Skip to content
3 months free on your first order until July 31, 2026 Get it now

Privacy Policy

Privacy Policy

Last updated : March 21, 2025

Preamble

At HEEDING CLIMATE SOLUTIONS (“HEEDING”), we attach particular importance to respecting your privacy and your personal data (“Personal Data”).

We undertake to ensure that the processing of Personal Data we carry out complies with the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”) and with the French Data Protection Act of 6 January 1978 (the “Data Protection Act”).

Purpose

The purpose of this Privacy Policy (the “Policy”) is to inform any data subject (“You”) about:

  • how HEEDING collects and uses your Personal Data; and
  • the rights you have over your Personal Data and the means available to exercise them.

Who is the controller of your Personal Data?

HEEDING CLIMATE SOLUTIONS, a simplified joint-stock company (SAS) registered with the Grasse Trade and Companies Register under number 938 468 915, with its registered office at 1047 Route des Dolines, Business Pole 1, 06560 Valbonne, France, acts as data controller for the processing relating to:

  • responding to your enquiries;
  • sending you our newsletter and commercial offers where you have given your consent;
  • managing requests to exercise rights under the GDPR and the Data Protection Act;
  • ensuring the smooth running and continuous improvement of our website.

Purposes, categories of data and legal bases

Where the legal basis of a processing operation is the pursuit of a legitimate interest, You may, on request, obtain further information about the balancing of interests carried out. In all cases, HEEDING collects only the Personal Data necessary for the explicit purposes set out below.

1. Responding to your enquiries

Purpose: managing and handling requests of any kind (contact, information, replies, follow-up).

Legal basis: performance of a contract or pre-contractual measures taken at your request (Article 6(1)(b) GDPR).

2. Sending our newsletter and commercial offers (with your consent)

Purpose: managing newsletter subscriptions and sending commercial offers.

Legal basis: our legitimate interest (promoting HEEDING’s services within an existing commercial relationship) and/or your consent where required. You may unsubscribe at any time via the unsubscribe link in each communication.

3. Managing requests to exercise your rights (GDPR / Data Protection Act)

Purpose: receiving, qualifying and responding to requests to exercise data-protection rights (access, rectification, erasure, objection, portability, etc.).

Legal basis: compliance with a legal obligation to which HEEDING is subject (Article 6(1)(c) GDPR).

4. Ensuring the smooth running and continuous improvement of our website

Purpose: producing statistics, measuring the performance of our communications and audience, improving navigation on the website, and adapting its presentation to your device.

Legal basis: our legitimate interest in guaranteeing the best possible level of operation, quality and security of our website, in particular through visitor statistics.

HEEDING may also use this Personal Data to comply with a legal or regulatory obligation. For each purpose, HEEDING does everything in its power to ensure the security and confidentiality of the Personal Data entrusted to it, in accordance with applicable law.

What data is collected?

The mandatory or optional nature of the data collected, and the consequences of not providing it, are indicated at each point of collection. The categories below are indicative and not exhaustive:

  • Responding to your enquiries: last name, first name, email address, telephone number.
  • Newsletter and commercial offers: last name, first name, email address.
  • Managing requests to exercise rights: last name, first name, email address and, where necessary, a copy of proof of identity.
  • Operation and improvement of the website: data collected via cookies and other trackers on our website.

Who receives your data?

  • authorised HEEDING staff;
  • the service providers that manage and host our website and HEEDING’s IT systems;
  • where applicable, the authorised staff of our processors;
  • where applicable, the relevant courts, mediators, chartered accountants, statutory auditors, lawyers, bailiffs, debt-collection agencies, and police or gendarmerie authorities (in the event of theft or a judicial request);
  • third parties that may place cookies on your devices with your consent.

For more information about our processors, you can write to us at contact@myheeding.com. Your Personal Data is not disclosed, exchanged, sold or rented to anyone other than those listed above without your prior express consent and in accordance with applicable law.

How long do we keep your data?

We keep your Personal Data only for as long as necessary for the purposes described above:

  • Responding to your enquiries: for as long as needed to handle the request, then in intermediate archives for three (3) years after the end of the relationship or the last contact with HEEDING.
  • Newsletter and commercial offers: until consent is withdrawn (unsubscribe), then in intermediate archives for three (3) years after the last contact with HEEDING.
  • Managing requests to exercise rights: for the time needed to handle the request, then in intermediate archives for the applicable limitation period (six years; Art. 8 of the French Code of Criminal Procedure).
  • Operation and improvement of the website: the retention periods of the cookies we use are detailed in our cookie policy available on the website.

What are your rights?

In accordance with the Data Protection Act and the GDPR, You have the following rights:

  • right of access, rectification, updating and completeness of your data (Articles 15 and 16 GDPR);
  • right to erasure of your data (Article 17 GDPR) where it is inaccurate, incomplete, outdated, or where its collection, use, disclosure or storage is prohibited;
  • right to withdraw your consent at any time (Article 13(2)(c) GDPR);
  • right to restrict the processing of your data (Article 18 GDPR);
  • right to object to the processing of your data (Article 21 GDPR);
  • right to data portability, where your data is processed by automated means on the basis of your consent or a contract (Article 20 GDPR);
  • right to give instructions on the fate of your data after your death (Article 85 of the Data Protection Act).

In the event of your death and absent instructions from you, we undertake to destroy your data, unless its retention is necessary for evidential purposes or to meet a legal obligation.

You may exercise these rights:

  • by completing the contact form available on the website;
  • by email to contact@myheeding.com;
  • by post to: HEEDING CLIMATE SOLUTIONS, 1047 Route des Dolines, Business Pole 1, 06560 Valbonne, France.

You may also lodge a complaint with the supervisory authority, in particular the French CNIL (www.cnil.fr/fr/plaintes).

Connection data and cookies

On its website, HEEDING uses connection data (date, time, IP address, the protocol of the visitor’s computer or phone, page viewed) and cookies (small files stored on your computer, tablet or phone) to recognise you, remember your visits, and measure and analyse our website’s audience, in particular the pages viewed.

Depending on the purpose, you may consent to, refuse, or choose the types of cookies placed on your devices. The terms of cookie placement and your rights are set out in the cookie policy available on our website.

Are your data transferred outside the European Union?

As a rule, we process your Personal Data within the European Union. However, given the nature of our business and subject to informing you beforehand, we may transfer your Personal Data outside the European Union. In that case, HEEDING will inform you of the measures taken to govern the transfer and ensure compliance.

What security measures protect your data?

HEEDING and any processors undertake to implement all appropriate technical and organisational measures to ensure the security of the processing and the confidentiality of your Personal Data, in accordance with the Data Protection Act and the GDPR. Having regard to the nature of your Personal Data and the risks presented by the processing, we take all necessary precautions to preserve its security and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised third parties.

Updates to this Policy

This Privacy Policy may be amended from time to time, in particular to reflect changes in law and regulation. You can consult the latest version directly on our website.