Privacy Policy | Roboli Design

Introduction

Roboli Design, a French manufacturer of high-end audio equipment with artisanal expertise and an international presence, attaches great importance to the confidentiality and security of your data personal. The trust that you place in us by using our e-commerce site (accessible at www.robolidesign.com) is essential, which is why we wish to inform you in complete transparency about the way in which your data is collected, used and protected.

The present policy of confidentiality (hereinafter referred to as the Policy) describes what personal data we collect, for what purposes we use them, on what legal bases we do so, how long we keep them, with whom we share them, as well as your rights under the a34> General Regulation on the Protection of Data (GDPR).

Identity of the controller of the processing

The controller of the processing of your personal data is Roboli Design, a simplified joint-stock company registered with the Versailles Trade and Companies Register, whose registered office is located at 6 avenue de l’Europe, 78117 Toussus-le-Noble, France. The legal representative of Roboli Design and contact person for matters relating to the protection of data is Mr Olivier Robert, who you can contact for any questions relating to your data at the email address roboli@me.com.

What data do we collect and for what purposes?

As part of the operation of our high-end e-commerce site, Roboli Design only collects personal data that is relevant and necessary for specific purposes. The categories of data collected may include: your surname, first name, email address, postal address, telephone number, your order history with Roboli Design, as well as certain navigation data (via cookies or tracers, see section ‘Cookies and tracers’).

We process this data in accordance with the principle of minimisation and for the purposes of a6> principle of minimisation and for explicit purposes. The main purposes of processing of your personal data are, as well as the types of data concerned, are as follows :

• Management of orders and deliveries: when you place an order on our website, we use your identification and contact information (surname, first name, delivery address of delivery, billing address of billing, email, telephone) as well as the details of the order (products ordered, amount, date) in order to ensure the processing, the tracking and delivery of your purchases. This data enables us to fulfil our contractual (fulfilment of the order, invoicing) and to contact you in the event of a problem (after-sales service, returns, etc.).
• Creation and management of the customer account: when creating an account a9> account on our website, we collect your registration data (surname, first name, email address, and password in encrypted form) in order to provide you with a secure customer area. This allows you to access your order history, save your preferences and improve your customer experience. The customer account is optional, but recommended for personalised follow-up.
• Sending of the newsletter and marketing communications: with your consent, we use your contact details (mainly your email address and possibly your first name/surname to personalise messages) so that we can send you our newsletter and information about our offers, new products or events at Roboli Design. You will not receive these unless you have subscribed to them voluntarily (opt-in). You can at any time unsubscribe from the newsletter via the unsubscribe link in each email.
• Audience statistics and website improvement: we use data from browsing collected via analytical cookies (such as Google Analytics) to understand how visitors use our website. This data includes for example information about the pages viewed, the time spent on the site, or the region of the world from which our site is accessed. Your IP addresses are anonymised to a41> to guarantee your confidentiality while allowing us to analyse the site’s audience and improve our services. These statistics are aggregated and only used solely to improve the usability and quality of our content.
• Customisation and targeted marketing: subject to reservation of your consent where required, we may process certain data relating to your preferences (such as your purchase history or browsing history) in order to offer you personalised content or advertisements tailored to your interests. This may include the use of marketing cookies or similar technologies placed on your device for the purposes of retargeting advertising or product a46> recommendations of products. For example, our advertising partners such as the company Sirdata may place cookies to collect non-personal information about your browsing and thus send you send you offers tailored to your audiophile tastes. (See the “Cookies and trackers ” for more details about these third-party cookies and how to express your choices.)
• Contact form and customer service: When you fill out the online contact form or contact us by other means (phone, direct email), we collect the data you provide (name, contact details, and the content of your message) so that we can respond to you and assist you. This information is used solely to process your request (e.g., product information, technical support, complaint) and to contact you if necessary.

For greater transparency, the table below summarizes the main purposes of processing, their legal basis under the GDPR, and the retention periods associated with your data:

Note: Once the retention periods have expired, we will delete or anonymise your data. In certain cases, an archiving beyond the specified periods may be carried out to comply with our legal obligations, resolve disputes or for evidentiary purposes, but this data is archived and is therefore accessible in a very limited and secure manner and secure.

Cookies and trackers

When you browse our website, cookies and similar technologies may be stored on your device (computer, smartphone, etc.), subject to your consent for some of them. A cookie is a small text file containing information that is stored on your device when you visit a website. We use a consent management banner (Consent Management Platform or CMP) in accordance with CNIL recommendations to collect your preferences when you first visit our website. This banner (provided by our partner Sirdata) allows you to accept or refuse non-essential cookies, either globally or category by category. You can adjust your cookie preferences at any time using the cookie settings module accessible on our website (for example, via the “Cookie management” link at the bottom of the page) or by configuring your browser settings. Please note that refusing certain cookies may affect your experience on the website (certain features requiring cookies will no longer be available).

We distinguish several categories of cookies and trackers:

Cookies essentiels (strictement nécessaires)

These cookies are essential to the operation of the site and our services. Without them, you wouldn’t be able, for example, to add an item to your basket, keep your session logged in, or secure your connection. They store only necessary technical data (e.g. memorizing your basket, your interface choices or authentication). These cookies do not require your consent, as they are based on our legitimate interest in providing you with a functional site and on technical necessity (exemption provided for by regulations). You cannot disable them from our cookie management tool, but rest assured that they do not collect personal information for commercial purposes.

Analytical cookies (statistics)

These cookies help us to understand how visitors interact with our site, in order to improve its performance and ergonomics. For example, they enable us to find out which pages are consulted the most, how long visits last, or via which channel users arrive on our site. We use tools such as Google Analytics for this purpose. These cookies are only placed with your explicit consent. When you accept them, the data collected (such as IP addresses, cookie identifiers, etc.) is immediately pseudonymized or anonymized wherever possible (for example, we have activated the IP address anonymization feature on Google Analytics). Information from analytical cookies is aggregated and used for statistical purposes only. Rejecting these cookies does not prevent you from using the site, but it does deprive us of valuable information for improving our content. In accordance with CNIL regulations, your consent to the use of analytical cookies will be requested at least every 13 months, as these cookies have a limited lifespan.

Marketing cookies (advertising and social networks)

These cookies, also known as targeting cookies, are used to show you advertising tailored to your interests, on or off our site (for example, showing you banners for our products on other sites, if you have visited our pages). They may also be used to measure the effectiveness of our advertising campaigns or to personalize the marketing content you see. They are only installed with your consent.

Our advertising partners may place cookies on our site in order to collect browsing information relating to your profile. In particular, Sirdata (our data marketing partner) may use cookies to collect non-directly identifiable data about your browsing habits on our site. Sirdata thus enables Roboli Design and other advertisers to send you relevant offers based on your centers of interest as deduced from your browsing. The data collected via these marketing cookies is processed anonymously or pseudonymously, and does not contain nominative information such as your name or e-mail address without your consent. The retention period for this data is limited: for example, Sirdata’s advertising cookies expire after a maximum of 365 days. You can obtain more information on the processing carried out by Sirdata by consulting their privacy policy page. If you do not wish Sirdata to collect or use your browsing data for advertising personalization purposes, you can deactivate this processing at any time by following this deactivation link (add link).

In any case, refusing or accepting marketing cookies only affects targeted advertising: if you refuse them, you will continue to see advertisements, but they will not necessarily be tailored to your interests. In addition, our site may include social networking features (e.g. sharing buttons) that may deposit cookies if you interact with them – these features are also subject to your consent via the cookie banner.

Summary of cookie retention periods : Essential cookies generally have a short lifespan (e.g. until the end of the session or a few days) as they serve temporary needs. Analytical and marketing cookies, on the other hand, expire at the latest 12 to 13 months after being deposited, in accordance with CNIL recommendations. Your choices regarding cookies are memorized for a maximum of 6 to 13 months, after which we will ask you again for your consent.

Data recipients (sharing with third parties)

Your personal data is accessible internally only to those persons who need it to carry out their tasks (for example, the customer service department to manage your orders or requests, the marketing department if you have consented to the newsletter, etc.), all under an obligation of confidentiality. Roboli Design does not sell or rent your data to third parties. However, we may share some of your information with trusted partners or service providers, only in the cases and for the purposes described below:

• Hosting and database : Your data is stored on secure servers provided by our web hosting provider, located in the European Union. The hosting provider (subject to the RGPD) may potentially have access to certain data as part of technical maintenance, but only on Roboli Design’s instruction and with respect for confidentiality.
• Payment providers: When you pay on our site, you are redirected to secure payment platforms (e.g. bank, online payment operator). These service providers process your payment data (credit card number, bank details, cardholder’s name) to authorize and execute the transaction. Roboli Design does not have access to your sensitive banking information (such as full card number), except possibly the last 4 digits for proof of payment purposes. Payment providers act as independent processors for the most part, with their own PCI-DSS and RGPD compliance obligations.
• Carriers and delivery: In order to ship your order, we provide the carrier companies (e.g. La Poste, DHL, UPS or another carrier depending on your choice/country) with the information strictly necessary to deliver your package. This includes your name, delivery address, e-mail address and telephone number (the latter may be used by the carrier to make an appointment or for tracking purposes). These delivery service providers only use your data for the purposes of delivering your purchases.
• Emailing and CRM tools: In order to manage the sending of our newsletter or customer communications, we may use an email marketing solution (e.g. Mailchimp, Sendinblue or equivalent) or customer relationship management (CRM) software. In this case, your e-mail address and, if applicable, your first name and surname are stored by the service provider. We select RGPD-compliant tools that do not use your data on their own behalf and act on our instructions (as subcontractors).
• Business partners (with your consent): If we set up special partnerships (for example, co-hosting an event, or bundling with an audiophile industry partner), we may, only with your prior consent, share some of your information with that partner. For example, if you take part in a joint competition, or if you explicitly agree to receive offers from a partner, your details may be passed on to that specifically identified partner. In all cases, you will be clearly informed at the time of collection and will be able to choose whether or not to accept this sharing.
• Legal obligations and authorities: We may need to disclose some of your personal data in order to comply with legal or regulatory obligations. For example, to respond to legitimate requests from tax authorities (invoices), customs authorities, law enforcement agencies or the courts. In such cases, we will only disclose the information required by law or court order. Similarly, in the event of litigation, the relevant data may be communicated to our legal advisors.

Apart from these cases, your data will not be transmitted to third parties without your consent. All our subcontractors and partners who have access to your information are contractually bound to Roboli Design and required to guarantee its confidentiality and security, pursuant to Article 28 of the RGPD. We ensure that none of these recipients use your data for purposes other than those we have validated.

Data security

Roboli Design implements technical and organizational security measures to protect your personal data against loss, misuse, unauthorized access or improper disclosure. These measures include:

• SSL/TLS encryption: Our website is secured via the HTTPS protocol. This means that all the information you transmit to us online (e.g. when you enter your payment details or login) is encrypted in transit, preventing third parties from intercepting it in cleartext. You can check for the padlock in your browser’s bar, which attests to this secure connection.
• Secure storage: Databases containing your information are protected by firewalls and other security mechanisms. Access to the systems is restricted to authorized persons equipped with robust identifiers and means of authentication. We use data centers located in the European Union, offering high levels of physical and logical security (controlled access to premises, redundant systems, etc.).
• Access control: Internally, only those employees or service providers who need to process your data as part of their duties have access, and only to the extent necessary. Everyone involved is bound by confidentiality obligations and trained in good data protection practices. Access is logged and regularly reviewed to detect any anomalies.
• Malware protection: Our infrastructures are protected against viruses, malware and intrusions by detection systems, updated antivirus software and periodic security audits. We also apply security patches to our software as soon as necessary to plug any vulnerabilities.
• Tests and audits: We may carry out regular tests, analyses and assessments of the effectiveness of our technical and organizational measures (in accordance with Article 32 of the RGPD), in order to guarantee a level of security appropriate to the risks. In addition, if we use subcontractors (hosting, payment, etc.), we ensure that they provide sufficient guarantees in terms of data security and protection (contractual clause, ISO 27001-type certifications, etc.).

Despite our best efforts, no data transmission or storage is 100% secure. In the event of a personal data breach (a security incident with detrimental consequences for your data), we undertake to notify the CNIL within the legal deadlines, and to inform you if this breach may entail a high risk for your rights and freedoms, so that you can take the appropriate measures.

International data transfers

In principle, we prefer to store your personal data on servers located in the European Union. However, some of our service providers or partners may be based outside the EU, which may involve the international transfer of data. This is particularly the case for tools provided by American companies, such as Google Analytics (audience analysis service).

We are aware of the issues involved in this type of transfer, particularly since the invalidation of the Privacy Shield in 2020. Consequently, when your data is likely to be processed outside the EU, we put in place appropriate safeguards to ensure a sufficient level of protection, in line with European requirements :

• Standard Contractual Clauses (SCC): We sign contracts with our non-EU service providers (such as Google) containing the Standard Contractual Clauses approved by the European Commission. The purpose of these standard clauses is to guarantee a level of data protection equivalent to that of the RGPD, including in the event of access by local authorities.
• Additional protection measures: In addition to the TCCs, we ensure that additional technical measures are in place. For example, for Google Analytics, IP anonymization is activated prior to transfer, and data is encrypted during transit and storage. We also check that our suppliers adhere to recognized security standards (such as ISO 27001 certification for Google).
• Case-by-case assessment: For each transfer, we assess the potential risk (nature of the data, destination country, local legal framework) and give preference, where possible, to service providers located in countries recognized as adequate by the EU or which offer additional guarantees.

Specifically, for Google Analytics, your site usage data may be processed by Google in the United States. However, Google has put in place mechanisms to comply with the RGPD: Analytics data collected in Europe is first processed on European servers where the IP is anonymized before any transfer to US servers. Residual transfers to the US are carried out under standard contractual clauses and with a high level of encryption.

If in the future other transfers outside the EU should take place (for example to other countries), we undertake to inform you and to supervise such transfers in accordance with the regulations (for example by the recipient’s adherence to an approved code of conduct, to a certification mechanism, or by obtaining your explicit consent in certain cases).

Your data rights

In accordance with the RGPD and the French law “Informatique et Libertés”, you have several rights concerning your personal data. Roboli Design is committed to respecting and facilitating the exercise of these rights. They are listed below:

• Right of access: You have the right to ask us whether we hold any personal data about you, and to obtain an intelligible copy of such data, together with information about the processing carried out (purposes, categories of data, recipients, etc.). In other words, you can ask us what personal information we hold about you and receive details of this information (subject, however, to the rights and freedoms of third parties).
• Right of rectification: If you find that your personal data is inaccurate or incomplete, you can request that it be corrected or completed. For example, if you change your address or we have misspelled your name, we will rectify this information on request.
• Right to erasure (right to be forgotten): You may request the deletion of your personal data in certain cases, for example if the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent (for processing based on consent), or if you object to processing and there are no compelling legitimate grounds for maintaining it. We will therefore delete your data on request to the extent permitted by law. Please note: this right is not absolute – we may retain certain information if we are required to do so by law (e.g. to retain invoices for 10 years) or to exercise or defend legal claims.
• Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on the legitimate interests of Roboli Design. If you exercise this right, we will cease the processing in question, unless there are compelling legitimate grounds for continuing it (for example, the need to retain certain data to comply with the law). You may also object at any time to the processing of your data for commercial prospecting purposes – without any justification being required. For example, you can refuse to receive our offers (newsletters) or to have your data used for direct marketing purposes.
• Right to portability: For processing based on your consent or on a contract (and carried out via automated processes), you may request to receive your personal data in a structured, commonly used and machine-readable format, so that you can transfer it to another data controller if you so wish. We will endeavor to provide you with your data in a usable electronic format, or transfer it directly to the third party of your choice where technically possible.
• Right to restrict processing: This right allows you to ask us to temporarily freeze the use of some of your data. For example, if you dispute the accuracy of data concerning you, or if you have exercised your right to object, you can request limitation while we analyze the situation. During this period of limitation, we will no longer use the data concerned (we will simply retain it).
• Right to define post-mortem directives: In accordance with French law, you have the possibility of communicating to us directives concerning the fate of your personal data after your death. In particular, you can specify whether you wish your data to be retained, deleted or passed on to a person of your choice. You can register these general directives with a trusted third party certified by the CNIL, or send us specific directives that apply only to data processed by Roboli Design. In the absence of such instructions, your heirs may be able to exercise certain rights (access, deletion) within the strict framework provided by law.
• Right to withdraw your consent: For all processing where we have asked for your consent (e.g. newsletter registration, deposit of analytical/marketing cookies), you have the right to withdraw your consent at any time. Withdrawal of consent only has effect for the future and does not affect the lawfulness of processing carried out prior to the withdrawal. In concrete terms, if you no longer wish to receive our newsletter or to have your data used for prospecting purposes, simply unsubscribe or set your preferences (cookies) and we will no longer carry out such processing.
• Right to lodge a complaint with the supervisory authority: If, after contacting us, you feel that your rights have not been respected or that your personal data is not being protected in accordance with the regulations, you may lodge a complaint with the competent supervisory authority. In France, this is the CNIL (Commission Nationale de l’Informatique et des Libertés). You can contact the CNIL online via its website www.cnil.frby post (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07) or by telephone. However, before contacting the CNIL, please contact us so that we can try to resolve your concerns.

How to exercise: These rights are not absolute and are exercised within the framework provided by regulations. To exercise any of your rights listed above, simply send us a request: by e-mail to the following address contact@robolidesign.com or by post addressed to Roboli Design, 6 avenue de l’Europe, 78117 Toussus-le-Noble, France. Please specify in your request the right(s) you wish to exercise as well as the scope concerned (for example, the e-mail address linked to your account, the type of data you wish to access, etc.). Proof of identity may be requested if we have reasonable doubt as to your identity, in order to ensure that we are communicating data to the right person. For example, if the e-mail address used for the request is not the one known in our files, or if sensitive data is involved, we may ask you for proof of identity.

We undertake to reply as soon as possible, and in any event within a maximum of one month from receipt of your request. In the event of a complex or multiple request, this period may be extended by a further two months, but you will be informed of the need for additional time within the first month. Exercising your rights is free of charge, except in cases of manifest abuse (repetitive or unfounded requests) where we may, in accordance with the RGPD, require payment of reasonable costs associated with processing your request.

Changes to the privacy policy

This Privacy Policy may be updated or modified to reflect changes in our practices, our legal environment or for any other legitimate reason. In the event of a substantial change (e.g. new processing purpose, change of service provider involving transfers outside the EU, etc.), we will inform you by the appropriate means. This may take the form of a notification on our site (information banner or pop-up) and/or an information e-mail if we have your e-mail address. We encourage you to check this page regularly for the latest version of our Policy.

This Privacy Policy is effective as of the date it is posted online and remains in effect until replaced by a new version. The date of last update is indicated below for your reference.

Policy last updated: June 27, 2025.

Contact

If you have any questions, requests or suggestions regarding this Privacy Policy or the protection of your personal data at Roboli Design, please do not hesitate to contact us. Our in-house Data Protection Officer (or equivalent) can be contacted at :

• by email to : contact@robolidesign.com
• by post to : Roboli Design – Service Protection des Données, 6 avenue de l’Europe, 78117 Toussus-le-Noble, France.

We assure you that we treat all privacy issues seriously and diligently. Your trust is important to us, and we remain at your disposal for any further clarification you may require.

Thank you for your attention and trust in Roboli Design. We hope that this Privacy Policy has provided you with clear answers about how we protect your data, and we wish you an excellent browsing experience on our site and a pleasant experience with our Hifi audio products.

Roboli Design participates in and complies with all IAB Europe Transparency & Consent Framework Specifications and Policies. It uses Consent Management Platform n°92.

You can change your choices at any time by clicking here.