Privacy policy

Data controller

ILIONA GROUP, SARL with a share capital of €37,234,500, registered in the Nanterre trade and companies register (RCS) under number 901 236 356, registered office 14 rue Beffroy, 92200 Neuilly-sur-Seine, France, publishes www.iliona.com and is the controller of the personal data described here.

ILIONA GROUP has not appointed a data protection officer; questions about this policy can be sent by post or through the contact form (see Your rights).

Data processed: purpose, legal basis, retention

ILIONA GROUP processes personal data only for the purposes below, each with its legal basis and retention period.

Visits to the site. Each visit leaves a line in the server log: IP address, date and time, page requested, referring page and browser identification. Purpose: to serve the site and keep it secure. Legal basis: legitimate interest (art. 6(1)(f) GDPR). Retention: one year at most.

Contact form. Name, e-mail address, company if given and message. Purpose: to answer the message and follow it up. Legal basis: legitimate interest (art. 6(1)(f) GDPR). Retention: three years at most after the last exchange. Messages are stored on the site’s server and forwarded to ILIONA GROUP’s mailbox, which an e-mail service provider hosts.

Business contacts. The people ILIONA GROUP works with at suppliers, service providers, partners and customers: name, position, professional contact details and exchanges. Purpose: to manage the business relationship. Legal basis: legitimate interest (art. 6(1)(f) GDPR), or the contract (art. 6(1)(b) GDPR). Retention: for the relationship, then three years.

Customers of the brands. Customers of the group’s brands are served by the group company that sells each brand; each of these companies publishes its own privacy policy on its site.

Recipients

Personal data is available only to the people at ILIONA GROUP who need it for these purposes.

Depending on the case, it may also be processed on ILIONA GROUP’s behalf and only on its instructions by:

• the host of the site, ILIONA;
• its e-mail service provider;
• its accountants and advisers, bound by professional secrecy.

It is passed to public authorities only when the law requires it, and it is never sold or rented.

Outside the European Union

Some providers may process data outside the European Union. Any such transfer is covered by an adequacy decision of the European Commission or by its standard contractual clauses.

Cookies

This site sets no cookies and uses no analytics, advertising or social-media tools. It loads nothing from a third party: its text, images, fonts and code are all served from www.iliona.com.

Security

ILIONA GROUP protects personal data with technical and organisational measures suited to the risks, including access limited to the people who need it and encrypted connections.

Your rights

Under the GDPR and the French Data Protection Act, everyone has the right of access to their personal data, and to its rectification, erasure, restriction and portability, and the right to object to its processing. Everyone may also give instructions on what becomes of their data after their death.

These rights are exercised by writing to ILIONA GROUP, 14 rue Beffroy, 92200 Neuilly-sur-Seine, France, or through the contact form. An answer is given within one month; proof of identity may be requested if there is reasonable doubt about who is making the request.

A complaint may also be lodged with the CNIL, the French data protection authority, or with the supervisory authority of the EU country of residence.

Changes

This policy is updated when the processing it describes changes; the date of the last update is below.

Last updated: 2 October 2026.