Privacy policy

Who is responsible

The controller for the processing described below is FRAPUB, 126 Avenue du Général Leclerc, 92100 Boulogne-Billancourt, France, registered under 995 210 440 R.C.S. Nanterre. The legal representative is Aymane Babennas, President.

For any question about this policy or about your personal data, write to contact@frapub.com.

What we collect, and why

Contact form and email enquiries

When you submit the contact form or email us, we collect the first name, last name and email address you provide, together with the optional company name, website address and budget range, and the content of your message.

• Purpose: to answer your enquiry and, where relevant, prepare a proposal.
• Legal basis: your consent, given when you tick the consent box, and our legitimate interest in responding to business enquiries addressed to us (Article 6(1)(a) and 6(1)(f) GDPR).
• If you do not provide it: we cannot reply to you. Fields marked optional are not required for a reply.

Server logs

Our hosting provider records technical information about requests to this website, which may include your IP address, the requested URL, the time of the request, the referring page and your browser user-agent string. This is processed on the basis of our legitimate interest in keeping the website secure and available (Article 6(1)(f) GDPR).

Analytics

This website loads no analytics, advertising or third-party tracking scripts, and sets no cookies for those purposes. If analytics are introduced later, they will only load after you have given consent, this policy will be updated, and the cookie policy will describe the tools used.

Who has access to your data

Your data is accessed by authorised personnel of FRAPUB who need it in order to respond to you. We also rely on the following processors:

• Website hosting: GoDaddy.com, LLC, 2155 E. GoDaddy Way, Tempe, Arizona 85284, United States. Data is hosted in the United States.
• Email: the contact form delivers your message to our own mailbox at contact@frapub.com. The provider of that mailbox therefore processes it in order to deliver and store it.

We do not sell personal data and we do not share it with third parties for their own marketing purposes.

Transfers outside the European Union

Our hosting provider is established in the United States, so data processed through this website is transferred outside the European Economic Area. That transfer is covered by the European Commission's Standard Contractual Clauses incorporated into the provider's data processing agreement, together with the technical measures they apply, such as encryption in transit and at rest. The same applies to any email provider we use that is established outside the EEA.

You can ask us for more information about these safeguards at contact@frapub.com.

How long we keep your data

• Enquiries that do not lead to a business relationship: up to three years from our last contact with you, in line with the CNIL's guidance on prospect data.
• Enquiries that lead to a contract: for the duration of the relationship, then for the periods required by French commercial and accounting law, which is generally ten years for accounting records.
• Server logs: retained by our hosting provider for security purposes and not kept by us beyond twelve months.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to its processing, to data portability where applicable, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may also give instructions about what happens to your data after your death.

To exercise these rights, write to contact@frapub.com. We may ask for information to verify your identity, and we aim to respond within one month.

If you believe your data protection rights have been infringed, you may lodge a complaint with the CNIL, the French supervisory authority: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr.

Security

The website is served over HTTPS and access to enquiry data is limited to the people who need it. No method of transmission or storage is completely secure, so please do not send confidential or sensitive information through the contact form.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy to reflect changes in our processing or in the law. The date at the top of this page shows when it was last revised.