Privacy policy

This policy describes how Zitouna Export (hereinafter "we") collects, uses, shares and protects the personal data of users of the site zitouna-export.com.

Data controller

The controller of the data is:

What Zitouna Export does with your request (read this first)

Zitouna Export is a B2B introduction service in the olive oil industry. Concretely:

  • when you submit a quotation, sample or partnership request, we process it ourselves and we may pass it on to one or more selected partner olive oil exporters or producers, so that they can answer it and send you a matching commercial offer;
  • this is precisely what you consent to when you tick the box on the form ("I agree that Zitouna Export and its partner exporters process my data to answer my request and send me matching offers");
  • these partners then act as separate controllers: once your request has been passed on, each applies its own privacy policy to the commercial relationship that follows.

You may refuse this sharing or withdraw your consent at any time (see "Your rights" below).

Data we collect

We only collect data that you voluntarily provide to us or that is necessary for the operation of the site:

  • Via the quotation or sample request form: surname, first name or company name, country, email address, telephone number (optional), and the content of your message (volume sought, type of oil, format, destination market, incoterm, etc.).
  • Via the partner (supplier) form: company identity, contact details, declared production and export capacity, certifications.
  • Via newsletter registration / downloadable resources: email address and, where applicable, first name and company name.
  • Strictly necessary technical data: log data generated by our host to ensure the security and availability of the site.

We do not collect so-called "sensitive" data and only request information strictly relevant to your request. No third-party audience measurement is deployed to date (see the cookie policy).

Purposes and legal bases

Purpose Legal basis
Respond to a quotation, sample or contact request Pre-contractual measures / legitimate interest
Pass your request on to partner exporters or producers so that they can send you an offer Consent collected when the form is submitted (and legitimate interest in the B2B introduction)
Manage the B2B commercial relationship Performance of the contract / legitimate interest
Send the newsletter and resources Consent
Ensure the security and proper operation of the site Legitimate interest
Comply with our legal and accounting obligations Legal obligation

Recipients of your data

Your data is accessible to our internal teams in charge of processing your request, as well as to the following categories of recipients:

1. Partner exporters and producers (separate controllers)

Qualified requests (quotation, sample, partnership) may be passed on to selected partner olive oil exporters and producers, for the sole purpose of answering your request and sending you a matching commercial offer. Each of these partners is an autonomous controller for the exchanges it subsequently engages in with you.

  • Category of recipients: partner olive oil exporters, mills and producers.
  • Legal basis: your consent, collected explicitly when the form is submitted.
  • Data concerned: identity and professional contact details, content of the request (volume, oil category, format, market, incoterm).
  • Location: these partners are mostly established in Tunisia; the transfer therefore takes place outside the European Union (see "Transfers outside the EU").

We do not pass your request on to partners where you have not given your consent.

2. Processors acting on our instructions

  • Brevo — routing of our transactional emails, the newsletter and contact management. Brevo acts as a processor and processes the data in accordance with its contractual commitments and its own data protection policy.
  • Netlify — hosting of the site and associated technical logging.

3. Advisers and authorities

Your data may be disclosed to our advisers (accountant, lawyer) or to the competent authorities where the law so requires.

What we do not do

We do not sell, rent or transfer your data to data brokers, for third-party advertising purposes, or to players unrelated to your request. Your data is shared only with the partners able to answer your request, with your consent, and with the processors listed above.

Transfers outside the European Union

Given our location and that of our partners, data transfers outside the European Union, in particular to Tunisia, take place as part of our activities. Depending on the case, these transfers are based on:

  • your explicit consent to your request being passed on to a partner exporter (Article 49(1)(a) GDPR), after being informed of the risks of a transfer to a country not covered by an adequacy decision;
  • the contractual or pre-contractual necessity of the transfer in order to answer your request (Article 49(1)(b) GDPR);
  • for our processors (Brevo, Netlify), the appropriate safeguards provided for in Chapter V of the GDPR and implemented by those providers, in particular the European Commission's standard contractual clauses.

You may ask us for details of the framework applicable to a given transfer at contact@zitouna-export.com.

Retention periods

  • Prospects and quotation requests: kept for as long as necessary to process the request and follow up commercially, then deleted or anonymised in the absence of an active relationship.
  • Customers: the duration of the commercial relationship, then retention of the documents necessary to comply with our legal, accounting and tax obligations, for the applicable statutory period.
  • Newsletter subscribers: until the withdrawal of your consent (unsubscription), then deletion within a reasonable period.
  • Technical security logs: a short period, limited to our host's security and diagnostic needs.

Once your request has been passed on to a partner exporter, the retention period applied by that partner is governed by its own privacy policy.

Your rights

In accordance with applicable regulations, you have the following rights over your data:

  • Right of access to your data;
  • Right to rectification of inaccurate or incomplete data;
  • Right to erasure ("right to be forgotten");
  • Right to restriction of processing;
  • Right to object, in particular to commercial prospecting;
  • Right to portability of your data;
  • Right to withdraw your consent at any time — including your consent to your request being passed on to partner exporters — without this affecting the lawfulness of the processing carried out before such withdrawal.

You may exercise these rights, including the withdrawal of your consent, by writing to us at contact@zitouna-export.com, providing proof of your identity. We pass the request on to any partners to whom your request has already been sent; you may also contact them directly, each being a controller for its own exchanges with you. Each newsletter email also contains an unsubscribe link.

If you believe that your rights are not being respected, you may lodge a complaint with the competent supervisory authority: for residents of the European Union, the data protection authority of your Member State; in Tunisia, the Instance Nationale de Protection des Données à Caractère Personnel (INPDP).

Data protection officer

No data protection officer (DPO) has been appointed to date. Any question relating to your personal data may be addressed to contact@zitouna-export.com.

Security

We implement reasonable technical and organisational measures to protect your data against any unauthorised access, alteration, disclosure or destruction. As no transmission over the Internet can be guaranteed to be entirely secure, we cannot however guarantee absolute security.

Amendments

This policy may be updated at any time. The applicable version is the one published on this page on the date of your consultation.

Last updated: August 2026. See also the legal notice, the cookie policy and the quote form.