CGV

Legal information

Privacy Policy

The purpose of this privacy policy is to inform you of how BOWA collects, uses and protects your personal data when you browse the website etna-supplement.com and make purchases on it.

Last updated: August 7, 2026

verified_userGDPR-compliant processing

We attach particular importance to respecting your privacy and are committed to processing your data in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the French Data Protection Act (loi Informatique et Libertés).

credit_card_offYour bank details are never stored

Payment data is processed directly by our secure payment provider: we do not keep any bank details on our servers. We do not sell or rent your personal data to third parties.

Contents

Art. 1Identity of the data controller

Art. 2Data we collect

Art. 3Purposes and legal bases of processing

Art. 4Data recipients

Art. 5Retention period

Art. 6Your rights

Art. 7Newsletter and marketing communications

Art. 8Cookies

Art. 9Data security

Art. 10Changes to the privacy policy

Art. 11Contact

Article 1

Identity of the data controller

The controller of the personal data collected on the Site is the following company:

Trade name

Expand Tomorrow Never Aging - ETNA

Data controller

BOWA

Legal form

Société par actions simplifiée (simplified joint-stock company)

SIRET

107 764 920

Registered office

Bâtiment 12, Multiparc du Salaison
145 rue de la Marbrerie
34740 Vendargues

Article 2

Data we collect

We may collect the following categories of data:

Identification data

Last name, first name, email address, phone number.

Shipping and billing data

Postal address, country.

Order data

Products purchased, amount, order history.

Payment data

Processed directly by our secure payment provider; we do not store your bank details.

Browsing data

IP address, browser type, pages viewed, cookies and trackers (see Article 7).

Communication data

Messages exchanged with our customer service, product reviews and feedback.

Article 3

Purposes and legal bases of processing

Your data is processed for the following purposes, each based on a specific legal basis:

Order and customer relationship management

Order processing, delivery, invoicing, after-sales service.
Legal basis: performance of the contract.

Management of your customer account

Creation and management of your personal account.
Legal basis: performance of the contract.

Direct marketing and newsletters

Sending offers and news, subject to your consent.
Legal basis: consent.

Site improvement and audience measurement

Statistical analysis, optimization of the user experience.
Legal basis: legitimate interest or consent, as applicable.

Compliance with our legal and accounting obligations

Retention of invoices, tax obligations.
Legal basis: legal obligation.

Security and fraud prevention

Protection of the Site, our customers and our systems.
Legal basis: legitimate interest.

Article 4

Data recipients

Your data is intended for our authorized internal departments and, where applicable, our processors and service providers:

dns

OVH

Site hosting

mail

Brevo

Emailing and CRM

credit_card

Payplug

Online payment

bar_chart

Google Analytics

Audience measurement

local_shipping

Colissimo

Logistics and delivery

These service providers are required to guarantee an adequate level of protection for your data. Payment data is processed by Payplug, a payment institution authorized by the French Prudential Supervision and Resolution Authority (ACPR), within the European Union. We do not sell or rent your personal data to third parties.

Article 5

Retention period

We keep your data for periods suited to each purpose:

Customer account data

For the entire duration of the business relationship, then 3 years from the last contact.

Order data and invoices

10 years, in accordance with accounting obligations.

Marketing data

3 years from the last contact or until you withdraw your consent.

Cookies and trackers

13 months maximum.

Article 6

Your rights

In accordance with the GDPR, you have the following rights over your data:

  • Right of access: obtain confirmation that your data is being processed and obtain a copy of it.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure: request the deletion of your data, within legal limits.
  • Right to restriction of processing.
  • Right to object to processing, in particular for marketing purposes.
  • Right to data portability.
  • Right to withdraw your consent at any time, where processing is based on it.
  • Right to set instructions regarding what happens to your data after your death.

manage_accountsExercising your rights

Send your request to [email protected]. Proof of identity may be requested.

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, the French Data Protection Authority — www.cnil.fr) if you believe your rights are not being respected.

Article 7

Newsletter and marketing communications

Subscription to the newsletter is optional and based on your consent, obtained at the time of subscription via the form in the Site’s footer. The data collected for this sole purpose is limited to your email address.

The newsletter includes commercial communications (offers, new products, benefits) and informational communications (advice, editorial content). It is sent several times a month, with no contractually guaranteed frequency.

The newsletter is sent and managed by our emailing provider Brevo, which acts as a processor within the meaning of Article 28 of the GDPR and hosts the data within the European Union.

You may withdraw your consent at any time, free of charge and without giving a reason, via the unsubscribe link at the bottom of each email or by writing to [email protected]. Withdrawal does not affect the lawfulness of emails sent before it.

Your data is kept until you withdraw your consent and, in any event, for 3 years from the last contact.

Article 8

Cookies

The Site uses cookies and trackers to ensure it works properly, to measure its audience and, subject to your consent, to personalize your experience.

You can manage your preferences at any time via the consent banner or your browser settings. Cookies and trackers are kept for a maximum of 13 months.

Article 9

Data security

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, alteration or disclosure: secure data exchange protocol, restricted access to data and use of secure service providers.

Article 10

Changes to the privacy policy

We reserve the right to modify this privacy policy at any time, in particular to adapt it to legal or regulatory changes. The applicable version is the one in force on the date you browse the Site. The date of the last update appears at the top of this page.

Article 11

Contact

For any question regarding this policy or the processing of your personal data, you can contact us:

mailEmail

[email protected]

location_onAddress

BOWA
Bâtiment 12, Multiparc du Salaison
145 rue de la Marbrerie
34740 Vendargues, France