CGV Et RGPD Template for France

Your CGV Et RGPD (General Terms and Conditions & GDPR) document combines commercial terms with data protection obligations, creating a comprehensive legal framework for your business relationships in France. This dual-purpose document ensures you meet both consumer protection requirements under French commercial law and data privacy obligations under European GDPR regulations.

When do you need this document?

You need CGV Et RGPD whenever you provide services or sell products to consumers in France while processing their personal data. E-commerce websites require this document to establish clear commercial terms and explain data collection practices. Service providers must use this document when offering digital services, subscriptions, or any business relationship involving customer data processing. Professional service providers, consultants, and SaaS companies operating in France need this combined document to ensure comprehensive legal compliance. Any business collecting email addresses, contact information, or other personal data from French customers must implement these terms.

Key legal considerations

Your document must clearly identify both parties and specify the exact services or products offered. Pricing terms, payment conditions, and delivery obligations require precise definition under French consumer protection law. The data protection section must detail what personal data you collect, how you use it, and the legal basis for processing under GDPR. You must specify data retention periods, security measures, and third-party data sharing arrangements. Customer rights sections must explain GDPR rights including access, rectification, erasure, and data portability in clear, understandable language. Termination clauses must comply with French contract law while addressing data deletion obligations. Cookie policies and consent mechanisms require specific attention for digital services.

Legal requirements in France

French law mandates specific disclosures under the Code de la Consommation, including clear identification of the professional, detailed service descriptions, and transparent pricing. Your document must include mandatory withdrawal rights for distance contracts and specify dispute resolution procedures. GDPR compliance requires appointing a Data Protection Officer if processing large volumes of personal data and implementing privacy by design principles. You must provide contact details for your data protection representative and specify the supervisory authority (CNIL) for data protection complaints. French language requirements may apply for consumer-facing documents, and specific sectors may have additional regulatory obligations. The document must address both French civil law contract principles and European data protection standards simultaneously.