Legal
Last updated: 21 / 01 / 2025
The security of our clients' data and the protection of our panelists' personal data are central to our research priorities. We are firmly committed to protecting personal data and implement all necessary measures to ensure a high level of security for our systems and databases, in accordance with the General Data Protection Regulation (GDPR).
In 2025, we obtained the ISO/IEC 27001 certification – Information systems security, coming to strengthen our ISO 9001 certified, detained since 2007.
An independent evaluation carried out by CyberVadis assigned us a score of 923/1000 (Mature Level), demonstrating the robustness of our cybersecurity system.
For any questions regarding our commitments, you can contact our Data Protection Officer : dpo@syres.fr
Aware of the importance of ensuring data confidentiality, SYRES is strongly committed to protecting personal data. This data protection policy aims to inform you about the commitments and practical measures taken by the company to ensure the protection of your personal data.
This privacy policy may change depending on the legal and regulatory context and the doctrine of the CNIL.
SYRES invites you to participate in consumer tests to evaluate one or more cosmetic, beauty or dermatological products, devices or services, marketed and/or under development, in real-world conditions of use and in line with your habits.
The products offered to you have undergone prior safety evaluation (toxicological and safety tests), and all necessary measures have been taken to minimize any potential adverse effects. They do not present any foreseeable serious risks under normal conditions of use and offer the same guarantees as products you would purchase commercially.
To participate in these tests, simply register for the SYRES panel on club.syres.fr.
You will only be able to participate in a test if your profile matches that of the Study and if you do not present the following characteristics:
Between each test performed, you will have a deficiency of at least 2 months.
The information concerning you, which is collected on the registration form and during the tests, is recorded in a computer file by the company SYRES (4, rue de Gally 78450 Chavenay – 01.30.79.92.50) and is subject to processing in accordance with the "Data Protection Act" n°78-17 of 6 January 1978 as amended and the General Data Protection Regulation of 27 April 2016 (GDPR – n°2016/679/EU).
With your prior consent, the personal data collected when you register for our panel are as follows: gender, first and last name, date of birth, postal/telephone/email contact details, profession, allergies, children, languages spoken, ethnic origin, skin/hair types and consumption habits.
The SYRES company makes sure to collect and process only data strictly necessary for the purpose for which they are processed (minimization of data).
Your personal data is collected by the SYRES Company for the following purposes:
The personal data we collect is intended for our use. We ensure that only authorized persons have access to this data: authorized persons of the company SYRES, the Promoter of the Study concerned, the partners of the company SYRES, and service providers only to the extent necessary for the performance of the tasks entrusted to them.
The data transferred to the Study Promoters is transmitted in a pseudonymized manner.
Your personal information such as your surname, first name, postal address, telephone numbers or email address are never transferred to third parties without your permission.
For the purposes mentioned above, we may transfer your personal data to companies located in countries outside the European Economic Area. If your personal data is transferred outside the European Union, you will be informed during the test recruitment process.
You can obtain communication of the guarantees taken by contacting our Data Protection Officer: dpo@syres.fr.
Your personal data is kept for no longer than is necessary for the purposes for which it was collected. The retention periods we apply are proportionate to the purposes for which the data was collected.
If you would like more information about how your data is stored, you can send an email to our Data Protection Officer: dpo@syres.fr.
SYRES places great importance on the security of your data. Appropriate technical and organizational measures are implemented to ensure that data is processed in a way that guarantees its protection against accidental loss, destruction, or damage that could compromise its confidentiality or integrity.
When we use a service provider, we only share personal data with them after obtaining a commitment and guarantees from them regarding their ability to meet these security and confidentiality requirements.
A cookie is a text file placed in a dedicated area of your device's hard drive when you view online content or advertising. The cookie does not personally identify you, but only your device's browser.
Our website www.syres.fr uses only “session identifier” cookies, which are strictly technical and exempt from consent by the CNIL.
For more information about our cookies, please see our page dedicated to cookies.
You have the right to access, rectify, or erase your personal data, or to restrict its processing. You also have the right to define instructions regarding the fate of your personal data after your death. Furthermore, you may, for legitimate reasons, object to the processing of your data.
Consult cnil.fr for more information about your rights.
You can exercise these rights at any time by contacting our Data Protection Officer: dpo@syres.fr, or by post to the following address: 4, rue de Gally 78450 Chavenay.
The persons concerned have the right to lodge a complaint with the CNIL by writing to: CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX.
We have appointed a Personal Data Protection Officer whose contact details are as follows: dpo@syres.fr.
We reserve the right to modify this privacy policy at any time and without prior notice. We encourage you to regularly review this privacy policy, accessible on our website, to stay informed of any changes.