Data protection
Privacy policy
How PROMOTIONAL SOURCING collects, uses and protects the personal data of visitors to promotional-sourcing.eu, in accordance with the GDPR and French data protection law.
On this page
Data controller
72 quai de Bacalan, 33300 Bordeaux — France
SIREN 108 093 790 — Bordeaux Trade and Companies Register
Email: contact@promotional-sourcing.eu
Given its size and the nature of its processing activities, PROMOTIONAL SOURCING is not required to appoint a Data Protection Officer. Any question regarding your data can be sent to the address above.
Data we collect
We only collect data that you provide to us voluntarily:
- Through the contact form: full name, company, type of enquiry (contact or partnership), work email address, phone number (optional) and the content of your message.
- Technical data: connection logs generated automatically by our host (IP address, date and time of request, pages viewed, browser type), for security and site-reliability purposes.
No field goes beyond what is strictly necessary to handle your enquiry. We do not collect any special category data within the meaning of Article 9 of the GDPR.
Purposes and legal bases
- Responding to your enquiry and managing the business relationship — legal basis: the legitimate interest of PROMOTIONAL SOURCING (Article 6(1)(f) GDPR) in responding to a professional enquiry that you initiated yourself.
- Ensuring the security and availability of the website — legal basis: legitimate interest (Article 6(1)(f) GDPR).
Your data is never sold, rented or shared with third parties for marketing purposes.
Recipients and processors
Your data is processed by authorised staff within PROMOTIONAL SOURCING. We use the following processors:
- Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, United States) — website hosting and processing of contact-form submissions. This involves a transfer of data outside the European Union, covered by the European Commission's Standard Contractual Clauses and by Netlify's certification under theEU–U.S. Data Privacy Framework.
- Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, United States) — email delivery of contact-form submissions to our team. This involves a transfer of data outside the European Union, covered by the European Commission's Standard Contractual Clauses.
Your data may also be disclosed to administrative or judicial authorities where required by law.
Retention periods
- Contact enquiries: 3 years from our last exchange with you, in line with the French data protection authority's (CNIL) recommendation for B2B prospecting.
- Connection logs: 12 months maximum.
After these periods, your data is deleted or anonymised.
Security
The website is served entirely over HTTPS. Access to enquiries received via the form is restricted to authorised staff at PROMOTIONAL SOURCING and protected by authentication.
Your rights
Under Articles 15 to 22 of the GDPR, you have the following rights over your data:
- the right of access and to obtain a copy of your data;
- the right to rectification of inaccurate or incomplete data;
- the right to erasure (the "right to be forgotten");
- the right to restriction of processing;
- the right to object to processing based on legitimate interest;
- the right to data portability;
- the right to give instructions on what happens to your data after your death.
To exercise these rights, write to contact@promotional-sourcing.eu or to the postal address given in section 1. We will respond within one month. Proof of identity may be requested if there is reasonable doubt as to your identity.
Complaints
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 —cnil.fr.
Changes to this policy
This policy may change, in particular when the platform launches. The date of the latest update appears at the top of this page. See also ourlegal notice.
Any questions?
Need clarification on this document?
Our team answers legal enquiries and questions about your data within 48 business hours.
