Privacy policy

PRIVACY POLICY

Last updated: 20 August 2026

This policy explains how BME CONSULTING, operating the attolle.com website under the Attolle name, collects, uses, keeps and protects the personal data of the users, prospects and customers of its website.

1. Data controller

BME CONSULTING — Attolle
A French limited liability company (SARL) with share capital of €117,020
Registered office: 113 rue Marietton, 69009 Lyon, France
SIREN: 754 058 410 — Lyon Trade Register: 754 058 410 — SIRET: 754 058 410 00038
EU VAT number: FR24 754 058 410
Email: contact@attolle.com

BME CONSULTING determines the purposes and means of the processing carried out in operating attolle.com.

2. Personal data collected

Depending on how you use our site and services, we may collect:

your first and last name;
your email address;
your telephone number;
your billing and delivery addresses;
information relating to your customer account;
the contents of your basket and your order history;
the products viewed, purchased, returned or cancelled;
the information needed to process a payment;
delivery information, including any access constraints you report to us;
exchanges with our customer service and after-sales service;
photographs or videos sent as part of an after-sales request;
the serial number of the unit and the associated compliance information, needed for the guarantee and for the regulatory traceability of batteries and refrigeration equipment;
reviews left on our products;
your IP address;
information about your browser, your device and your connection;
browsing and site usage data;
your preferences regarding communications and cookies.

BME CONSULTING has no access to your full card number or to its security code. That information is handled directly and securely by the payment provider used for the order. Please do not send us sensitive data that is not necessary to process your order or your request.

3. Where the data comes from

directly from you when you create an account, place an order, complete a form, request a quotation or contact us;
automatically as you browse, through cookies and similar technologies;
from Shopify and from the providers involved in processing your order, your payment or your delivery;
when you interact with our advertisements or our social media pages, subject to your settings and your consent.

We do not buy personal data about individuals visiting our site.

4. Purposes and legal bases

Order management

Recording and confirming your order, processing payment, preparing and shipping the products, communicating delivery information, handling returns, refunds and exchanges, managing guarantees and after-sales service. Legal basis: performance of the contract.

Invoicing and accounting obligations

Issuing invoices, keeping our accounts and meeting our tax and legal obligations. Legal basis: compliance with a legal obligation.

Customer account management

Creating, securing and administering your account, saving your details, allowing you to view your orders. Legal basis: performance of the contract or steps taken at your request.

Customer service and enquiries

Answering your questions, enquiries, complaints or quotation requests. Legal basis: our legitimate interest in answering the requests addressed to us and in maintaining the quality of our customer service.

After-sales service, guarantees and product compliance

Using order information, the serial number and the photographs, videos and explanations sent to us in order to diagnose a problem, arrange a repair, a replacement or a refund, and ensure the traceability required by the rules applicable to batteries and electrical equipment. Legal basis: performance of the contract, compliance with our legal obligations and, where necessary, our legitimate interest in establishing and keeping a record of how the case was handled.

Fraud prevention and security

Securing the site, protecting payments, detecting fraudulent orders and preventing misuse. Legal basis: our legitimate interest in protecting our business, our site and our customers.

Marketing

Where you are not yet a customer, we send commercial communications by email or SMS only if you have expressly consented. Where you are already a customer, we may tell you about products similar to those you have bought, on the basis of our legitimate interest, unless you object.

You can unsubscribe at any time using the link in every email or by writing to contact@attolle.com. Withdrawing consent is free of charge and does not affect the communications needed to follow up an order, a delivery or an after-sales case.

Audience measurement and advertising

Subject to your consent, we may use cookies or trackers to measure site traffic, understand how our pages are used and improve our services. Strictly necessary cookies are not subject to consent where they meet the conditions laid down by the rules. No advertising cookie is placed before you agree.

5. Who receives the data

As far as necessary for their tasks, your data may be passed to:

authorised members of BME CONSULTING;
Shopify, which provides the e-commerce platform and the technical hosting of the shop;
payment providers;
banks and financial institutions involved in payment;
carriers and logistics providers responsible for delivering or collecting the products;
IT, hosting, maintenance and security providers;
providers handling customer service or after-sales service;
manufacturers and their technical departments, where handling a guarantee requires it;
compliance schemes, where extended producer responsibility rules require it;
audience measurement, communication and advertising providers, only where the rules allow and, where applicable, after your consent;
our advisers, insurers, accountants or lawyers where their involvement is necessary;
administrative, judicial or tax authorities where the law requires it.

Our providers are only authorised to use the data for the tasks entrusted to them. We do not sell your personal data.

6. Shopify

The attolle.com site uses the Shopify platform. Shopify collects and processes certain data needed to operate the shop, secure payments, manage orders and improve its services.

To find out more: https://www.shopify.com/legal/privacy

Shopify may also act as an independent controller for some of its own features. Requests relating solely to that processing can be sent to it through its privacy portal: https://privacy.shopify.com

7. Cookies and other trackers

The site uses several categories of cookies: strictly necessary to the operation of the shop, the basket, the customer account and payment; preference cookies; and audience measurement cookies.

On your first visit, a banner lets you accept all cookies, refuse all non-essential cookies, or set your own preferences. Refusing is as simple as accepting. How to withdraw your consent is set out in our cookie policy.

Refusing non-essential cookies does not prevent you from browsing the site or placing an order. Your choice is kept for a maximum of six months. Full details are in our cookie policy.

8. Retention periods

order and contractual data: for the duration of the commercial relationship, then up to five years as evidence;
invoices and accounting records: ten years from the close of the financial year;
after-sales data: for as long as needed to handle the request, apply the guarantees and manage any dispute;
customer account data: until the account is deleted or after three years of inactivity;
prospect data: three years from the last contact;
marketing data for customers: for the duration of the commercial relationship, then three years;
exchanges with customer service: up to three years after the last contact;
fraud prevention data: for the duration of the check, then the applicable limitation period;
cookie choices: six months;
cookies and trackers: the periods stated in the cookie policy.

Once those periods expire, the data is deleted, anonymised or securely archived where the law still requires it to be kept.

9. International transfers

Some of our providers, in particular Shopify, may process or host data outside France or the European Economic Area. Where data is transferred to a country without an adequacy decision, those transfers are framed by appropriate safeguards, in particular the European Commission's standard contractual clauses.

Where a product is shipped directly by a supplier established outside the European Union, the data strictly necessary for delivery is passed to that supplier — name, delivery address and contact details — under the same contractual framework. The shipping method applicable to each product is stated on its product page and in the shipping policy.

10. Data security

We put in place reasonable technical and organisational measures to protect data against loss, unauthorised access, disclosure, alteration or destruction: restricting access to authorised staff, securing accounts, encrypted connections, and using providers offering suitable safeguards.

As no computer system can guarantee absolute security, we encourage you to use a strong password and never to share your login details.

11. Your rights

Under the GDPR and the French Data Protection Act, you have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time, the right to give directions on what happens to your data after your death, and the right to lodge a complaint with the CNIL.

To exercise your rights: contact@attolle.com, or by post to BME CONSULTING — Attolle, 113 rue Marietton, 69009 Lyon, France.

Your request must allow us to identify you and to know which right you are exercising. Proof of identity may be requested only in the event of reasonable doubt. We will reply within one month at the latest, extendable under the conditions laid down by the rules. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests.

12. Complaint to the CNIL

Commission nationale de l'informatique et des libertés — CNIL
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
https://www.cnil.fr

13. Data concerning minors

The site and the products offered are not specifically aimed at minors. We do not knowingly collect personal data concerning a minor ordering without the authorisation of their legal representative. A parent or legal representative may ask for such data to be deleted at contact@attolle.com.

14. Links to third-party sites

The site may contain links to sites, services or social networks operated by third parties. BME CONSULTING is not responsible for the processing carried out by those third parties.

15. Automated decisions

BME CONSULTING does not take decisions producing legal effects or significantly affecting a person on the sole basis of fully automated processing. Some features may suggest products or adapt the content displayed according to browsing, subject to the choices expressed regarding cookies.

16. Changes to this policy

This policy may be amended to reflect changes in our activities, our providers or the applicable rules. The version that applies is the one published on the site. Where a change substantially affects users' rights, appropriate information will be displayed or sent by email.