1. Preamble
The purpose of this privacy policy is to inform users of the website about how their personal data is collected and processed when they browse the site and interact with Borie Consulting.
It complies with Regulation (EU) 2016/679 known as the GDPR and with the amended French Data Protection Act (Informatique et Libertés).
2. Identity of the data controller
- Company: Borie Consulting, SAS
- Address: 213 chemin Denis Bodden, 06210 Mandelieu-la-Napoule, France
- Legal representative: Pierre Borie
- Contact email: pierre@borie-conseils-exports.com
- Telephone: +33 (0)6 60 57 34 06
3. Data collected
As part of the site, Borie Consulting may collect the following categories of data:
- Identification data: first name, last name, position, company, country.
- Professional data: sector of activity, nature of the compliance project, level of export control maturity.
- Contact data: email address, telephone number.
- Connection data: IP address, browser type, pages visited, session duration (collected automatically via cookies or analytics tools).
4. Purposes of processing
The data collected is used for the following purposes:
- Responding to contact requests and information inquiries.
- Providing the consulting services requested.
- Sending commercial communications (newsletters, updates) where you have given your consent.
- Improving the website and the services offered (via anonymous audience statistics).
- Complying with the legal and regulatory obligations applicable to Borie Consulting.
5. Legal basis for processing
Each processing activity is based on one of the following legal grounds:
- Consent: for sending commercial communications and non-essential cookies.
- Performance of a contract: when data processing is necessary to provide a service requested by the user.
- Legitimate interest: for the improvement of the website and services, and for certain prospecting activities.
- Legal obligation: for processing required by law (e.g. keeping accounting records).
6. Cookies
The website uses cookies and similar technologies. These are used to:
- Ensure the proper technical functioning of the site (essential cookies).
- Measure traffic and analyze site usage (e.g. via a statistics or analytics tool).
- Improve the content and services provided.
When you first visit, an information banner allows you to accept, refuse or configure non-essential cookies, with the option to modify your choices at any time. Cookies that are strictly necessary for the operation of the site do not require consent.
7. Data recipients
Personal data is intended for:
- Internal teams at Borie Consulting in charge of business development, customer relationship management and compliance.
- Technical subcontractors acting on behalf of Borie Consulting (site host, web service provider, CRM or analytics tool provider), limited to what is strictly necessary for their tasks.
These providers are bound by confidentiality obligations and may only use the data for the purposes defined in their contracts. No data is sold or transferred to third parties for commercial purposes without the user’s prior consent.
8. Data retention
Data is kept for no longer than necessary for the purposes for which it was collected:
- Contact and prospecting data: 3 years from the last contact.
- Customer data: duration of the contractual relationship + 5 years for legal purposes.
- Connection data (logs): 12 months.
9. User rights
In accordance with the GDPR, you have the following rights:
- Right of access: to obtain confirmation as to whether or not data concerning you is being processed and to access that data.
- Right of rectification: to request that inaccurate or incomplete data be corrected.
- Right to erasure (“right to be forgotten”): to request deletion of your data, subject to legal retention obligations.
- Right to restriction of processing: to request that processing be temporarily restricted in certain cases.
- Right to object: to object at any time to certain processing activities based on legitimate interest, in particular for direct marketing.
- Right to data portability: to receive, in a structured format, the data you have provided where processing is based on consent or contract and carried out by automated means.
- Right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before its withdrawal.
To exercise your rights: pierre@borie-conseils-exports.com, or by postal mail to the registered office, enclosing proof of identity if necessary.
In case of persistent difficulty, you have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés) in France.
10. Data security
Borie Consulting implements appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, unauthorized disclosure or access.
11. Updates
This privacy policy may be updated periodically to reflect changes in practices or applicable regulations. The date of the last update will be indicated at the top of the page. Users are encouraged to consult it regularly.