Privacy policy

Personal Data Protection Policy

The website www.novelis.io is managed by Novelis, represented by Mehdi NAFE.

This section aims to inform users of the commitments made by Novelis, acting as the Data Controller, regarding the data collected through this website.

Last updated: 05/22/2025

Contents

Processing Your Data

What data is collected?

• Contact: first name, last name, email, phone number

• Audience: IP address and visited pages

For what purposes?
Our processing serves the following purposes:

• Responding to your contact requests submitted via the contact form

• Handling your rights requests

• Measuring website traffic

On what legal grounds?

• You gave your consent by completing the contact form

• You consented to the use of cookies

• Our legitimate interest

Recipients

Access to data is strictly limited to authorized Novelis personnel and is used solely to achieve the purposes outlined above. Data may also be shared with legally authorized authorities to comply with legal, regulatory, or contractual obligations.

Data Security

To ensure the security, integrity, and confidentiality of your data, protective measures have been implemented and are regularly audited.

Access is strictly limited to individuals who need the information to perform their duties.
However, there remains a risk of data loss or destruction.

Data Retention

Your Rights

You can exercise your rights by emailing: info@novelis.io
or by mail at: Novelis – DPO – 40 avenue des Terroirs de France, 75012 Paris, France

Your request must clearly state the right(s) you wish to exercise and include:

• Your full name

• The address you wish to be contacted at

• A photocopy of an ID with your signature so we can verify your identity

If the information provided is insufficient, we may request additional details.

Under Article 12(3) of the GDPR, we commit to responding within one month. If your request is complex, this period may be extended to two months. In such cases, you will be informed within one month.

Access and Rectification

You can contact Novelis to find out whether your data is being processed. You have the right to access your data and obtain a copy, as outlined in Article 15 of the GDPR.

You may also request correction or completion of your data.

Information

This privacy policy explains how your data is processed.
If there are any changes, we will notify you accordingly.

Objection

If the processing is based on our legitimate interest, you may object to it.

Restriction

You may request that the processing of your data be restricted.

Portability

You may request a copy of your data under the conditions set out in Article 20 of the GDPR.

Withdrawal

Where processing is based on your consent, you may withdraw it at any time.
This will not affect prior lawful processing based on your previous consent.

Erasure

You may request deletion of your data. We will comply if:

• The data is no longer needed for the purposes stated

• We no longer have a legal basis for processing it

However, we may be required to retain some data due to legal or regulatory obligations.

Right to File a Complaint

If you believe your rights have been violated, you can file a complaint with the relevant authority.
In France: CNIL

Postal address: 3 place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
Online: Complaints | CNIL

Cookies

We inform you that the website www.novelis.io uses audience measurement cookies via MATOMO.

These cookies are only placed on your device if you give your consent.