Privacy policy

Data controller

BOUSSOLE SAS, 4 avenue de Versailles, 92500 Rueil-Malmaison, France. SIREN 952571933. Contact: contact@boussole-sa.com.

The processing is governed by the General Data Protection Regulation (GDPR), which applies throughout the European Union, and by French law, the controller being established in France.

What data, and why

The only data collected is what you enter yourself in the contact form: type of project, deadline, description, name, company, email address and telephone number.

It is used solely to answer your enquiry and, where appropriate, to prepare a quotation. The legal basis for this processing is the taking of steps at your request prior to entering into a contract, within the meaning of Article 6(1)(b) of the General Data Protection Regulation.

None of this information is used for automated marketing, nor is it transferred, rented or sold on.

What is required, and what is not

Six fields are required, each for a precise reason: the type of project and the deadline, because a sign consent in France takes two months to process and the answer depends on it; the town where the site is, because the applicable rules change from one place to another; the name, the email address and the telephone number, so that we can reply by whichever means suits.

We ask for a telephone number because a signage project can be framed in a few minutes of conversation, where in writing it would take several exchanges. It is used only to deal with your enquiry: it feeds no call campaign, and is passed to no one.

Company and description are optional. Leaving them blank does not prevent you sending the form, it simply lengthens the exchanges needed before we can price the work.

Where it is kept

Your enquiry is sent by email to the person who deals with it. It is also recorded in a log file on the server, placed outside the folder reachable from the web.

This second copy exists for a simple reason: an email can be rejected, filed as junk or lost by a relay without the site ever knowing. Without that log, an enquiry would disappear and no one would notice. Entries older than twelve months are purged automatically.

The site has no database. There is therefore no copy of your information other than the ones described here.

For how long

Enquiries that come to nothing are kept for twelve months, long enough for a postponed project to come back. Enquiries that have led to a commercial relationship are kept for three years from the last contact, in line with accepted practice for prospecting.

Accounting documents relating to an order follow the statutory retention periods that apply to them.

Who has access

Enquiries are dealt with by BOUSSOLE. They may be passed to a partner workshop or to an installation team where carrying out the project requires it, and only to that extent.

Business email is hosted by Microsoft, within the European Union. The site is hosted by OVH, in France.

Cookies and analytics

This site sets no cookies. It uses neither Google Analytics nor any other third-party analytics service, no social network pixel and no advertising network.

The typefaces are hosted on our own servers: no request is sent to Google Fonts or to any other external service, so your IP address is passed to no one.

That is also why you see no consent banner when you arrive on this site: there is nothing to consent to.

Connection logs and spam protection

The hosting provider keeps technical connection logs, including IP addresses, for security and for the proper running of the service. That retention is a matter for its own legal obligations and its own policy.

The form is also protected against automated submissions. This protection does not keep your IP address: it computes a salted fingerprint of it, which it uses to limit how often the form can be sent, and which is erased after one minute. The address itself is neither written down nor transmitted. The legal basis is the legitimate interest in protecting the service.

No captcha is used. The products on the market send browsing data to their publisher, often outside the European Union, which would contradict everything above.

No automated decisions

Your data is not subject to any profiling or automated decision-making. A person reads every enquiry and answers it.

Your rights

You have the right of access, rectification, erasure, restriction of processing, objection and portability in respect of the data concerning you.

To exercise them, write to contact@boussole-sa.com. You will receive a reply within one month.

You may also lodge a complaint with the competent supervisory authority, which is the Commission nationale de l'informatique et des libertés (CNIL), the French data protection authority, www.cnil.fr.

Security

The site is served over HTTPS only. It is a static site: it has no database and no administration interface reachable online, which considerably reduces the exposed surface.

Updates

This policy may be amended to take account of legal or technical changes. See also the legal notice.

This policy is published in French and in English. In the event of any divergence of interpretation between the two versions, the French version prevails.