Privacy policy
GENERAL TERMS OF USE (GTU) AND PRIVACY POLICY
CAVAL – Website: https://caval.fr
Effective as of: 01/01/2026
Preamble
These General Terms of Use (the « GTU ») govern access to the website https://caval.fr (the « Website ») and its use by any visitor or non-professional customer (the « User »), as well as the rights and obligations of CAVAL (the « Seller »). They supplement the General Terms and Conditions of Sale (the « GTC ») applicable to orders placed on the Website. Acceptance of the GTU is recorded when an account is created and, where applicable, when each order is placed.
Article 1 – Purpose
The Website provides Users with tools enabling them to browse the catalogue, create an account, order products, pay for purchases, track deliveries and communicate with the Seller. These GTU define the conditions for accessing and using these services.
Article 2 – Scope
Access to and use of the Website are reserved for Users acting as consumers. Any use contrary to this requirement, fraudulent use or use that does not comply with the GTU is prohibited. The GTU are accessible at all times on the Website and may be amended at any time; the applicable version is the one in force on the day of browsing.
Article 3 – Account creation and security
To place an order, the User must create an account by providing accurate and up-to-date information. Personal and confidential login credentials (username and password) are assigned to the User. The User is solely responsible for keeping them secure and for any action taken through their account, except in the event of fraud not attributable to the User. Any suspected fraudulent use must be reported without delay to: je@caval.fr.
Article 4 – Services offered by the Website
Use of the Website is free of charge (excluding connection costs). The Website may contain references to products or services that are not available in certain countries. Typographical errors may occur without giving rise to liability on the part of the Seller beyond mandatory legal provisions.
Article 5 – Rules of use and prohibited conduct
The User undertakes to: (i) use the Website in good faith; (ii) refrain from compromising the security or integrity of the Website; (iii) not reproduce or extract content on a large scale; (iv) not misuse the Website for unlawful purposes; (v) respect the intellectual property rights of the Seller and third parties.
Article 6 – Relationship with the GTC
Purchases are governed by the Seller's GTC, which are accessible on the Website. In the event of a conflict, the GTC prevail for sales and the GTU for use of the Website.
Article 7 – Intellectual property
All elements of the Website (texts, visuals, trademarks, logos, databases and structure) are protected. Any reproduction, public display, adaptation or exploitation, in whole or in part, without the Seller's prior written authorisation is prohibited and may constitute infringement.
Article 8 – Website availability and maintenance
The Seller endeavours to ensure access to the Website 24 hours a day, 7 days a week, subject to maintenance, updates and events of force majeure. No compensation is due for temporary unavailability.
Article 9 – Liability
The Seller may be held liable only in the event of proven fault and solely for direct and foreseeable damage resulting from use of the Website. Any liability for indirect damage is excluded to the extent permitted by law.
CAVAL shall not be liable in the event of misuse of the Website's services by the User or fault on the User's part. Nor shall it be held liable for acts attributable to a third party.
The User is solely responsible for the use of the Website's services and undertakes, upon first demand, to hold CAVAL harmless and indemnify and compensate it for any damage, loss or loss of profit it may suffer if a third party holds it liable as a result of an action related to such use by the User.
Article 10 – External links
The Website may contain links to third-party websites operated by independent companies. The Seller has no control over these websites and accepts no liability for their content or practices.
Article 11 – Cookies (summary reminder)
The Website uses necessary technical cookies. Other cookies (audience measurement, personalisation, advertising and social media) require the User's consent through a consent management platform (CMP), the Axeptio solution. Acceptance or refusal choices are retained for six (6) months. Audience measurement cookies that are not exempt from consent have a maximum lifespan of thirteen (13) months. The User may change their preferences at any time from the Website's footer.
Article 12 – Complaints – Mediation – BLOCTEL
Any complaint may be sent to customer service at je@caval.fr. In accordance with Article L.612-1 of the French Consumer Code, consumers may use a consumer mediator free of charge. CAVAL will provide the contact details of its designated consumer mediator on the Website's ‘Legal Notice’ and/or ‘GTC’ page.
CAVAL does not engage in telephone marketing. Nevertheless, CAVAL informs the User that they may register on the BLOCTEL telephone marketing opt-out list (www.bloctel.gouv.fr).
Article 13 – Partial invalidity – Amendments
If a clause is deemed invalid, the other clauses remain applicable. The Seller may amend the GTU at any time ; the User is invited to consult the current version regularly.
Article 14 – Governing law – Competent courts
The GTU are governed by French law. The French courts have exclusive jurisdiction, subject to mandatory consumer protection rules.
Article 15 – Contact – Company details
CAVAL SAS, with share capital of 6 900 €, whose registered office is located at 9 rue des Colonnes, 75002 Paris, France, registered with the Paris Trade and Companies Register under No. 830 984 860, SIRET: 83098486000023, intra-community VAT No.: FR78830984860.
Contact e‑mail: je@caval.fr.
Publication Director: NOMIS (President).
Hosting provider: Shopify Inc. – 126 York St., Ottawa, ON K1N 5T5, Canada – Tel.: 1-888-746-7439.
PRIVACY POLICY (GDPR) – CAVAL
This policy describes how CAVAL processes Users' personal data in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78‑17 of 6 January 1978, as amended.
1. Data Controller
CAVAL SAS – 9 rue des Colonnes, 75002 Paris, France, Paris Trade and Companies Register 830 984 860. Privacy contact: je@caval.fr. No DPO has been appointed.
2. Purposes and legal bases
|
Account and order management |
performance of the contract (Art. 6(1)(b) GDPR) |
|
Payment and fraud prevention |
performance of the contract/legitimate interest (Art. 6(1)(b) and (f)) |
|
Delivery and after‑sales service |
performance of the contract (Art. 6(1)(b)) |
|
Customer relations (assistance, complaints) |
legitimate interest (Art. 6(1)(f)) |
|
Direct marketing and newsletters |
consent (Art. 6(1)(a)) and, where applicable, Art. L.34‑5 of the French Postal and Electronic Communications Code (CPCE) |
|
Audience measurement and personalisation |
consent (Art. 6(1)(a)), except for strictly necessary cookies |
|
Compliance with legal obligations |
legal obligation (Art. 6(1)(c)) |
3. Data processed
Identification data, contact details, account data, order histories, payment data (transmitted to payment service providers : Shopify Payments, Payplug, PayPal, Alma), delivery data, exchanges with customer service, browsing data and cookies.
Shopify collects data when the customer's order is recorded. These data are transmitted to BigBlue for customer shipments.
When the Website is used, certain personal data may be used for profiling within the meaning of Article 4.4 of Regulation (EU) 2016/679.
Profiling consists of using personal data to analyse or predict a User's preferences, interests or behaviour in order to offer them a personalised experience. The profiling carried out by CAVAL is strictly limited to the following purposes: user experience (for example, Product recommendations), targeted advertising where the User has consented to it, marketing segmentation for sending tailored communications, audience measurement and continuous improvement of the Website, in accordance with the preferences expressed in the cookie management module.
No automated decision-making process producing legal effects within the meaning of Article 22 of the GDPR is implemented.
Data used for profiling are collected through Google (Google Ads, Google Analytics with advanced tracking) ; Meta (Facebook / Instagram Ads, Meta pixel) ; TikTok (TikTok Ads) ; Pinterest ; Klaviyo email marketing tools (customer segmentation) and WhatsApp (Simio).
Targeted advertising is active through Google (Google Ads, Google Analytics with advanced tracking) ; Meta (Facebook / Instagram Ads, Meta pixel) ; TikTok (TikTok Ads) ; Pinterest ; Klaviyo email marketing tools (customer segmentation) and WhatsApp (Simio).
The User may object at any time to profiling based on their consent (particularly for personalised advertising and marketing cookies) by withdrawing their consent through the « Manage my cookies » module accessible from the Website, or by sending a request to: je@caval.fr. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
4. Recipients and data processors
Authorised CAVAL personnel and service providers acting on its behalf (hosting, payment, logistics, e‑mail marketing, analytics, support). Data may be disclosed to authorised authorities (legal obligations or defence of rights).
5. Transfers outside the European Union
Shopify Inc., located in Canada, receives certain data that may be transferred to the United States (PayPal, Alma, PayPlug, Google, Meta, Klaviyo).
Transfers are governed by the European Commission's Standard Contractual Clauses.
Transfers may take place to countries outside the European Union. They are subject to appropriate safeguards, such as the European Commission's standard contractual clauses and supplementary security measures.
6. Retention periods
• Customer account: 3 years from the last activity or closure request.
• Orders and related documents: statutory retention and archiving period (up to 5 years; invoices: 10 years).
• Direct marketing/newsletter: 3 years from the last contact or until consent is withdrawn.
• Cookies: consent retained for 6 months; audience measurement cookies that are not exempt from consent ≤ 13 months.
7. Data subjects' rights
The User has the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to give post‑mortem instructions. They may exercise their rights at: je@caval.fr or by post to the registered office address. They have the right to lodge a complaint with the CNIL.
8. Direct marketing and newsletters
The User may subscribe and unsubscribe at any time via the link included in each e‑mail. Communications may be personalised according to their stated preferences.
9. Cookies and trackers
An information banner allows consent to be given by purpose. The categories used may include: (i) necessary; (ii) audience measurement; (iii) personalisation; (iv) advertising; (v) social media. Consent may be withdrawn at any time through the « Manage my cookies » module available on the Website.
10. Security
Appropriate technical and organisational measures are implemented to ensure the confidentiality, integrity and availability of data (access control, logging, backups, encryption where appropriate).
11. Minors
The Website is intended for adults. For minors, account creation requires the consent of the holder of parental responsibility where required by applicable regulations.
12. Policy updates
This policy may be updated. In the event of a substantial change, the User will be informed by appropriate means.