Last updated: June 2026
1. Purpose of this Policy
This privacy policy is intended to inform users of the website www.sopara.com about how SOPARA SAS collects, uses, stores and protects personal data in the context of its activities and the use of its website.
SOPARA is committed to processing personal data in compliance with the General Data Protection Regulation (GDPR) No. 2016/679 and applicable French legislation.
2. Data Controller
The data controller for personal data is:
SOPARA SAS
SIREN: 957 525 785
ZI du Mariage, 27 Rue des Bruyères
69330 Pusignan – France
For any questions regarding the protection of personal data or to exercise your rights:
Rémi Gicquel
GDPR Contact
Email: contact@sopara.com
3. Data Collected
Data Provided Directly
When you contact us or use our services, we may collect:
- First name and surname
- Email address
- Phone number
- Company
- Job title
- Content of messages submitted via contact forms or by email
Automatically Collected Data
When you browse our website, certain technical information may be collected:
- IP address
- Browser type and version
- Operating system
- Date and time of connection
- Pages visited
- Browsing and site usage data
Data Related to the Business Relationship
In the context of providing our services:
- Contractual information
- History of exchanges
- Billing information
- Data necessary for the delivery of services
Industrial and Technical Data
- As part of its supervision, monitoring and predictive maintenance solutions, SOPARA may collect and process technical data from its clients’ industrial equipment (temperatures, energy consumption, operating status, alarms, process parameters, etc.).
- This data remains the exclusive property of the client and is used solely for the provision of the subscribed services, improving the performance of installations, and maintaining the systems.
4. Purposes of Processing
Personal data is used for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Responding to contact requests | Legitimate interest |
| Providing the requested services | Performance of contract |
| Managing the business relationship | Performance of contract |
| Preparing quotations and invoices | Legal obligation |
| Ensuring the security of the website and systems | Legitimate interest |
| Producing usage statistics | Legitimate interest or consent, depending on the tools used |
| Sending information about our services | Legitimate interest or consent |
| Complying with regulatory and accounting obligations | Legal obligation |
5. Data Recipients
Personal data is accessible only to:
- authorised SOPARA employees;
- technical service providers involved in the hosting, maintenance or operation of our services;
- administrative or judicial authorities where required by law.
SOPARA never sells, rents or transfers personal data to third parties for commercial purposes.
6. Hosting and Sub-Processors
SOPARA may engage specialised providers for hosting, messaging, collaborative tools, cloud services, analytics or artificial intelligence solutions necessary for its activities.
These providers act solely on SOPARA’s instructions and provide appropriate guarantees with respect to data protection in accordance with the GDPR.
Where certain processing involves a transfer of data outside the European Union, SOPARA ensures that appropriate safeguards are in place, in particular through standard contractual clauses approved by the European Commission or any other mechanism recognised by applicable regulations.
7. Retention Periods
Personal data is retained only for as long as necessary for the purposes pursued.
| Data Category | Retention Period |
|---|---|
| Contact requests | 3 years after the last exchange |
| Prospect data | 3 years after the last contact |
| Client data | Duration of the contractual relationship, then 5 years |
| Accounting documents and invoicing | 10 years |
| Technical logs and security logs | Maximum 12 months |
| Cookies and audience measurement data | Maximum 13 months |
8. Data Security
SOPARA implements appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of personal data.
These measures include in particular:
- encryption of communications where necessary;
- management of authorisations and access rights;
- regular data backups;
- monitoring and securing of information systems;
- raising employee awareness of security best practices.
Despite these precautions, no electronic transmission or storage can guarantee absolute security.
9. Management of Security Incidents
In the event of a personal data breach likely to result in a risk to the rights and freedoms of the individuals concerned, SOPARA will implement the procedures provided for under the GDPR.
Where required by regulation, the individuals concerned and the competent supervisory authority will be notified within the required timeframes.
10. Your Rights
In accordance with applicable regulations, you have the following rights:
- right of access to your data;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object;
- right to data portability;
- right to withdraw your consent where processing is based on consent.
You may exercise these rights at any time by contacting:
Rémi Gicquel – GDPR Contact
Email: privacy@sopara.com
Proof of identity may be requested where necessary to verify your identity.
If you believe your rights are not being respected, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL):
11. Cookies
The website www.sopara.com uses cookies and similar technologies to ensure its proper functioning, measure its audience and improve the user experience.
On your first visit, a cookie management banner allows you to:
- accept cookies;
- refuse them;
- or customise your preferences.
You may modify your choices at any time via the cookie management settings available on the website.
12. Links to Third-Party Websites
The website may contain links to third-party websites. SOPARA cannot be held responsible for the privacy practices of those websites and invites users to consult their own privacy policies.
13. Policy Updates
SOPARA reserves the right to modify this privacy policy at any time to take account of legal, regulatory, technical or organisational developments.
The applicable version is the one published on the website at the date of consultation.
For any questions concerning this policy or the processing of your personal data, you may contact Rémi Gicquel, GDPR Contact, at the address indicated above.
Sopara business sectors
