Privacy policies and data protection

Contact data of the data controller

This Data Protection Policy covers data processing by:
Data controller: CORNILLEAU AMERICA Inc. (hereinafter Cornilleau)
6832 E Genesee street,
Fayetteville, NY 13066
E-mail: support@cornilleau.com Phone: +1 678 257 4350
The Data Protection Officer of Cornilleau can be contacted at the above E-mail address.

Collection and storage of personal data and nature and purpose and their use

When visiting the website

When you access the websites of CORNILLEAU, the browser on your end device automatically sends information to our website server.

This information is temporarily saved in a log file. The following information is collected without any action on your part and deleted automatically within 4 weeks:

  • - IP address of the querying computer,
  • - date and time of the access,
  • - name and URL of the accessed file,
  • - browser type and version and further information sent by the browser (such as your computer’s operating system, the name of your access provider, geographical origin, language setting etc.).

We process these data for the following purposes:

  • - ensuring trouble-free connection to the website,
  • - ensuring comfortable use of our website,
  • - evaluating system security and stability and for further administrative purposes.
In addition, we use your IP address for the functional purpose of regional compliance. This allows our website to identify your general location (e.g., whether you are visiting from California) to ensure we apply the appropriate privacy regulations and display the correct consent management interface (Axeptio). For this specific purpose, your IP address is processed by a third-party service (ipapi.co). This technical check is a functional necessity to meet our legal obligations and does not involve any behavioral tracking or profiling prior to your explicit consent.

Our legitimate interest follows from the above purposes for the data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we also use cookies and analytics services during visits to our website. Further explanations can be found under sections 4 and 5 of this Data Protection Policy.

When ordering as a guest

If you would like to order products as a guest via our website, we collect the following information:

  • - salutation, given name, surname,
  • - a valid email address,
  • - address and country,
  • - date of birth and payment data, depending on the payment method you chose (for example credit card data or bank details).

These data are collected in order to identify you as our contractual partner,

  • - to check the entered data for plausibility,
  • - to process the payment of your order,
  • - to process any warranty claims which may arise and to assert any claims against you

To ensure smooth and simple processing of your order and for faster clarification of queries, you can also provide other data:

  • - your telephone and mobile phone number
  • - an alternative delivery address. Provision of these data is voluntarily.

Your personal data which we collect for the order are saved until the end of the statutory warranty period and then automatically deleted, unless we are obliged to longer storage due to tax- and commercial-law retention and documentation duties or you have consented to a prolonged period.

When setting up a user account

You can set up a password-protected user account with us in which we save your personal data. The purpose of this is to provide you with the greatest possible comfort through easier, faster and more personal purchasing in the processing of your orders. If you would like to set up a password-protected user account with us, we need the following information from you:

  • - salutation, given name, surname
  • - date of birth
  • - a valid email address. In addition, to open a user account you have to enter a password of your choice. Together with your email address this provides access to your user account. In your user account you can view and change the data saved about you at any time.

Creating a user account is not required for using our website or for orders you would like to place with us. We also offer you the possibility of placing your order as a guest. In that case however, you have to enter all your data again for every order.

After your user account is deleted, your personal data are automatically deleted, unless we are obliged to longer storage due to tax- and commercial-law retention and documentation duties or you have consented to a prolonged period.

When registering for our newsletter

In so far as you have expressly consented, we will use your email address to regularly send you our personalized newsletter. Providing an email address is sufficient for receiving the newsletter.

Cancellation is possible at any time, e.g. via a link at the end of every newsletter. Alternatively, you can cancel at any time by sending an email to support@cornilleau.com

When using our contact form

If you have questions of any nature, you can get in touch with us via a contact form. This requires the stating of a valid email address and your given name and the subject of your query so that we know who sent the query and how we can answer it.

The personal data we collected for using the contact form will be automatically deleted after your query has been dealt with.

Transfer of data to third parties

Your personal data will be transferred to third parties as explained in this policy. This includes in particular transfer of your personal data:

- To our service providers for administrative purposes, to operate features and functions of the website, customer support, customer reviews and product reservation, and to ensure centralized customer management with regard to our contractual relationship.

- To shipping and logistic companies for the purpose of delivering the goods you ordered.

- To payment service providers and/or banks to carry out a payment transaction.

It is our intent that the transferred data be used by the third parties solely for the purposes outlined above.

If you make use of our customer helpdesk via our website, your data (name and email-address) entered into the contact form are transferred to Zendesk Inc., 1019 Market St, San Francisco, CA 94103 USA („Zendesk“).

Zendesk uses this information to answer your requests on our behalf. Zendesk assures that your personal data is fully protected against unauthorized access. Zendesk will not use your data to contact you for its own purposes or to for transferring them to third parties.

As a US-based company, Zendesk complies with the privacy policy of the US Privacy Shield and is registered with the U.S. Department of Commerce's US Privacy Shield Program.

Cookies

We use cookies on our website. These are small files that your browser automatically creates and saves on your end device (laptop, tablet, smartphone or suchlike when you visit our website). Cookies do not cause any harm to your computer and do not contain any viruses, trojans or other malware.

The cookie stores information which arises in conjunction with the specifically used end device. This does not mean, however, that this gives us direct knowledge of your identity.

Cookies are used on the one hand so that we can make the use of our offerings more pleasant for you. Therefore, we use session cookies to recognize that you have already visited individual pages our website, you have already logged on in your user account or for displaying the shopping cart. These are automatically deleted after you leave our website.

In addition, we use temporary cookies saved on your end device for a certain defined period to optimize user friendliness. If you visit our website again to use our services, it is automatically recognized that you were already here before and which entries and settings you made so that you do not have to repeat them.

On the other hand, we use cookies to compile statistics on the use of our website and to evaluate the optimization of our offerings for you (see section 5). These cookies enable us to automatically recognize that you were here before the next time you visit our website. These cookies are automatically deleted after a defined period of time.

Most browsers accept cookies automatically. You can configure your browser, however, so that no cookies are saved on your computer or a message always appears before a new cookie is created. Complete deactivation of cookies can, however, lead to you not being able to use all the functions of our website.

Analytical tools

With the deployed tracking measures, we want to ensure an appropriate design and continuous optimization of our website. On the other hand, we use tracking measures to compile statistics on the use of our website and to evaluate the optimization of our offerings for you.

Via the deployed targeting measures, we want to ensure that you only see advertising tailored to your actual or presumed interests on your end devices.

The pertinent data processing purposes and data categories can be found in the corresponding tracking and targeting tools.

a) Google Analytics

In order to design and optimize our website, we use the Google Analytics tool, a Google LLC web analytics service. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google").

In this sense, user profiles are created anonymously (see point 4) and cookies are used. The information generated by cookies relates to your use of the website on:

  • - your browser (type and version),
  • - the operating system,
  • - the referring URL (the site that brought you by a link to our website),
  • - the hostname of the interrogating computer (IP address),
  • - the time to consult the server,

and are transmitted to a Google server located in the USA where they are registered. Google complies with international data transfer frameworks (such as the Data Privacy Framework) to ensure an appropriate level of data protection.

This information is used to analyze the use of the site, to compile reports on the activities of the site in order to carry out market research to help optimize the design of the website and to provide this website other services related to the use of websites and the Internet. These data may be disclosed to third parties in case of a legal obligation or when third parties are mandated to process these data. Your IP address will not be linked to other Google data. IP addresses are handled anonymously so that no IP masking is possible.

You can oppose the collection and storage of data by Google Analytics  by clicking this link: https://tools.google.com/dlpage/gaoptout?hl=en. An Opt-out-Cookie will be installed that will prevent the use of your data when you visit the site. This Opt-out-Cookie is specific to this browser and our website and is stored on your phone. If you delete Cookies from your browser, you will need to reinstall the Opt-out-Cookie.

You can find additional information about data protection in connection with Google Analytics in the Help section - Google Analytics.

Data subject rights

You have the right:

  • - to demand information about your personal data we process. In particular, you can demand information about the purposes of the processing, the category of the personal data, the categories of recipients to whom your data were or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction or revocation of processing, the existence a right to lodge a complaint, the origin of your data, in so far as not collected by us, and also about the existence of automated decision-making including profiling and where appropriate meaningful information about to details thereof;

  • - to demand immediate rectification of inaccurate or completion of your personal data saved with us;

  • - to demand deletion of your personal data saved with us, in so far as the processing is not required for exercising the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;

  • - to demand restriction of processing of your personal data, in so far as you contest the accuracy of the data, the processing is unlawful but you oppose deletion and we no longer need the data but you do to establish, exercise or defend legal claims or you have objected to;

  • - to receive your personal data you have provided us in a structured, commonly used and machine-readable format or to demand transmission to another controller;

  • - to withdraw your consent to us at any time. This means that we may no longer continue processing the data based on that consent for the future and

  • - to lodge a complaint to a supervisory authority. As a rule, you can contact the supervisory authority for your habitual residence or place of work or our registered offices.

In so far as your personal data are processed on the basis of legitimate interests, you have the right to object to the processing of your personal data, in so far as there are grounds arising from your particular situation or it relates to an objection to direct advertising. In the latter case, you have a general right to object which we shall heed without the stating of a particular situation.

If you want to exercise your right to object, simply send an email to support@cornilleau.com

Data Security

All the data you personally transfer will be sent encrypted with the customary and secure TLS standard (Transport Layer Security). TLS is a secure and proven standard, which is also used for online banking, for example. You can recognize a secure TLS connection inter alia by the 's' appended to the http (i.e. https://..) in the address bar of your browser or by the lock symbol at the bottom of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continually monitored and improved to reflect technological developments.

Links to other websites

The Site may contain links to other websites that are owned or operated by companies other than CORNILLEAU or any of its affiliated companies. Linked websites may have their own privacy policies and are not governed by this Privacy Policy. We strongly suggest you carefully review the privacy policies, practices and terms of use for all websites you visit through a link on our Site. We are not responsible for the privacy practices or content of any websites owned and operated by third parties.

Minors

The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address above to request deletion.

Privacy Rights for California Residents

This notice to residents of California is made under California law and pursuant to the California Consumer Privacy Act (CCPA). It provides notice of the information we collect, provides certain required disclosures about our treatment of California residents’ information, and explains your privacy rights.

We may collect certain categories of personal information, as identified in this Privacy Policy, and may collect personal information, as defined in the CCPA, including the following information: commercial information, such as information about your product interests and consuming history or tendencies, including purchase, return or exchange history, your payment card information or other financial information, information provided in response to research surveys, and information you provide in public forums; internet activity, such as your interactions with us online and information we obtain from third parties about use of our Site or from use on third-party platforms; location-related data, such as geo-location information provided by a mobile device or other device interacting with our Site; audio or visual or similar information, such as telephone call recordings, and still or video images; personal identifiers, such as name, email address, username and password, mailing address, telephone number, IP address, and other similar identifiers; characteristics of a protected class and demographic information, such as gender, age, race, sexual orientation, gender identity, military and veteran status, marital status, national origin, and medical information; and inferences based on any of the above.

We use your information in several ways, as described in this Privacy Policy, and in order to provide an efficient, meaningful, and customized experience with us and our Site. As indicated in this Privacy Policy, we generally collect and use the above-listed categories of personal information to improve our Site and our products and services, and for other business purposes, such as marketing and advertising of our products and services.

Even though we will never sell (or trade or rent) your information, certain data collected on our Site or by third parties for purposes of interest-based advertising and marketing may be a “sale” or “sharing” under California privacy law. This may include the following categories of personal information: identifiers, demographic information, commercial information, internet activity information, location-related information, and inferences drawn from the above. If you would like to opt out of the “sale” or “sharing” of your personal information, as defined by California privacy law, you may opt out in the manner set forth in this Privacy Policy.

Automated Privacy Signals & Regional Customization 

To protect your privacy in accordance with California law and to address requirements under the California Invasion of Privacy Act (CIPA), our website is designed to recognize Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we automatically apply the most restrictive privacy settings without further tracking. Furthermore, we use functional geolocation (via IP address) to ensure that California residents are presented with a strict "Opt-in" consent banner via Axeptio before any non-essential trackers are deployed. This geolocation process is strictly functional; the data is not sold or shared for marketing purposes by our technical service providers.

We also make the following disclosures for purposes of compliance with the CCPA and California privacy law:

  • - We collected and used the following categories of personal information in the last 12 months: identifiers, characteristics of a protected class and demographic information, commercial information, internet activity information, location-related information, and inferences drawn from the above. We may have disclosed each category to business partners, service providers, government entities, and other third parties as described in this Privacy Policy.
  • - The sources of personal information from whom we collected are: directly from your use of our Site, third-party sites that you use, analytics tools (such as Google Analytics), email marketing platforms (such as Brevo, formerly Sendinblue), social media networks, advertising networks, and third-party services that update or supplement information we hold about you. The business or commercial purposes of collecting personal information are identified in this Privacy Policy.
  • - Even though we will never sell (or trade or rent) your information, we may have “sold” or “shared” data, as defined by California privacy law, with our Service Providers within the following categories of personal information in the last 12 months: identifiers, characteristics of a protected class and demographic information, commercial information, internet activity information, location-related information, and inferences drawn from the above. The business or commercial purposes of “selling” or “sharing” personal information are as described in this Privacy Policy.
  • - We do not “sell” or “share” the personal information of known minors under 16 years of age.
  • - We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the CCPA regulations.
  •  

California residents have the right to request that we disclose to you the categories of personal information we have collected about you, as well as the sources of such personal information, the purposes, and the categories of third parties with whom such personal information is shared. You also have the right to request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, and share. You further have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions. You have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions. You have the right to “opt out” of the “sale” or “sharing” of your “personal information” to or with “third parties” (as those terms are defined by California privacy law).

If you wish to make a request for information, to delete your account, to opt out, or for any questions about our privacy practices and compliance with California law, please contact us at our website or via email at support@cornilleau.com. You can also designate an authorized agent to make a request on your behalf. Prior to responding to your request, we will verify your identity by matching any requested identifying information you provide against the information we have about you. We will not subject you to discriminatory treatment as a result of your choice to exercise your privacy rights.

California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits customers that are California residents and who provide personal information in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of personal information to third parties for their own direct marketing purposes. If applicable, this information would include the categories of personal information and the names and addresses of those businesses with which we shared qualifying California personal information during the immediately prior calendar year. You may request this information once per calendar year. To make such a request, please contact us by email at support@cornilleau.com.

Visitors from Outside of the United States

The Site is hosted in the United States. If you are visiting our Site from outside the United States, your information may be transferred to, stored and processed in the United States in accordance with our Privacy Policy and applicable US laws. Please note that data protection and other applicable laws of the United States may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection or consumer protection laws in your country. By purchasing our products, using our Site or interacting with Us, you consent to transfer of your information to our facilities as described in our Privacy Policy.

Actuality of and changes to this Data Protection Policy  

The further development of our website and offers on it or changes in statutory or public-authority requirements many render it necessary to amend this Data Protection Policy. The latest version of Data Protection Policy can be downloaded and printed out at any time from the website under https://us.cornilleau.com/

Last Updated: January 15, 2026