Privacy policy

Model to be validated by a lawyer. This policy is a model to be adapted and reviewed against the General Data Protection Regulation (GDPR) and applicable regulations before publication. The [to be completed] and fields must be filled in. No DPO identity or official contact details should be invented.

This policy describes how [company name to be completed] (hereinafter "we") collects, uses and protects the personal data of users of the site [domain name to be completed].

Data controller

The controller of the data is:

  • Company: [to be completed]
  • Registered office: [to be completed — Sfax, Tunisia]
  • Contact: [to be completed]

Data we collect

We only collect data that you voluntarily provide to us or that is necessary for the operation of the site:

  • Via the quote request form: surname, first name or company name, country, email address, telephone number (optional), and the content of your message (volume sought, type of oil, format, destination market, etc.).
  • Via newsletter registration / downloadable resources: email address and, where applicable, first name and company name.
  • Technical and browsing data: IP address, browser type, pages viewed, audience measurement data — collected via cookies, under the conditions described in our cookie policy and subject to your consent.

We do not collect so-called "sensitive" data and only request information strictly relevant to your request.

Purposes and legal bases

Purpose Legal basis
Respond to a quote or contact request Pre-contractual measures / legitimate interest
Manage the B2B commercial relationship Performance of the contract / legitimate interest
Send the newsletter and resources Consent
Measure the site's audience Consent (see cookies)
Comply with our legal and accounting obligations Legal obligation

Processors and recipients

Your data is intended for our internal teams in charge of processing your request. We use service providers (processors within the meaning of the GDPR) acting on our instructions:

  • Brevo — routing of our transactional emails, the newsletter and contact management. Brevo acts as a processor and processes the data in accordance with its contractual commitments and its own data protection policy.
  • Netlify — hosting of the site.
  • Google (GA4 audience measurement) — visitor statistics, only after obtaining your consent.

A transfer of data outside the European Union may take place in connection with these services. Where applicable, it is governed by appropriate safeguards [mechanism to be specified — e.g. standard contractual clauses]. We do not sell or rent your data to third parties.

Retention periods

  • Prospects and quote requests: [period to be completed — e.g. 3 years from the last contact].
  • Customers: the duration of the commercial relationship, then retention of the documents necessary to comply with our legal and accounting obligations.
  • Newsletter subscribers: until the withdrawal of your consent (unsubscription), then deletion within a reasonable period.
  • Audience measurement data: according to the service's settings, [period to be completed].

Your rights

In accordance with applicable regulations, you have the following rights over your data:

  • Right of access to your data;
  • Right to rectification of inaccurate or incomplete data;
  • Right to erasure ("right to be forgotten");
  • Right to restriction of processing;
  • Right to object, in particular to commercial prospecting;
  • Right to portability of your data;
  • Right to withdraw your consent at any time, without this affecting the lawfulness of the processing carried out before such withdrawal.

You may exercise these rights by writing to us at [email address to be completed], providing proof of your identity. Each newsletter email also contains an unsubscribe link.

If you believe that your rights are not being respected, you may lodge a complaint with the competent supervisory authority [authority to be specified according to the applicable jurisdiction].

Data protection officer (DPO)

[To be completed: indicate whether a DPO has been appointed and, where applicable, their contact details. Invent nothing.]

Security

We implement reasonable technical and organisational measures to protect your data against any unauthorised access, alteration, disclosure or destruction. As no transmission over the Internet can be guaranteed to be entirely secure, we cannot however guarantee absolute security.

Amendments

This policy may be updated at any time. The applicable version is the one published on this page on the date of your consultation.

Document drawn up in July 2026. Model to be validated by a lawyer before publication. See also the legal notice and the quote form.