COOKIE POLICY - KRISTAL GROUP

Version 2.1 · 05/09/2026 · English

1. Definition

A cookie is a text file or identifier placed on the user's device (computer, phone, tablet) when visiting a website or using an application. It allows certain information about navigation, preferences, or the user's account to be stored.

This policy also applies to similar tracking technologies: tracking pixels, web beacons, local storage identifiers (localStorage, IndexedDB), digital fingerprinting, mobile SDKs.

2. Publisher - Data Controller

KRISTAL websites and applications are published by KRISTAL AERONAUTIQUE, société à responsabilité limitée with share capital of €10,000, registered with the Montpellier Trade and Companies Register under number 412 462 285, with registered office at 61 rue Frédéric Mistral, 34400 Lunel - France.

Any question regarding cookies may be addressed to rgpd@kristal.aero.

3. Scope

This policy applies to the following sub-domains:

group.kristal.aero
parts.kristal.aero
aircraft.kristal.aero
mro.kristal.aero
kristalair.kristal.aero

as well as to the KRISTAL.air mobile application available on the App Store and Google Play.

4. Categories of cookies used

KRISTAL classifies cookies and tracking technologies into four categories:

4.1 Strictly necessary (technical) cookies

These cookies are essential for the operation of the website or application. They are exempt from consent under Article 82 of the French Data Protection Act and the guidelines of the Commission Nationale de l'Informatique et des Libertés (CNIL).

Session identifiers
Authentication and security of the User Account
Memorization of the cart or current quotation
Language preference management
Memorization of the user's cookie choices
Load balancing and technical security

Maximum duration: 13 months or session duration.

4.2 Audience measurement (analytics) cookies

These cookies are used to measure traffic and usage, identify content viewed, monitor technical performance, and improve the user experience.

They are only deployed after the user's consent, except for solutions exempted by the CNIL and configured according to its criteria (configured not to track navigation across sites, retention period limited to 13 months, IP anonymization, no cross-referencing with other processing).

Maximum duration: 13 months for cookies, 25 months for aggregated data.

4.3 Personalization cookies

These cookies allow the experience to be tailored to the user's profile or usage (display preferences, product suggestions, community recommendations on KRISTAL.air).

They are subject to consent.

Maximum duration: 13 months.

4.4 Third-party cookies - social networks and external content

When a page integrates third-party content (YouTube/Vimeo videos, Google Maps, social sharing buttons, etc.), the third party concerned may deploy its own cookies. These cookies are governed by the third party's policy and are subject to specific consent.

KRISTAL does not control the processing carried out by these third parties and invites the user to consult their respective policies.

5. Indicative list of cookies deployed

Issuer	Type	Purpose	Duration	Legal basis
KRISTAL.aero	Technical	Session, cart, authentication	Session or 13 months	Exemption (technical)
KRISTAL.aero	Preference	Cookie choices, language	13 months	Legitimate interest
Audience measurement tool (TBC: Matomo / CNIL-configured GA / other)	Statistics	Audience, navigation	13 months	Consent
Apple App Store / Google Play	Technical	Download and update of the KRISTAL.air app	Per third-party policy	Third-party policy
Social networks (where applicable)	Third party	Sharing and integration of content	Per third-party policy	Consent

The above list is indicative; the up-to-date and precise list of cookies actually deployed may be consulted from the cookie management banner of the website ("Cookie Preferences").

6. Collection and management of consent

6.1 On the first visit to a KRISTAL website or upon opening the application, a consent management banner is displayed. It allows the user to:

Accept all with a single click;
Refuse all with a single click, with the same ease;
Customize choices by category of cookies (technical, statistics, personalization, third party).

6.2 In line with CNIL guidance, "continue browsing" does not constitute consent and the absence of an active consent equals refusal.

6.3 Consent, when required, is:

Free (refusal possible without consequence on access to the service);
Specific (per category of purpose);
Informed (clear information before deployment);
Unambiguous (positive action by the user);
Demonstrable (KRISTAL retains evidence of consent).

6.4 Consent may be modified or withdrawn at any time via the "Cookie Preferences" link accessible from the footer of each website, or from the application settings.

6.5 Refusal or withdrawal of consent has no impact on access to the essential features of the service.

7. Retention period

User's choice (consent or refusal): 6 months maximum (CNIL recommendation - beyond this, consent must be obtained again);
Cookies themselves: 13 months maximum from their deployment (CNIL recommendation);
Aggregated data resulting from audience measurement cookies: 25 months maximum.

8. Browser settings

Independently of the KRISTAL banner, the user may configure his/her browser to block or delete all cookies. General blocking may affect the proper functioning of certain services.

Useful links:

Chrome: https://support.google.com/chrome/answer/95647
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac
Edge: https://support.microsoft.com/en-us/microsoft-edge

9. Articulation with the Privacy Policy

Cookies deployed by KRISTAL form part of the broader Personal Data Protection Policy of the group, available on the website, which details in particular the rights of data subjects (access, rectification, objection, deletion).

10. Contact

For any question regarding this cookie policy:

rgpd@kristal.aero
By post: KRISTAL AERONAUTIQUE - Data Protection - 61 rue Frédéric Mistral, 34400 Lunel - France

11. Modification of the policy

KRISTAL reserves the right to modify this policy to comply with any regulatory evolution (CNIL guidelines, ePrivacy, etc.). The version in force is the one published on the website.