Privacy policy
FELIWAY Website Privacy Policy
As part of its activities, Ceva Animal Health (hereinafter "Ceva") collects and processes Personal Data. As a data controller, Ceva complies with the laws in force on data protection, in particular the Data Protection Act 2018 (UK GDPR) and, where applicable, the national rules applicable in this area.
The purpose of this privacy policy (hereinafter "the Policy") is to inform you, as a user, in a clear, simple and complete manner, about how Ceva collects and uses certain Personal Data concerning you, in relation to the www.feliway.fr website, and about the means available to you to control this use and exercise your rights in relation to it.
Terms used in the Policy with capital letters are defined in the appendix.
Ceva reserves the right, in its sole discretion, to modify, amend or replace this Policy, in whole or in part, at any time, with or without notice.
We encourage you to check that you are reviewing the most current version of this Policy if you have previously downloaded previous versions.
-
What data is collected and when?
|
Treatment |
Data Category |
Purposes |
Legal bases |
Retention period |
|
Account creation and management |
Directly identifying data: surname, first name Contact details: Email, address (in case of order) Information related to the animal: Name of the animal, breed, age, Other data: Password (encrypted), orders placed on the site |
Managing your profile creation and managing your account on the site Providing information to account holders in connection with the management of their account. |
Necessity for the performance of a contract (terms of use) |
Until the account is deleted, in particular at the request of the person
|
|
Development and improvement of the website/application, production of statistics, anonymisation of data |
Directly identifying data: surname, first name Contact details: Mail, phone number, address Animal information Animal name, breed, age, animal health data, animal activity data Account Data Navigation on the site (items in the basket, products viewed, etc.) Connection and usage data and IP address Other data: Location, date of birth, |
Development and improvement of the site, production of statistics, anonymization of data in order to: (i) to improve the use of the site or application, in particular innovative solutions, (ii) to communicate aggregated statistics internally or externally,
|
Legitimate interest |
At the earliest: Date Account Deleted Date of deletion of login data 3 years from the last interaction (account login, opening a link in an email, purchase) |
|
Commercial prospecting, in particular via newsletter |
Directly identifying data: surname, first name Contact details: Email
|
Sending personality messages or commercial prospecting |
Consent (for prospects) Legitimate interest (in the case of communication about products and services similar to the products or services used by users) |
At the earliest: Date Account Deleted If applicable, date of withdrawal of consent or objection 3 years from the last interaction (account login, opening a link in an email, purchase) |
|
Tracking of Sent Emails |
Measurement of the deliverability rate, Metrics related to site interactions, including open rates and/or click-through rates in the form of statistics |
Follow-up of commercial communications via newsletter |
Legitimate interest |
At the earliest: Date Account Deleted If applicable, date of the right to object 3 years from the last interaction (account login, opening a link in an email, purchase)
|
|
Personalization of services and messages |
Directly identifying data: surname, first name Contact details: email, phone number, address Data related to the person's profile Other: Information related to the animal: Name of the animal, breed, age Other data: date of birth, location and budget allocated to the animal, type of accommodation (apartment, house, etc.)
|
Personalization of services and messages to improve your experience. For example, sending personalized communications based on the products or services viewed on the site. As such, segmentation or profiling techniques may be implemented (without legal effect or significantly affecting you) |
Legitimate interest |
At the earliest: Date Account Deleted If applicable, date of the right to object 3 years from the last interaction (account login, opening a link in an email, purchase) |
|
Personalized advertising on social networks and platforms based on contact and purchase data |
Email |
Delivering personalized advertising based on contact and purchase data on social media and other platforms |
Legitimate interest |
At the earliest: Date Account Deleted If applicable, date of the right to object 3 years from the last interaction (account login, opening a link in an email, purchase) |
|
Order Management |
Directly identifying data: surname, first name Contact details: Email, phone number, address Order data Credit card data (partial card number) |
Order and delivery management |
Performance of the contract |
Legal retention period |
|
Bookkeeping |
Directly identifying data: surname, first name Contact details: Mail, phone number, address |
Bookkeeping to comply with accounting and tax obligations |
Compliance with a legal obligation |
Legal retention period |
|
Complaints and after-sales service |
Directly identifying data: surname, first name Contact details: email, phone number, address Order data |
Claims and after-sales service management |
Performance of the contract |
At the earliest: Date Account Deleted 3 years from the last interaction (account login, opening a link in an email, purchase) |
|
Collection and, where applicable, publication of customer reviews |
Directly identifying data: surname, first name Contact details: email Customer Reviews and Answers to Questions in Form |
Collection and, where applicable, publication of customer reviews on the site |
Legitimate interest |
At the earliest: Date Account Deleted If applicable, date of the right to object
|
|
Satisfaction surveys / product quality study / product tests |
Directly identifying data: surname, first name Responses to survey questions |
Management of satisfaction surveys including analysis of responses |
Legitimate interest |
At the earliest: 3 years from the last interaction (account login, opening a link in an email, purchase) Until the exercise of the right to object or the withdrawal of consent if applicable |
|
Participation in competitions |
Directly identifying data: surname, first name Contact details: Mail, phone number, address Answers to the questions in the game. |
Management of contest entries |
Consent |
Up to 3 months after the end of the game or until the date of the prize ceremony, whichever is later |
|
Contact form |
Directly identifying data: Last name, first name Contact details: Mail Phone number, address Purpose of the request If applicable, a copy of the identity document in case it is necessary to verify the identity of the person
|
Responding to user requests |
Legitimate interest |
At the earliest: Date Account Deleted If applicable, date of the right to object 3 years from the last interaction (account login, opening a link in an email, purchase) 3 years from the date of application |
|
Cookies |
Information relating to browsing the site |
Ensuring the operation of the site |
Consent unless the deposit of the cookie is necessary for the operation of the site/application |
See Cookie Policy |
|
Site/App Security Management and Fraud Prevention |
IP address Connection log |
Ensure the security of CEVA sites, secure account authentication |
Legitimate interest |
For logs: 1 year from the last connection For the IP address: 1 year from its registration |
|
Management of requests for the rights of individuals (access, deletion, opposition, rectification, restriction, portability) |
Directly identifying data: Last name, first name Contact data: email address, telephone number, Application Information Copy of an identity document (only if there is any doubt as to the identity of the person) |
To allow the individual to exercise his or her rights over his or her Personal Data |
Legal obligation |
6 years from the time the data was collected Copy of the identity document: kept for the time necessary for the identity verification |
The purposes referred to above may include the use of artificial intelligence (AI) when processing your Personal Data. When using AI, we take care not to compromise your privacy, to implement adequate security measures, to act responsibly and in compliance with applicable Personal Data protection law.
-
What is our policy on data concerning minors?
Ceva attaches great importance to the protection of the personal data of minors.
Creating an account on the site/app is only for users over 13 years of age.
Our websites are not intended for minors under the age of 13 and we do not collect personal data from such individuals. Minors under the age of 13 must have the consent of their parents or the holder of parental authority before providing personal data.
If we become aware that personal data of minors under the age of 13 has been collected without the prior consent of the parents, we will immediately destroy it.
-
How long is the data stored and how is it deleted?
Ceva only keeps your Personal Data for the time necessary to achieve the purposes pursued, subject to the legal possibilities of archiving, obligations to retain certain data and/or anonymization.
These retention periods are defined according to the processing purposes and take into account the applicable legal provisions imposing a precise retention period.
For more information, please see the table above. It should be noted that in the event of pre-litigation, the data may be isolated and kept for a longer period than expected, until the applicable remedies are extinguished.
-
To whom is this data likely to be transmitted?
Only persons duly authorised by Ceva by virtue of their position may access your Personal Data, without prejudice to its possible transmission to the extent required by the applicable regulations.
Ceva undertakes to take all appropriate organisational and technical measures to preserve the security, integrity and confidentiality of the data.
Your Personal Data may be transmitted to companies belonging to the Ceva Group as well as to our authorized service providers. The latter may also be required to process your personal data that is strictly necessary for the performance of the services we entrust to them. This includes, in particular, service providers dealing with:
-
customer relationship management, including order processing in the online shop,
-
logistics,
-
the management of loyalty programs,
-
game management, surveys and studies
-
sending emails for marketing purposes,
-
search engine optimization,
-
data storage, and
-
the security of the site or application
-
Tracking user behavior when visiting the website or reading a newsletter.
In certain circumstances, we may transfer your Personal Data outside of the European Union (EU) to countries that do not provide sufficient protection for the processing of Personal Data according to EU standards. In this case, we will secure the transfer and processing with an appropriate legal framework to ensure a high level of data protection, regardless of where your information is processed. The transfer will be governed by the signing of the standard contractual clauses published by the European Commission.
Similarly, we may share this data with public administrations and bodies in accordance with the legal provisions.
-
How is the security of your Personal Data ensured?
Ceva takes care to protect and secure your Personal Data, in order to ensure its confidentiality and to prevent it from being distorted, damaged, destroyed or disclosed to unauthorized third parties.
When the disclosure of data to third parties is necessary and authorized, Ceva ensures that these third parties guarantee the data concerned the same level of protection as that offered to them by Ceva, requiring contractual guarantees providing in particular that the data may be processed exclusively for the authorized purposes with all the required confidentiality and security.
Ceva implements technical and organizational measures to ensure that Personal Data is stored in the most secure manner possible for the time necessary to achieve the purposes pursued, in accordance with applicable law.
Although Ceva takes all reasonable steps to protect your Personal Data, no transmission or storage technology is completely infallible.
In accordance with applicable law, in the event of a proven breach of Personal Data likely to create a high risk to the rights and freedoms of the data subjects, Ceva undertakes to communicate this Personal Data Breach to the competent supervisory authority and, when required by said regulations, to the data subjects.
Without prejudice to the foregoing, it is your responsibility to exercise caution to prevent any unauthorized access to your Personal Data and your terminals (computer, smartphone, tablet, etc.), in particular by choosing a strong password.
-
What are your rights?
Under the conditions and limits of the applicable regulations, you have the following rights:
-
Right of access: You have the option to ask us to access the personal data we hold about you.
-
Right to rectification: you can ask us to correct data that is inaccurate or incomplete.
-
Right to erasure (right to be forgotten): You have the option under certain conditions to obtain the erasure of the personal data we hold about you. However, we have the option of not responding favourably to your request, in particular in the event that we need your personal data to comply with a legal obligation.
-
Right to restriction of processing , in particular in the event that you contest the accuracy of the personal data we hold about you.
-
Right to object: you may object, for reasons relating to your particular situation and under certain conditions, to the processing of data concerning you.
-
Right to portability: you can receive the personal data we hold about you in a readable format so that you can store or transmit it.
-
The right not to be subject to a decision based solely on automated processing, including profiling.
As some rights are exercised under certain conditions, we may not respond favourably to your request. In such a case, we will explain the reasons for our refusal.
To find out more about your rights and the processing of your data, please visit this page: Privacy Policy - Ceva.
-
How to exercise your rights?
You can contact Ceva via the form (Privacy policy - Ceva Privacy policy) or directly to the DPO at the following address: gdpr-enquiries-group@ceva.com
Ceva undertakes to respond to you as soon as possible, and in any event, within one month of receipt of your request.
If necessary, this period may be extended by two months, given the complexity and number of requests sent to Ceva. In this case, you will be informed of this extension and the reasons for the postponement.
If your request is submitted in electronic form, the information will also be provided to you electronically where possible, unless you expressly request otherwise.
If Ceva does not act on your request, you will be informed of the reasons for its inaction and you will have the opportunity to lodge a complaint with a supervisory authority and/or to file a judicial appeal.
If, after contacting us, you believe that your data protection rights are not being respected, you may contact the competent authority (ICO) at the following address: Information Complaints Officer – Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF/ Data protection: Make a complaint - GOV.UK
Cookies
This cookie policy is applicable when consulting the websites and mobile applications of Ceva Santé Animale (Ceva)
When browsing these websites and applications, you may receive cookies sent and managed by Ceva Santé Animale as well as cookies sent from other websites or web servers operated by third parties ("Third-party cookies").
-
WHAT IS A COOKIE
The term "cookies" covers all trackers placed on your device (computer, smartphone, tablet) and/or read from it when you visit a website or a mobile application or when you view an advertisement. In particular, they are intended to collect information relating to your browsing on sites and applications and to send you personalized services.
-
WHICH COOKIES?
-
COOKIES TECHNIQUES
These are cookies that are essential for the proper functioning, navigation of our sites and applications and for improving the functionality and performance of sites and applications (e.g. memorizing the contents of the shopping cart, ensuring authentication to a secure space, customizing a user's interface by adapting the language and display, etc.)
By disabling the use of these cookies in the Cookie Management Panel, you will no longer be able to benefit from certain features.
-
COOKIES DE PERFORMANCE
These are cookies that allow us to gather information about the use of our sites in order to improve the content and/or make it more relevant.
They allow us to collect information about how you use the site, the number of visits per page, the time spent on a page, or the number of clicks.
All these cookies are activated automatically when you consent to the installation of these cookies. However, if you wish to deactivate them, you are invited to consult the paragraph "Exercising your choice" below.
The information stored may not be used for commercial purposes.
-
ADVERTISING COOKIES
These cookies allow us to show you advertisements tailored to your interests and measure the effectiveness of our advertising campaigns.
Measurement cookies: Measurement cookies allow us to evaluate the effectiveness of our advertising campaigns
Targeting cookies: These cookies allow us to learn about your browsing habits in order to deliver advertisements that may be of interest to you.
Targeting cookies allow us to:
-
collect nominative or non-nominative data through quizzes,
-
to know the content of the pages viewed,
-
to know what information you have chosen to share when registering on other sites,
-
to know the pages and websites consulted during your recent browsing, or just before arriving on the site,
-
to know your position.
-
COOKIES ISSUED BY THIRD PARTIES - PIXEL
We may include cookies from third parties on our sites that allow you to share content from our sites and applications.
These cookies are not managed by Ceva and we have no control over the process used by social networks to collect information about your browsing on our sites in association with the Personal Data they hold.
The issuance and use of cookies by these third parties are subject to their privacy policies.
We invite you to consult the privacy policies of these social networks in order to learn about the purposes of use, in particular advertising, of the browsing information that they may collect through these application buttons. These protection policies must allow you to exercise your choices with these social networks, in particular by configuring your user accounts.
-
HOW TO CONTROL COOKIES
-
YOUR AGREEMENT (CONSENT)
When you first log in to our sites, you will be asked to accept cookies.
The validity period of this consent is a maximum of 13 months.
-
OPPOSITION AUX COOKIES
You can modify or decline the collection of information via cookies by actively managing your browser settings.
-
Enable or disable cookies completely;
-
Delete specific cookies, which have already been saved in the browser;
-
Prevent certain websites from storing cookies on your computer;
-
Block third-party cookies (when cookies are stored on your computer by another site while browsing a site).
However, any settings you may undertake may modify your browsing and your conditions of access to certain services requiring the use of cookies.
Therefore, we do not recommend that you refuse the use of technical cookies, which are necessary for the operation of the website and whose refusal would prevent you from browsing normally.
However, if you reject targeting or measurement cookies, you will no longer be able to advertise on our websites or on the Internet, and they will no longer be tailored to your interests.
-
EXERCISING YOUR CHOICES
Configuring the browser software
To do this, follow the instructions given by your browser.
You can also click on the links below to access instructions from some of the most popular browsers:
Internet Explorer : http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies,
Safari : http://support.apple.com/kb/PH5042,
Mozilla Firefox : https://support.mozilla.org/fr/kb/activer-desactiver-cookies
iOS : https://support.apple.com/fr-fr/HT201265
Android : https://www.wikihow.com/Disable-Cookies#Android_Devices
Cookies tiers
Only the third-party cookie issuer concerned is likely to read or modify the elements contained in this cookie. These third-party cookies are subject to the privacy policies of those third parties.
To find out more and exercise your choice regarding these cookies, you can click on the following links:
-
Facebook : https://www.facebook.com/about/privacy/cookies
-
Twitter : https://twitter.com/privacy?lang=fr
-
FOR MORE INFORMATION
In addition, to learn more about how cookies and targeted advertising work, you can see:
Digital Advertising Alliance in the United States: Digital Advertising Alliance
European Interactive Digital Advertising Alliance in Europe:European Interactive Digital Advertising Alliance
To find out more about cookies, you can visit the website of the Commission Nationale de l'Informatique et des Libertés: Cookies and similar technologies | ICO
-
UPDATING THE COOKIE POLICY
The Cookie Policy may change over time. These changes will be effective immediately upon posting of the amended Cookie Policy. You are invited to read the Cookie Policy regularly for possible changes.
Updated: 08 August 2025
Appendix 1 – Definitions:
Supervisory authority: an independent public authority that is established by a Member State.
Consent (of the data subject): any free, specific, informed and unambiguous indication of the data subject's wishes by which he or she agrees, by a statement or by a clear affirmative action, to the processing of Personal Data concerning him or her.
Recipient: the natural or legal person, public authority, agency or other body that receives communication of Personal Data, whether or not it is a third party. However, public authorities that may receive Personal Data in the context of a particular investigative mission in accordance with Union law or the law of a Member State are not considered recipients; The processing of such data by the public authorities in question shall comply with the applicable data protection rules depending on the purposes of the processing.
Personal Data or Personal Data: any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); An 'identifiable natural person' is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller may be designated or the specific criteria for its appointment may be provided for by Union law or by the law of a Member State.
Processor: the natural or legal person, public authority, agency or other body that processes Personal Data on behalf of the controller.
Processing: any operation or set of operations which is performed on personal data or sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, the reconciliation or interconnection, limitation, erasure or destruction.
Personal Data Breach: A breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored or otherwise processed.