PRIVACY POLICY
Last updated: 1st June 2026 — Version 2.0
1. PREAMBLE
Weenav places particular importance on the protection of personal data entrusted to it. This Privacy Policy aims to inform you, in a transparent manner, about the data we collect about you, the reasons for collecting it, the recipients of this data, as well as the rights you have.
It is drafted in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the "GDPR") and Law No. 78-17 of 6 January 1978 as amended relating to computing, files and freedoms.
This policy applies to all data processing carried out by Weenav SAS, particularly through the website accessible at the address https://odoo.weenav.com and the associated services.
2. WHO IS RESPONSIBLE FOR YOUR DATA?
The data controller is:
Weenav SAS
Simplified joint-stock company
SIRET: 912 885 845 00053
VAT number: FR93912885845
Head office: 2 Rue Pierre Antoine Delahousse, P.A. Pierre Mauroy, 59223 Roncq, France
Represented by its President: Anthony Tartare
Téléphone : 03 74 09 99 00
Email : contact@weenav.com
3. HOW TO CONTACT US FOR ANY GDPR QUESTIONS?
For any questions regarding your personal data or to exercise your rights, you can contact us:
— By email : rgpd@weenav.com
— By mail: Weenav — GDPR Referent — 2 Rue Pierre Antoine Delahousse, P.A. Pierre Mauroy, 59223 Roncq
— Par téléphone : 03 74 09 99 00
We commit to responding to any request within one month (Art. 12 GDPR), extendable by two months if the complexity or volume of requests requires it, after informing you.
Weenav is not legally required to appoint a Data Protection Officer (DPO). Dorian Minouflet performs the role of internal GDPR contact and is your preferred point of contact for any questions regarding your personal data.
4. WHAT DATA DO WE COLLECT, FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS?
The details below summarise the main processes we implement.
4.1 Commercial prospecting and customer relationship
Data collected: first name, last name, job title, professional and/or personal email, landline and mobile phone, postal address, company, industry sector, type of boat or engine sought, history of exchanges.
Source: forms on our website, direct contact, trade shows, recommendations, creation of targeted lists by region for the purpose of distributing catalogues and regional aids.
Purposes: to identify prospects, qualify their needs, offer them our products and services, manage the commercial relationship, track opportunities.
Legal basis:
— For professionals (B2B): Weenav's legitimate interest in promoting its products to players in the nautical sector (Art. 6.1.f GDPR), accompanied by a right to object.
— For individuals (B2C): your prior consent (Art. 6.1.a GDPR).
4.2 Management of quotes, orders and contracts
Collected data: identity, role, contact details, delivery and billing addresses, technical data of the boat, contractual data (quotes, orders, payments).
Purposes: to establish quotes, conclude and execute supply contracts, ensure delivery and installation, manage after-sales service.
Legal basis: execution of a contract or pre-contractual measures at your request (Art. 6.1.b GDPR).
4.3 Billing and accounting obligations
Collected data: identity, contact details, bank account details / IBAN, SIRET and VAT numbers, invoices, supporting documents.
Purposes: to issue and track invoices, maintain accounts, meet tax and social obligations.
Legal basis: execution of the contract (Art. 6.1.b) and legal obligations to which Weenav is subject under the Commercial Code and the General Tax Code (Art. 6.1.c).
4.4 Newsletter and marketing communications
Collected data: email, first name and/or last name (according to the form), region, product interests, engagement statistics (opens, clicks).
Purposes: to send you our newsletters, invitations to events or targeted offers related to your activity or interests.
Legal basis:
— Individuals and voluntary registrations: your explicit consent (Art. 6.1.a GDPR + Art. L34-5 of the Postal and Electronic Communications Code).
— Professionals directly related to their activity: legitimate interest of Weenav (Art. 6.1.f), accompanied by a simple and permanent right of opposition (unsubscribe link in each message).
4.5 Recruitment
Data collected: identity, contact details, CV, cover letter, qualifications, work experience, interview notes, references.
Source: applications submitted via the 'Job Offers' section of our site, unsolicited applications by email.
Purposes: to review your application, organise interviews, make a hiring decision.
Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR) or legitimate interest for unsolicited applications (Art. 6.1.f).
4.6 Contact and assistance requests
Data collected: identity, contact details, content of your request, any attachments.
Purposes: to respond to you, handle information requests or incidents.
Legal basis: execution of pre-contractual measures (Art. 6.1.b) or legitimate interest (Art. 6.1.f).
4.7 Browsing our site and cookies
Data collected: IP address, session identifiers, browsing data (pages visited, duration), information from non-essential cookies.
Purposes: to ensure the technical functioning of the site, measure its audience, improve your experience.
Legal basis: legitimate interest for strictly necessary cookies (Art. 6.1.f); your consent for non-essential cookies (Art. 82 of the Data Protection Act).
The details of the cookies placed and the option to freely accept or refuse each category are accessible from the consent banner present on the site.
5. HOW LONG DO WE KEEP YOUR DATA?
We only retain your data for the duration necessary for the purposes for which it was collected and to comply with our legal obligations.
— Active prospects: for the duration of the relationship, then 3 years from the last contact
— Clients (commercial data): duration of the contract + 5 years
— Accounting documents and invoices: 10 years (Commercial Code, art. L123-22)
— Payroll data and payslips: employer retention for up to 50 years (Labour Code)
— Unsuccessful applications: 2 years from the last contact, unless a request for early deletion is made
— Newsletter subscriptions: as long as the subscription is active; proof of opt-out retained for 3 years
— Browsing logs and cookies: maximum 13 months
— Support requests: duration of the contract + 3 years
At the end of these periods, your data is deleted or anonymised in an irreversible manner.
6. WHO HAS ACCESS TO YOUR DATA?
Your data is accessible, within the limits of their business needs:
— To the authorised personnel of Weenav (sales, marketing, management, accounting, HR teams).
— To our technical subcontractors and service providers, who act on our instructions and in compliance with the GDPR, including:
• Odoo S.A. (Belgium) — host of our management platform (CRM, marketing, billing, human resources). The data is hosted in the European Union.
• Crowe Cogefis — accounting firm, for bookkeeping and tax and social declarations.
• Crédit Agricole and CIC — banking institutions, for the collection of customer payments and the payment of salaries and invoices.
• AGIPI — for the management of health insurance and employee welfare.
• Géodis — for the transport and delivery of our products to customers.
• Network of partner distributors and installers — for the installation of engines on site, as part of a sales contract.
— To public administrations (URSSAF, tax administration, courts, occupational health) when required by law.
We do not sell or transfer your data to third parties for commercial purposes.
7. ARE YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
All our processing and our subcontractors listed above operate within the European Union.
Si un transfert hors UE devait intervenir à l'avenir, nous nous assurerions qu'il est encadré par l'un des mécanismes prévus par le RGPD (décision d'adéquation, clauses contractuelles types, certification au Data Privacy Framework UE-USA). Vous pouvez nous contacter à rgpd@weenav.com pour obtenir une copie des garanties applicables.
8. HOW ARE YOUR DATA SECURED?
We implement technical and organisational measures designed to ensure a level of security appropriate to the risks, including:
— encryption of communications via TLS protocol (HTTPS)
— individual authentication and strong password policy
— two-factor authentication for administrator accounts
— access restricted to authorised personnel only, based on their roles
— logging of access and modifications to sensitive data
— regular backups and business continuity plan
— training and raising awareness among employees about data protection issues
No system being infallible, we commit to notifying you as soon as possible of any breach likely to result in a high risk to your rights and freedoms (Art. 34 GDPR).
9. COOKIES AND TRACKERS
Our site uses cookies and trackers. Upon your first visit, a consent banner allows you to accept, refuse, or customise the placement of non-strictly necessary cookies (audience measurement, third-party content, etc.).
Cookies strictly necessary for the operation of the site (session, security) are placed without prior consent, in accordance with the law.
You can modify your preferences at any time by clicking on the link "Cookie Policy" accessible in the footer.
10. WHAT ARE YOUR RIGHTS?
In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:
— Right of access (Art. 15) — to obtain confirmation that data concerning you is being processed, and to receive a copy.
— Right to rectification (Art. 16) — to have inaccurate or incomplete data corrected.
— Right to erasure (Art. 17), known as the "right to be forgotten" — to request the deletion of your data, under the conditions set out by the regulation.
— Right to restriction of processing (Art. 18) — to request the temporary suspension of processing.
— Right to data portability (Art. 20) — to receive your data in a structured, machine-readable format, or to request the direct transfer to another data controller.
— Right of objection (Art. 21) — to object, for reasons relating to your particular situation, to processing based on legitimate interest. The objection to commercial prospecting is unconditional and immediate.
— Right to withdraw your consent (Art. 7.3) — when processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before.
— Right to set post-mortem directives — to determine the fate of your data after your death.
11. HOW TO EXERCISE YOUR RIGHTS?
To exercise any of these rights, you can contact us:
— By email : rgpd@weenav.com
— By postal mail: Weenav — GDPR Referent — 2 Rue Pierre Antoine Delahousse, P.A. Pierre Mauroy, 59223 Roncq
In order to ensure the security of your data, we may, in case of reasonable doubt about your identity, ask you for additional proof.
We commit to responding to you within one month from your request (extendable by two months in case of complexity, after informing you).
12. RIGHT TO LODGE A COMPLAINT WITH THE CNIL
If you believe, after contacting us, that your rights have not been respected, you can lodge a complaint with the National Commission on Informatics and Liberty (CNIL), the French supervisory authority:
— Website: https://www.cnil.fr
— Postal address: CNIL — 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07
— Phone: 01 53 73 22 22
13. MINORS
Our services are not intended to be used by individuals under the age of 16 without the consent of their parents or legal guardians. If you are a parent or guardian and believe that we hold data concerning a minor without your consent, please contact us immediately at rgpd@weenav.com for deletion.
14. CHANGES TO THIS POLICY
This policy may be amended to adapt to the evolution of our services, regulations, or recommendations from regulatory authorities. The date of the last update is indicated at the top of the document. We invite you to consult it regularly.
In the event of a substantial change, we will inform you by any appropriate means (banner on the site, email to those subscribed to the newsletter).
For any questions, please do not hesitate to contact us at rgpd@weenav.com.