Data protection and transparency
Privacy Policy
This Privacy Policy explains how S4R S.A.S collects, uses, stores and protects personal data when you browse our website, contact our team, request professional account access, create a customer account, request a quotation or place an order.
Who is responsible for your data?
The data controller is S4R S.A.S, located at 199 rue Hélène Boucher, 34170 Castelnau-le-Lez, France.
Questions relating to privacy or the exercise of data-protection rights may be sent to contact@s4r.fr or by post to the address above.
Personal data we collect
Depending on how you use the website and interact with S4R, we may collect the following categories of personal data:
- Identification and professional information: name, job position, organization, institution type, department and professional field.
- Contact information: professional email address, telephone number, postal address, billing address and delivery address where applicable.
- Commercial information: products of interest, research requirements, quotation requests, prices, orders, delivery details, invoices, payment status and customer-service exchanges.
- Account information: account status, portal access, language, assigned pricelist and authentication-related information. S4R does not have access to your password in readable form.
- Form and communication content: messages, attachments, technical specifications and any information you voluntarily provide.
- Technical and security data: IP address, browser and device information, session information, page requests, timestamps, security events and anti-spam verification data generated through the website infrastructure.
Why we process your data
| Purpose | Examples | Legal basis |
|---|---|---|
| Responding to enquiries | Contact requests, technical questions, product availability and quotations. | Steps taken at your request before entering into a contract and S4R's legitimate interest in managing B2B enquiries. |
| Reviewing professional access requests | Verifying the organization, managing approval and providing access to customer pricing. | Steps taken at your request and S4R's legitimate interest in protecting B2B pricing and customer services. |
| Managing the commercial relationship | Customer accounts, quotations, orders, deliveries, after-sales support and payment follow-up. | Performance of a contract or steps taken before entering into a contract. |
| Accounting and legal compliance | Invoices, tax documents, audit trails and legally required records. | Compliance with legal and regulatory obligations. |
| Website operation and security | Session management, fraud prevention, access control, troubleshooting and spam protection. | S4R's legitimate interest in operating and securing its services. |
| Optional communications or cookies | Electronic marketing or optional audience-measurement tools, if separately enabled. | Your consent, where consent is required. Consent may be withdrawn at any time. |
S4R does not make decisions producing legal or similarly significant effects solely by automated means through this website.
Required and optional information
Fields marked with an asterisk are required to process the relevant request. Without this information, S4R may be unable to answer a message, assess a professional-access request, issue a quotation or complete an order.
Other fields are optional and allow S4R to understand your requirements more accurately or contact you through your preferred channel.
Who may receive your data?
Personal data are accessible only to recipients who require them for the purposes described above. These recipients may include:
- authorized S4R personnel responsible for sales, technical support, administration, accounting and management;
- Odoo and infrastructure providers used to host, maintain and secure the website, database, customer portal and business-management services;
- Cloudflare, when Turnstile is used to protect public forms against automated abuse;
- Google, when an embedded Google Maps element is loaded on the contact page;
- logistics providers, carriers and customs intermediaries where necessary to prepare and deliver an order;
- payment-service providers, only where an online payment method is offered and selected;
- professional advisers, auditors, insurers or public authorities where disclosure is required or justified by law.
Providers acting on S4R's behalf are expected to process data only for the agreed purposes and under appropriate confidentiality and data-protection obligations.
International data transfers
Some technology, mapping, security, logistics or payment providers may process personal data outside the European Economic Area. Where this occurs, S4R seeks to rely on an applicable legal transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses or another safeguard recognized by applicable data-protection law.
You may contact S4R for information about the safeguards applicable to a particular transfer.
How long we keep your data
S4R retains personal data only for as long as necessary for the purpose for which they were collected, subject to legal obligations and the need to establish, exercise or defend legal claims.
| Data or record | Indicative retention period |
|---|---|
| Contact and quotation requests that do not lead to a customer relationship | Time required to process the request, then up to 3 years from the last meaningful contact. |
| Incomplete, rejected or closed professional-access requests | Up to 12 months after closure, unless a longer period is justified by a dispute, abuse-prevention need or legal obligation. |
| Customer account and active commercial relationship data | For the duration of the account or commercial relationship, then for the applicable legal limitation periods. |
| Invoices, accounting documents and supporting records | 10 years, in accordance with applicable French accounting requirements. |
| Technical and security logs | Generally up to 12 months, unless required for longer to investigate a security incident or comply with law. |
| Cookie-consent choices | Generally 6 months before the website may request a renewed choice. |
When data are no longer required in active systems but must be retained for legal or dispute-management purposes, access may be restricted through intermediate archiving.
Cookies, anti-spam protection and third-party content
Necessary cookies
The website may use cookies or similar local-storage technologies that are necessary for functions such as session management, authentication, language preferences, shopping-cart operation, security and customer-portal access.
Optional cookies
Optional audience-measurement, advertising or marketing technologies, if activated, are subject to the applicable consent requirements. When a cookie banner is displayed, you can accept, refuse or adjust your choices through that interface and withdraw consent later.
Cloudflare Turnstile
Public forms may be protected using Cloudflare Turnstile. Turnstile processes technical signals relating to the browser and device in order to assess whether a request is likely to be made by a human and to reduce automated abuse.
Google Maps
The contact page may display an embedded Google Maps map. Loading or interacting with the map may allow Google to receive technical information such as your IP address, browser information and interaction data in accordance with Google's own privacy terms.
Browser settings may also allow you to block or delete cookies. Blocking strictly necessary cookies may prevent account, cart, login or other website functions from working correctly.
How we protect personal data
S4R applies technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, accidental loss and unlawful processing. These measures include access controls, role-based permissions, secure authentication, infrastructure protection, backups and monitoring appropriate to the services used.
No online transmission or storage system can be guaranteed to be completely secure. Users should protect their credentials and contact S4R promptly if they suspect unauthorized access to an account.
Your data-protection rights
Subject to the conditions provided by applicable law, you may exercise the following rights:
To exercise a right, contact contact@s4r.fr. S4R may request reasonable information to verify your identity before acting on the request. You also have the right to lodge a complaint with the CNIL, the French data-protection authority.
Children
The S4R website and professional customer services are intended for laboratories, universities, research institutions, companies and other professional users. They are not directed at children. If you believe that a child has submitted personal data through the website, please contact S4R so that the situation can be reviewed and appropriate action taken.
Changes to this Privacy Policy
S4R may update this Privacy Policy to reflect changes in its website, services, providers, legal obligations or data-processing practices. The current version and its last-updated date will remain available on this page.
Material changes may be communicated through the website or by another appropriate means where required.
Questions about your personal data?
Contact S4R for privacy-related questions or requests concerning your personal data.
S4R S.A.S
199 rue Hélène Boucher
34170 Castelnau-le-Lez, France
contact@s4r.fr
Data protection and transparency
Privacy Policy
This Privacy Policy explains how S4R S.A.S collects, uses, stores and protects personal data when you browse our website, contact our team, request professional account access, create a customer account, request a quotation or place an order.
Who is responsible for your data?
The data controller is S4R S.A.S, located at 199 rue Hélène Boucher, 34170 Castelnau-le-Lez, France.
Questions relating to privacy or the exercise of data-protection rights may be sent to contact@s4r.fr or by post to the address above.
Personal data we collect
Depending on how you use the website and interact with S4R, we may collect the following categories of personal data:
- Identification and professional information: name, job position, organization, institution type, department and professional field.
- Contact information: professional email address, telephone number, postal address, billing address and delivery address where applicable.
- Commercial information: products of interest, research requirements, quotation requests, prices, orders, delivery details, invoices, payment status and customer-service exchanges.
- Account information: account status, portal access, language, assigned pricelist and authentication-related information. S4R does not have access to your password in readable form.
- Form and communication content: messages, attachments, technical specifications and any information you voluntarily provide.
- Technical and security data: IP address, browser and device information, session information, page requests, timestamps, security events and anti-spam verification data generated through the website infrastructure.
Why we process your data
| Purpose | Examples | Legal basis |
|---|---|---|
| Responding to enquiries | Contact requests, technical questions, product availability and quotations. | Steps taken at your request before entering into a contract and S4R's legitimate interest in managing B2B enquiries. |
| Reviewing professional access requests | Verifying the organization, managing approval and providing access to customer pricing. | Steps taken at your request and S4R's legitimate interest in protecting B2B pricing and customer services. |
| Managing the commercial relationship | Customer accounts, quotations, orders, deliveries, after-sales support and payment follow-up. | Performance of a contract or steps taken before entering into a contract. |
| Accounting and legal compliance | Invoices, tax documents, audit trails and legally required records. | Compliance with legal and regulatory obligations. |
| Website operation and security | Session management, fraud prevention, access control, troubleshooting and spam protection. | S4R's legitimate interest in operating and securing its services. |
| Optional communications or cookies | Electronic marketing or optional audience-measurement tools, if separately enabled. | Your consent, where consent is required. Consent may be withdrawn at any time. |
S4R does not make decisions producing legal or similarly significant effects solely by automated means through this website.
Required and optional information
Fields marked with an asterisk are required to process the relevant request. Without this information, S4R may be unable to answer a message, assess a professional-access request, issue a quotation or complete an order.
Other fields are optional and allow S4R to understand your requirements more accurately or contact you through your preferred channel.
Who may receive your data?
Personal data are accessible only to recipients who require them for the purposes described above. These recipients may include:
- authorized S4R personnel responsible for sales, technical support, administration, accounting and management;
- Odoo and infrastructure providers used to host, maintain and secure the website, database, customer portal and business-management services;
- Cloudflare, when Turnstile is used to protect public forms against automated abuse;
- Google, when an embedded Google Maps element is loaded on the contact page;
- logistics providers, carriers and customs intermediaries where necessary to prepare and deliver an order;
- payment-service providers, only where an online payment method is offered and selected;
- professional advisers, auditors, insurers or public authorities where disclosure is required or justified by law.
Providers acting on S4R's behalf are expected to process data only for the agreed purposes and under appropriate confidentiality and data-protection obligations.
International data transfers
Some technology, mapping, security, logistics or payment providers may process personal data outside the European Economic Area. Where this occurs, S4R seeks to rely on an applicable legal transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses or another safeguard recognized by applicable data-protection law.
You may contact S4R for information about the safeguards applicable to a particular transfer.
How long we keep your data
S4R retains personal data only for as long as necessary for the purpose for which they were collected, subject to legal obligations and the need to establish, exercise or defend legal claims.
| Data or record | Indicative retention period |
|---|---|
| Contact and quotation requests that do not lead to a customer relationship | Time required to process the request, then up to 3 years from the last meaningful contact. |
| Incomplete, rejected or closed professional-access requests | Up to 12 months after closure, unless a longer period is justified by a dispute, abuse-prevention need or legal obligation. |
| Customer account and active commercial relationship data | For the duration of the account or commercial relationship, then for the applicable legal limitation periods. |
| Invoices, accounting documents and supporting records | 10 years, in accordance with applicable French accounting requirements. |
| Technical and security logs | Generally up to 12 months, unless required for longer to investigate a security incident or comply with law. |
| Cookie-consent choices | Generally 6 months before the website may request a renewed choice. |
When data are no longer required in active systems but must be retained for legal or dispute-management purposes, access may be restricted through intermediate archiving.
Cookies, anti-spam protection and third-party content
Necessary cookies
The website may use cookies or similar local-storage technologies that are necessary for functions such as session management, authentication, language preferences, shopping-cart operation, security and customer-portal access.
Optional cookies
Optional audience-measurement, advertising or marketing technologies, if activated, are subject to the applicable consent requirements. When a cookie banner is displayed, you can accept, refuse or adjust your choices through that interface and withdraw consent later.
Cloudflare Turnstile
Public forms may be protected using Cloudflare Turnstile. Turnstile processes technical signals relating to the browser and device in order to assess whether a request is likely to be made by a human and to reduce automated abuse.
Google Maps
The contact page may display an embedded Google Maps map. Loading or interacting with the map may allow Google to receive technical information such as your IP address, browser information and interaction data in accordance with Google's own privacy terms.
Browser settings may also allow you to block or delete cookies. Blocking strictly necessary cookies may prevent account, cart, login or other website functions from working correctly.
How we protect personal data
S4R applies technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, accidental loss and unlawful processing. These measures include access controls, role-based permissions, secure authentication, infrastructure protection, backups and monitoring appropriate to the services used.
No online transmission or storage system can be guaranteed to be completely secure. Users should protect their credentials and contact S4R promptly if they suspect unauthorized access to an account.
Your data-protection rights
Subject to the conditions provided by applicable law, you may exercise the following rights:
To exercise a right, contact contact@s4r.fr. S4R may request reasonable information to verify your identity before acting on the request. You also have the right to lodge a complaint with the CNIL, the French data-protection authority.
Children
The S4R website and professional customer services are intended for laboratories, universities, research institutions, companies and other professional users. They are not directed at children. If you believe that a child has submitted personal data through the website, please contact S4R so that the situation can be reviewed and appropriate action taken.
Changes to this Privacy Policy
S4R may update this Privacy Policy to reflect changes in its website, services, providers, legal obligations or data-processing practices. The current version and its last-updated date will remain available on this page.
Material changes may be communicated through the website or by another appropriate means where required.
Questions about your personal data?
Contact S4R for privacy-related questions or requests concerning your personal data.
S4R S.A.S
199 rue Hélène Boucher
34170 Castelnau-le-Lez, France
contact@s4r.fr