1. Purpose of this Privacy Policy
This Privacy Policy explains how Raffin Medical collects, uses, retains and protects the personal data of users of its website.
In particular, it describes:
- the data that may be collected;
- the purposes for which the data is used;
- the persons and service providers who may have access to it;
- the applicable retention periods;
- the rights of data subjects and how to exercise them.
2. Data Controller
The data controller is:
Raffin Medical
746 route de Sarcey
69490 Saint-Romain-de-Popey – France
Tel.: +33 (0)4 37 58 10 10
Email: adv@raffin-medical.com
Raffin Medical has appointed an internal contact person to coordinate requests relating to personal data. This person has not been formally appointed as a Data Protection Officer (DPO).
3. Data Collected and Purposes
3.1 Contact form
When you use the contact form, Raffin Medical collects the information required to process your request, including:
- institution or company;
- surname and first name;
- job title;
- city, postcode and country;
- email address;
- telephone number, when provided;
- the content of the message and any information provided voluntarily.
Mandatory fields are marked with an asterisk. If these fields are not completed, Raffin Medical may be unable to process the request.
This data is used solely to respond to your request and manage any related correspondence. It is not used to send you marketing communications without an appropriate legal basis.
The processing is based on Raffin Medical’s legitimate interest in responding to requests addressed to it or, where the request concerns a contractual or pre-contractual relationship, on taking steps prior to entering into a contract or on the performance of a contract.
Forms are sent to adv@raffin-medical.com. No copy of the information entered is stored in WordPress.
3.2 Customer and prospect relationships – Salesforce
Where correspondence with Raffin Medical leads to a commercial or pre-contractual relationship, certain professional contact details may be recorded in Salesforce in order to manage and monitor the customer or prospect relationship.
Depending on the circumstances, this processing is based on taking pre-contractual steps, the performance of a contract, compliance with legal obligations or Raffin Medical’s legitimate interest in managing its professional relationships.
3.3 Newsletters and electronic communications – Brevo
Raffin Medical uses Brevo to send newsletters and electronic communications. The data used may include the email address, surname, first name and company, together with information relating to message delivery, email openings and clicks on links.
This information is used to manage mailing lists, deliver communications, measure their performance and improve their content.
Depending on the nature of the relationship with the recipient, these communications are based either on the recipient’s consent or on Raffin Medical’s legitimate interest in communicating with its professional contacts, in accordance with applicable regulations.
Recipients may unsubscribe at any time by using the link included in each message. Unsubscription will apply to future communications. Information strictly necessary to respect this objection may be retained on a suppression list.
3.4 Browsing data, cookies and third-party services
When you browse the website, certain technical data may be processed to ensure the operation and security of the website, remember your preferences or, with your consent where required, measure website traffic and display content provided by third-party services.
This data may include your IP address, information about your browser and device, the pages viewed and your interactions with the website.
The website may use services such as Google Analytics, Google reCAPTCHA, Google Maps, YouTube or Facebook. Services requiring consent are blocked until the user has accepted them.
An up-to-date list of the cookies and services used, their purposes and retention periods is available in the Cookie Policy, generated and updated by the Complianz consent management tool.
4. Recipients of the Data
Within the limits of their duties and only where necessary, the data may be accessed by:
- authorised Raffin Medical employees, in particular teams responsible for handling requests, managing customer relationships and communications;
- service providers responsible for website hosting, maintenance and security;
- Salesforce, where data is recorded for customer and prospect relationship management;
- Brevo, for newsletter management and delivery;
- providers of third-party services and analytics tools enabled on the website, according to the choices made through the cookie management module.
Raffin Medical does not sell or rent users’ personal data.
5. Data Retention Periods
Data is retained only for as long as necessary for the purpose for which it was collected. It is then deleted or archived where required by law.
- Requests submitted through the contact form: for the time required to process the request, then for a maximum of three years from the last correspondence where retention remains useful for monitoring the professional relationship.
- Prospect data stored in Salesforce: for a maximum of three years from its collection or the last contact initiated by the prospect.
- Customer data stored in Salesforce: for the duration of the commercial relationship, then archived for the periods necessary to comply with legal obligations and protect Raffin Medical’s rights.
- Data used for newsletters: until the recipient unsubscribes or, for inactive contacts, for a maximum of three years from the last contact, subject to data retained in order to respect an objection.
- Cookies and browsing data: according to the periods stated in the Cookie Policy.
- Data subject rights requests: for the time required to process the request, then for the period necessary to demonstrate that it was handled properly.
6. Transfers Outside the European Economic Area
Data entered in the contact form is sent directly to Raffin Medical and is not stored in WordPress.
However, some service providers or third-party services used by Raffin Medical, including Salesforce, Brevo and certain Google and Meta services, may process data outside the European Economic Area. Where such transfers take place, they are governed by the safeguards provided for under applicable regulations, such as an adequacy decision or the standard contractual clauses approved by the European Commission.
Further information is available in the privacy policies of the relevant service providers and in the Cookie Policy.
7. Data Security
Raffin Medical implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or fraudulent use.
Access to data is restricted to those who require it as part of their duties. Communications with the website are protected using the secure HTTPS protocol.
8. Data Subject Rights
Subject to the conditions laid down by applicable regulations, you may exercise the following rights:
- the right to access your data;
- the right to rectify inaccurate or incomplete data;
- the right to erasure;
- the right to restriction of processing;
- the right to object, in particular to direct marketing;
- the right to data portability, where applicable;
- the right to withdraw your consent at any time for processing based on consent.
To exercise your rights, please email adv@raffin-medical.com or write to:
Raffin Medical – Personal Data Department
746 route de Sarcey
69490 Saint-Romain-de-Popey – France
Raffin Medical will respond within the periods specified by applicable regulations. If, after contacting us, you believe that your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL).
9. Cookie Management
You may accept, refuse or change your cookie choices at any time using the “Manage consent” module available on the website.
For a list of the cookies used, their purposes, providers and retention periods, please see our Cookie Policy.
10. Changes to this Privacy Policy
Raffin Medical may amend this Policy to reflect changes in regulations, technology or its practices. The latest version is available on this page.
Last updated: 10 September 2026
