This Privacy Policy explains how Signstone ("we", "us", "our") collects, uses, and protects your personal data when you visit our website or get in touch with us. It applies to all visitors and reflects our practices in compliance with the EU General Data Protection Regulation (GDPR) and applicable national law, including the French Loi Informatique et Libertés.
1. Data Controller
Signstone is the data controller responsible for your personal data.
1 Rue Henri Navier, 78570 Chanteloup-les-Vignes, France
Email: geral@signstone.fr
2. What Personal Data We Collect
We only collect data that you provide voluntarily or that is strictly necessary to operate this website.
Through the contact form:
- Full name
- Email address
- Company name (optional)
- Phone number (optional)
- Subject and message content
Through analytics:
- Anonymized IP address
- Browser type and device information
- Pages visited and time spent
For cookies, see the dedicated section below.
3. Why We Process Your Data and Legal Basis
We process your personal data on the following legal bases under Article 6 of the GDPR:
- Responding to enquiries sent via the contact form, legitimate interest (Art. 6(1)(f)).
- Sending you an automatic confirmation that we received your message, performance of pre-contractual measures or legitimate interest (Art. 6(1)(b) and (f)).
- Website analytics, your prior consent (Art. 6(1)(a)).
- Compliance with legal obligations, Art. 6(1)(c).
We never sell your personal data. We do not use it for automated decision-making or profiling.
4. Data Sharing and Subprocessors
To deliver our services we rely on the following trusted subprocessors:
- Hetzner Online GmbH (Germany), website hosting.
- Sanity.io (Norway / United States), content management system.
- Google LLC (United States), analytics (Google Analytics 4), under the EU-US Data Privacy Framework and Standard Contractual Clauses.
- Our SMTP email provider, delivery of contact form emails.
We do not share your personal data with any third party for marketing purposes.
5. International Data Transfers
Some of our subprocessors may process data outside the European Economic Area. In all cases, transfers are protected by:
- adherence to the EU-US Data Privacy Framework,
- Standard Contractual Clauses approved by the European Commission, or
- equivalent safeguards.
6. Data Retention
- Contact form submissions: retained for 3 years after the last contact, unless a longer period is required by law.
- Analytics data: retained for 14 months in Google Analytics (default retention).
- Email correspondence: retained as long as necessary to manage the customer relationship.
We delete or anonymize personal data once it is no longer needed.
7. Your Rights
Under the GDPR and applicable law, you have the right to:
- Access, obtain a copy of the personal data we hold about you.
- Rectification, correct inaccurate or incomplete data.
- Erasure, request deletion of your data ("right to be forgotten").
- Restriction, limit how we process your data.
- Portability, receive your data in a structured, machine-readable format.
- Objection, object to processing based on our legitimate interest.
- Withdraw consent, at any time, without affecting prior lawful processing.
- Lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL, www.cnil.fr), the French data protection authority.
To exercise any of these rights, contact us at geral@signstone.fr. We will respond within one month.
8. Cookies
Our website uses cookies and similar technologies. Cookies are small text files stored on your device that allow the site to remember your actions and preferences.
Strictly necessary cookies
These cookies are required for the website to function correctly (for example, to remember your language preference). They do not require your consent.
Analytics cookies
Set by Google Analytics 4 to help us understand how visitors use the site. IP addresses are anonymized. These cookies are only set with your prior consent.
Managing cookies
- Through your browser settings, you can block or delete cookies at any time.
- Where available, you can adjust your consent preferences directly on this website.
Refusing analytics cookies does not affect your ability to use the website.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. All form submissions are transmitted over HTTPS.
10. Children's Privacy
This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top will reflect the most recent revision.
12. Contact Us
For any questions about this Privacy Policy or to exercise your rights, please contact:
Signstone 1 Rue Henri Navier 78570 Chanteloup-les-Vignes, France
Email: geral@signstone.fr