Privacy Policy
This English version is provided for convenience; in case of discrepancy, the French version prevails. · Version française · Deutsche Fassung · Versión en español · Versione italiana
Privacy Policy (GDPR) — Fibre Herd
This document is separate from the Terms of Use / Subscription Terms and Conditions.
1. Data controller
The controller of the data collected on fibreherd.fr (and associated subdomains) is Filature de la Vallée des Saules SAS, publisher of the Site under the Fibre Herd brand.
The Company’s full identity (RCS, SIRET, VAT, registered office) is set out in the Legal notice:
- RCS Douai 790 388 763 · SIRET 790 388 763 00019 · VAT FR 40 790 388 763
- Registered office: 20 rue Jean Mermoz, 59227 Saulzoir, France
Contact (data / privacy): [email protected] · Contact page
Post (exercise of rights): to the registered office address given in the Legal notice.
No data protection officer (DPO) has been appointed. The contact above is sufficient for exercising your rights.
2. Scope
This policy describes the processing of personal data in connection with:
- the Fibre Herd marketing website and application (accounts, herd, events);
- the link with the fibrelabandco.com shop (account linking, analysis orders);
- the marketplace (connecting users);
- billing of subscriptions and marketplace publication fees, via Systempay (Lyra Network), our secure payment provider;
- cookies / trackers (see the Cookie Policy).
We only collect what is necessary for the service to operate. We do not sell your data.
3. Data we collect
| Category | Examples |
|---|---|
| Account | email, name, password (hashed), language, role |
| Farm / herd | farm name, country, species, preferences |
| Animals & events | identity, pedigree, measurements, uploaded documents (user’s responsibility) |
| Lab / analyses | FLID, shop order identifiers, linked analysis results |
| Marketplace | listing content chosen by the user, contact messages |
| Billing | billing identity, subscription / single listing history (via Systempay, Lyra Network) |
| Technical | security logs, IP address, analysis file import logs (lab operators) |
| Consents | cookie preferences (CMP), timestamp, policy version |
| Correspondence | email messages / forms |
Mandatory fields are indicated. Without them, the account or the requested service cannot be provided.
4. Purposes and legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Creating and managing the account / farm / herd | Performance of the contract (Art. 6(1)(b)) |
| Provision of the SaaS, support, after-sales service | Performance of the contract |
| Link with Fibre Lab & Co analyses | Performance of the contract / legitimate interest |
| Subscriptions, publication fees, invoicing, accounting | Performance of the contract / legal obligation (Art. 6(1)(c)) |
| Marketplace (publication, contact) | Performance of the contract / legitimate interest (Art. 6(1)(f)) |
| Security, fraud prevention | Legitimate interest |
| Replying to messages outside a contract | Legitimate interest / pre-contractual measures |
| Newsletter / offers (if offered) | Consent (Art. 6(1)(a)), except for marketing of similar products, subject to the right to object |
| Audience measurement, marketing, pixels | Consent via the cookie banner (Art. 6(1)(a) GDPR and Art. 82 of the French Data Protection Act) |
| Exercise of rights, disputes | Legal obligation / legitimate interest |
5. Retention periods
| Data | Indicative period |
|---|---|
| Active account | Duration of the account, then 3 years after last activity (marketing); limited archiving where required by law |
| Invoices / subscriptions / publication fees | 10 years (accounting obligation) |
| Prospects without an account | 3 years from the last contact |
| Analysis files | retention ≥ 5 years (lab requirement), balanced against the retention period for personal data |
| Proof of cookie consent | duration of the consent + proof (CNIL: ask again roughly every 6 months) |
| Technical logs | limited period, proportionate to security needs |
| Exercise of rights | 1 year after the request is closed |
6. Recipients and processors
Confidentiality of your records and account. The data in your non-public records and in your breeder account are strictly confidential. They are never sold, rented or transferred, and are not disclosed to any third party for its own use: they are used only to run your account. Access is limited to what is necessary: people you invite to your farm; our authorised staff, bound by confidentiality, for support, security and the analyses you entrust to our laboratory Fibre Lab & Co; our technical providers, bound by confidentiality and acting only on our instructions (secure hosting in the European Union, Site delivery and protection, secure payment, e-mail delivery); and an authority, only where the law requires it. What you choose to publish (listings, public records, farm profile) is visible to everyone.
Internal recipients: authorised personnel of Filature de la Vallée des Saules (including lab operators, for matching analyses).
Processors / service providers that may access data, depending on the service:
- Hosting provider: OVH SAS, 2 rue Kellermann, 59100 Roubaix (EU)
- Site delivery and security: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107 (United States) — every request to the Site goes through Cloudflare, which processes the IP address and technical connection data (caching, protection against attacks)
- Payment service provider: Systempay (Lyra Network), our secure payment provider
- Linked lab shop: fibrelabandco.com (only if you link your account or order an analysis)
- Consent banner: Fibre Herd CMP (“Manage cookies”)
- Transactional email: sent from [email protected] / [email protected] (the mail service may involve processing by Google for the inbox)
- Analytics / advertising tools: only after consent, if an identifier is configured
No advertising pixel identifier is loaded before consent.
7. Transfers outside the European Union
Account / Site data is hosted in the EU (OVH).
Requests to the Site go through the network of Cloudflare, Inc. (United States), which processes the IP address and technical connection data for the delivery and security of the Site, including, where applicable, outside the European Union. This transfer is governed by the EU-U.S. Data Privacy Framework, under which Cloudflare is certified, and by the standard contractual clauses (SCCs) of its data processing addendum.
If an analytics tool (e.g. Google Analytics) or a social network pixel is activated after consent, a transfer to the United States may take place; such a transfer is then governed by standard contractual clauses (SCCs) and, where applicable, the Data Privacy Framework.
8. Cookies and pixels
See the Cookie Policy. No non-essential tracker is set before you make your choice. You can change it via Manage cookies in the footer.
9. Security
HTTPS, access control, securely stored passwords, a secure payment service provider (Systempay, Lyra Network). No card data is stored by Fibre Herd. No security is absolute.
10. Your rights
In accordance with the GDPR and the French Data Protection Act: access, rectification, erasure, restriction, objection, portability, withdrawal of consent, instructions regarding your data after death.
Response time: one month (which may be extended by two months where requests are complex, in which case you will be informed). Proof of identity may be requested in the event of reasonable doubt.
- Email: [email protected]
- Post: to the registered office address given in section 1
Complaints: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
11. Minors
The service is intended for adults with full legal capacity. Minors are not targeted.
12. Changes
In the event of a substantial change, information will be provided on the Site and/or by email.
Filature de la Vallée des Saules SAS — Fibre Herd — 10/10/2026