—is necessary for the performance of a contract or to pursue our legitimate interests.
4. Legal Basis for Processing
- Performance of a contract (Art. 6(1)(b) GDPR)
- Legal compliance (Art. 6(1)(c) GDPR)
- Legitimate interests (Art. 6(1)(f) GDPR), for example analytics and fraud prevention
- Consent (Art. 6(1)(a) GDPR) for marketing communications
5. Recipients & Data Sharing
We do not sell or rent your personal data. We may share data with:
- Internal staff (sales, support, IT) on a need-to-know basis
-
Contracted service providers under GDPR-compliant agreements, including:
- Hosting providers (EU-based infrastructure)
- Email delivery provider (Mailgun, EU)
- Email and communication platform (Microsoft 365)
- Payment processing and CRM systems
- Public authorities or courts when required by law or judicial order
5A. Recipients & Data Sharing
When you contact us via forms on our website, the information you provide (such as your name, email address, phone number, company, and message content) is processed to handle your request.
Email transmission
Form submissions are transmitted using Mailgun (EU), which acts as our email delivery provider. Mailgun processes personal data solely for the purpose of securely sending emails on our behalf.
Email storage
Emails are received and stored in our internal communication systems hosted by Microsoft 365.
Data processing agreements
We have entered into data processing agreements with both Mailgun and Microsoft in accordance with Article 28 GDPR.
Legal basis
- Article 6(1)(b) GDPR (pre-contractual steps or contract performance)
- Article 6(1)(f) GDPR (legitimate interest in handling inquiries and business communication)
6. Data Retention
| Data Category | Retention Period |
|---|---|
| Clients & customers | Duration of relationship + 5 years after last activity |
| Prospects & inquiries | 3 years after last recorded interaction |
| Website analytics & logs | Up to 2 years |
7. Your Rights
Under the GDPR, you may:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”) under certain conditions
- Restrict or object to processing
- Portability of your data in a structured, machine-readable format
- Withdraw consent at any time (for marketing)
- Complain to the CNIL: https://www.cnil.fr
To exercise your rights, contact us at biosera@mse-sas.fr or by post to the head office. We will respond within one month.
8. Cookies & Tracking
We use cookies and similar technologies for:
- Essential functionality
- Analytics (with your consent)
- Marketing (with your consent)
Manage or withdraw your cookie preferences via the “Cookie Settings” link on our site. Learn more in our Cookie Policy.
9. Website Analytics (Matomo)
We use the web analytics service Matomo, which is self-hosted on servers located within the European Union.
Purpose
Matomo is used to analyze website usage and improve functionality, performance, and user experience.
Data processed
The following data may be processed:
- Anonymized IP address
- Pages visited and navigation paths
- Referrer URL
- Date and time of access
- Device and browser information
- Approximate geographic location (country/region)
- Website interactions (e.g. clicks, downloads, form interactions)
IP addresses are anonymized before storage and cannot be directly linked to individuals.
Legal basis
- Your consent (Article 6(1)(a) GDPR), where required
- Our legitimate interest (Article 6(1)(f) GDPR) in improving our website
Data retention
Raw analytics data is retained for up to 25 months, after which it is automatically deleted.
Aggregated statistical data may be retained longer as it no longer allows identification of individuals.
Data sharing
All analytics data is processed internally and is not shared with third parties.
10. Security Measures
We implement appropriate technical and organizational safeguards, including:
- TLS/SSL encryption in transit
- Access controls and logging
- Regular vulnerability assessments
- Staff training on data protection
11. Intellectual Property
All content on our website (text, images, logos, code) is protected by French and international copyright law. Reproduction is prohibited without our written consent.
12. External Links & Liability
Our site may link to third-party websites. We are not responsible for their content or privacy practices. Site availability may be interrupted for maintenance or technical reasons.
13. Applicable Law & Jurisdiction
This Privacy Policy is governed by French law. Disputes relating to personal data processing or this policy fall under the exclusive jurisdiction of the French courts.