This policy explains how Penthertz processes personal data collected through this website and in the course of its commercial relationships, as data controller, in accordance with the GDPR and the French Data Protection Act.
Controller
Penthertz, whose details are given in the Legal notice, is the controller. For any question, write to [email protected].
What we collect and why
- Contact and quote requests (name, organisation, work e-mail, phone, message): to answer you, scope and provide our services. Basis: steps taken at your request prior to a contract, and our legitimate interest in responding to enquiries.
- Client and supplier management (contract, billing and contact details): to perform the contract and meet our legal and accounting obligations.
- Website operation and security (technical logs, IP address at the edge): to operate the site and protect it against abuse. Basis: legitimate interest.
We do not sell personal data, and we do not use intrusive advertising tracking.
Cookies and analytics
The website uses cookies strictly necessary to its operation and security, which do not require consent. It also uses Google Analytics to measure audience and improve the site; audience-measurement cookies and similar technologies are set only with your prior consent, which you can give, refuse or withdraw at any time through the cookie banner. Refusing them does not affect your access to the site.
Recipients
Data is accessed only by Penthertz and, where necessary, its service providers acting on its instructions, for example hosting, e-mail and, for audience measurement, Google (Google Analytics). Data may be disclosed where required by law.
Hosting location and transfers
Personal data collected through this website is hosted in France. Where you consent to audience measurement, data processed through Google Analytics may be transferred to the United States; such transfers are framed by the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. We do not otherwise transfer your personal data outside the European Union.
Retention
Prospect and contact data is kept for up to three (3) years from the last contact. Contract and billing records are kept for the legal retention periods (generally ten years for accounting records). Technical logs are kept for a limited period for security. Audience-measurement data is kept for no longer than twenty-five (25) months.
Your rights
You have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to give instructions on its fate after your death. Write to [email protected]. You may also lodge a complaint with the French supervisory authority (CNIL, www.cnil.fr).