Data controller: HÉLIOS SOLUTION COOL ROOF, SAS, Parc d’activité des Platières, 2949 route de Ravel, 69440 Saint-Laurent-d’Agny, France — contact@helios-coolroof.fr — +33 4 82 53 16 44.
1. Data collected and purposes
| Situation | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Free study request, simulator, contact form | name, company, email, phone, postcode, city, role, project timing, building type, declared roof area, message, simulator inputs | answer your request, carry out the study, call you back | pre-contractual measures / legitimate interest | 3 years after the last contact |
| Online shop order | identity, delivery address, email, phone, order; payment data processed by Stripe only | fulfil the order, delivery, invoicing, guarantees | performance of the contract / legal obligation | 10 years (accounting records) |
| Browsing | audience measurement (Google Analytics 4, anonymised IP) only after your consent; shop basket stored in your browser (localStorage) | statistics, operation of the shop | consent / legitimate interest | 13 months (consent) |
No data is sold or passed on for third-party marketing. Roof areas entered are declarations by the prospect; they do not constitute a survey.
2. Recipients and processors
- Brevo (Sendinblue SAS, Paris): sending of notification and confirmation emails; data hosted in the European Union.
- Stripe Payments Europe Ltd. (Dublin): secure payment of orders; Hélios never has access to your card data.
- Vercel Inc. (United States): hosting of the site and execution of the forms, under the European Commission’s standard contractual clauses.
- Google Ireland Ltd.: audience measurement (Google Analytics 4), only if you accept it.
- Hélios’ internal sales application, which receives study requests for processing.
3. Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability, as well as the right to set instructions regarding your data after death. To exercise them: contact@helios-coolroof.fr or by post to the head office, with proof of identity. Reply within one month. You may also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
4. Cookies and trackers
The site works without advertising cookies. The trackers used are:
- Audience measurement (Google Analytics 4): set only after you accept it in the consent banner; you can withdraw your consent at any time by clearing the site data in your browser.
- Local storage of the basket (shop): required for the basket to work, kept in your browser, never transmitted before your order.
- Stripe: during payment, Stripe sets its own security and fraud-prevention cookies on its domain.
5. Forms and simulator
The simulator displays a thermal potential from declarative data (roof area, substrate, department, use, air conditioning, insulation) without collecting any identity; these data are transmitted only if you choose to request the study, in which case they are attached to your request. The forms include an invisible anti-robot field and a limit on the number of submissions per IP address; the IP address is kept only for the duration of this protection.
6. Shop and payment
When ordering, identity, delivery address, email and phone are collected by Stripe on its secure payment page, then transmitted to Hélios for shipping and invoicing. Card data never passes through our servers. The basket is kept in your browser’s local storage until validation or deletion; it is linked to no identity.
7. Hosting logs
The host keeps technical logs (IP address, pages visited, timestamp, browser) for security and diagnostic purposes, for a limited period in line with its contractual commitments. These logs are not used for commercial purposes.
8. Transfers outside the European Union
Hosting by Vercel Inc. and audience measurement by Google may involve a transfer of data to the United States, governed by the European Commission’s standard contractual clauses and, for Google, by the EU–US Data Privacy Framework. You can refuse audience measurement in the consent banner.
9. Minors
The site is intended for professionals and adults; we do not knowingly collect data concerning minors.
10. Security
The site is served over HTTPS with security headers (HSTS, CSP). The forms are protected against automated submissions. Access to data is limited to authorised Hélios staff.
11. Job applications
The form on the recruitment page (in French) collects your name, email, phone, city, availability, message and, if you attach it, your CV (PDF or Word, 4 MB maximum). These data are used only to review your application and reply to you. They are sent by email to the Hélios recruitment team through our email provider (Brevo) and are never passed on to third parties. They are kept for two years at most.
12. Updates
This policy may change; the date of the last update appears here. Last update: 13 September 2026.