Privacy Policy

Last updated: 17 August 2026

Purpose of this policy

The purpose of this policy is to provide users of the website www.serval.fr (hereinafter the “Website”) with clear and transparent information about how Serval collects, uses, retains and protects their personal data.

It also sets out the rules applicable to:

  • Forms and requests submitted to Serval
  • Technical data relating to browsing
  • Cookies and other tracking technologies
  • Obtaining and withdrawing consent
  • Exercising data subjects’ rights.

Data controller

The data controller for personal data processed through the Website is:

Serval
La Creuse
79800 SAINTE-EANNE
France

Telephone: +33 (0)5 49 06 28 28

Data protection contact:

rgpd@serval.fr

Principles applicable to data processing

Serval undertakes to process personal data in accordance with applicable legislation, including the General Data Protection Regulation (“GDPR”) and the French Data Protection Act (Loi Informatique et Libertés).

In particular, Serval ensures that data is:

  • Processed lawfully, fairly and transparently
  • Collected for specified, explicit and legitimate purposes
  • Adequate, relevant and limited to what is necessary
  • Accurate and, where necessary, kept up to date
  • Retained for a limited period
  • Protected by appropriate technical and organisational measures.

Personal data collected

Data provided directly

When you use a contact form or contact Serval directly, the following data may be collected, in particular:

  • First name and surname
  • Email address
  • Telephone number
  • Company or organisation, where applicable
  • The content of your message
  • Any other information you choose to provide voluntarily.

Data collected while browsing

When you use the Website, certain technical information may be collected, including:

  • Device type
  • Browser type and version
  • Operating system
  • Pages viewed
  • Date and time of access
  • Duration of the visit
  • Technical data necessary for the operation and security of the Website
  • Information about cookies and your preferences
  • Data necessary to measure Website traffic, where such a tool is used.

Purposes and legal bases of processing

Responding to contact requests

Data provided through a form, by email or by any other means may be used to:

  • Answer your questions
  • Handle a request
  • Contact you again

Operation and security of the Website

Technical data may be used to:

  • Ensure the operation of the Website
  • Detect and prevent errors
  • Protect forms
  • Prevent attempted fraud, abuse and automated submissions
  • Secure IT systems.

This processing is based on Serval’s legitimate interest in ensuring the operation and security of its Website and information systems.

Audience measurement and statistics

Serval may use browsing data to measure Website traffic and improve its content, performance and usability.

Where the audience measurement tool used meets the conditions for an exemption from consent under applicable legislation, it may be used without prior consent.

Where these conditions are not met, the cookies or other tracking technologies concerned are only placed on your device after your prior consent has been obtained.

External content and videos

Some pages of the Website may include content from third-party services, including video players.

Where displaying this content requires cookies or other tracking technologies that are not strictly necessary for the operation of the Website to be placed on or read from your device, these technologies are blocked until you have given your consent.

You may refuse these tracking technologies without losing access to the Website’s other essential features.

Consent to personal data processing

Where consent is the legal basis for processing, Serval ensures that it is:

  • Freely given
  • Informed
  • Unambiguous
  • Obtained before the processing concerned begins.

Protecting forms with hCaptcha

Serval uses hCaptcha, provided by Intuition Machines, Inc., to protect its forms against bots, spam and abusive use.

In the configuration used on the Website, this service uses technical tracking technologies and local or session storage mechanisms that are exclusively necessary to secure forms. These technologies are not used for advertising or to track your browsing on other websites.

Tracking technologies that are strictly necessary for this security purpose are exempt from prior consent.

hCaptcha may also process technical information, including your IP address, the characteristics of your browser and device, and your interactions with the verification mechanism. This processing is based on Serval’s legitimate interest in ensuring the security of the Website.

Information necessary for the operation of the service may be transmitted to Intuition Machines, Inc., which acts as a data processor. For more information, please refer to hCaptcha’s privacy information.

Recipients of data

Personal data collected by Serval is accessible only to the persons and organisations that need it for the purposes described in this policy.

Depending on the processing concerned, recipients may include:

  • Authorised Serval personnel
  • Teams responsible for handling contact requests
  • IT teams and authorised administrators
  • The Website hosting provider
  • Maintenance and development providers acting on behalf of Serval, where access to data is necessary
  • Security providers
  • Providers of the tools used by the Website
  • Administrative, judicial or other legally authorised authorities, where required by law.

Serval does not sell its users’ personal data or transfer it for commercial purposes.

Data location and international transfers

Serval gives preference to solutions and providers offering appropriate guarantees in terms of security, confidentiality and personal data protection, as well as hosting and processing in France or within the European Economic Area (EEA).

However, the use of certain third-party services, including hCaptcha, provided by Intuition Machines, Inc., a company based in the United States, may involve personal data processing outside the EEA, depending on the configuration and terms of the service.

For data subject to the GDPR, hCaptcha’s contractual terms include, in particular, the European Commission’s standard contractual clauses to govern the transfers concerned. Further information is available on hCaptcha’s data protection page.

When selecting and overseeing its service providers and data processors, Serval also seeks to maintain control over the data processed and to preserve its confidentiality and location.

Any change that may result in data being transferred outside the European Economic Area will be assessed in advance under the GDPR and, where appropriate, this policy will be updated to inform data subjects about the arrangements for the transfer and the safeguards implemented.

Retention periods

Serval retains personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal obligations.

Data relating to contact requests

Data relating to contact requests is retained for the time necessary to handle the request and then, unless a legal obligation or specific need requires otherwise, for a maximum of 3 years from the last contact.

Cookies and other tracking technologies

The retention periods applicable to cookies, other tracking technologies and audience measurement data are set out in the Website’s Cookie and Other Tracking Technologies Policy.

Legal obligations and litigation

Certain data may be retained for an additional period where this is necessary:

  • To comply with a legal obligation;
  • For the establishment, exercise or defence of legal claims.

In such cases, the data may be held in an intermediate archive with restricted access.

Your rights regarding your personal data

Under applicable legislation, you have the following rights, depending on the processing concerned and its legal basis.

Right of access

You may ask Serval to confirm whether personal data concerning you is being processed and, where it is, obtain access to that data and the information required by law.

Right to rectification

You may request the correction of inaccurate personal data or the updating of incomplete data.

Right to erasure

You may request the deletion of your personal data under the conditions set out in the GDPR.

This right may be subject to certain exceptions, particularly where retention is necessary to comply with a legal obligation or to defend legal claims.

Right to restriction of processing

You may request, under the conditions set out in the GDPR, that the use of certain data be temporarily restricted.

Right to object

Where processing is based on Serval’s legitimate interest, you may object at any time on grounds relating to your particular situation.

Serval will then cease the processing concerned, unless there are compelling legitimate grounds for continuing it or the data is necessary for the establishment, exercise or defence of legal claims.

Right to data portability

Where the conditions set out in the GDPR are met, particularly where automated processing is based on your consent or on a contract, you may request to receive the data you have provided in a structured, commonly used and machine-readable format.

You may also request that it be transmitted directly to another data controller where technically feasible.

Right to withdraw your consent

Where processing is based on your consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

How to exercise your rights

To exercise your rights or ask a question about the processing of your personal data, you may contact Serval by email or post using the contact details in the section entitled Data controller.

Your request must enable Serval to identify the right you wish to exercise and the data or processing concerned.

Where Serval has reasonable doubts about the identity of the person making the request, it may request additional information that is strictly necessary to verify their identity.

Serval responds to requests within the time limits set by applicable legislation.

Complaints to the CNIL

If you believe that the processing of your personal data does not comply with applicable legislation, you have the right to lodge a complaint with:

Commission nationale de l’informatique et des libertés – CNIL (French Data Protection Authority)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

You may also lodge a complaint with the CNIL through its online services.

Security and confidentiality

Serval implements appropriate technical and organisational measures to preserve the security, confidentiality, integrity and availability of personal data.

These measures are intended, in particular, to protect data against:

  • Unauthorised access
  • Unauthorised disclosure
  • Alteration
  • Loss
  • Destruction
  • Fraudulent or unlawful use.

Managing cookies and other tracking technologies

The categories of cookies and other tracking technologies used on the Website, their purposes and the arrangements for managing consent are detailed in the Website’s Cookie and Other Tracking Technologies Policy.

You can change your preferences at any time using the “Manage cookies” link, available at the bottom of the Website’s pages.

Updates to this policy

Serval may amend this policy at any time, in particular to take account of:

  • Changes in legislation
  • Changes in recommendations from supervisory authorities
  • Changes to the processing carried out
  • The addition or removal of services or providers
  • Technical changes to the Website.