Privacy Policy

Last updated: 17/04/2026

This privacy policy aims to inform users of the sachadestock.com website about how their personal data is collected and processed, in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and the French Data Protection Act of January 6, 1978 as amended.

1. Data Controller

The data controller is:

  • SACHA DESTOCK - SARL with capital of €500,000
  • 15 Rue du Guindal, 59630 Bourbourg, France
  • SIRET: 505 399 196 00037
  • Email: info@sachadestock.com
  • Phone: +33 3 28 23 34 98

2. Data Collected

  • Identification data: first name, last name, company name
  • Contact data: email address, phone number, postal address
  • Connection data: IP address, connection logs, browser type
  • Browsing data: pages visited, session duration, cookies (see Cookie Policy)
  • Message content: information submitted via the contact form

3. Purposes of Processing

  • Responding to information and quote requests
  • Managing commercial relationships and partnerships
  • Ensuring site security and proper functioning
  • Complying with legal and regulatory obligations
  • Measuring audience and improving user experience (subject to consent)

4. Legal Basis

  • User consent for non-essential cookies and newsletter
  • Contract performance or pre-contractual measures for quote requests
  • Legitimate interest for site security and improvement
  • Legal obligations (accounting, tax, etc.)

5. Data Recipients

Personal data is exclusively intended for SACHA DESTOCK and its technical subcontractors strictly necessary for site operation (hosting provider, email service). No data is transferred, sold or rented to third parties for commercial purposes.

6. Retention Period

  • Contact form: 3 years from last contact
  • Commercial relationship: duration + 5 years for legal obligations
  • Connection logs: 12 months as per regulation
  • Cookies: maximum 13 months
  • Accounting data: 10 years as per French Commercial Code

7. Data Security

SACHA DESTOCK implements all appropriate technical and organizational measures to protect personal data: SSL/TLS encryption, access control, regular backups, secure passwords (Argon2ID), application firewall, security audits.

8. Transfers Outside the European Union

Personal data is hosted in France by o2switch. No data transfer outside the European Union is carried out without appropriate safeguards under GDPR.

9. Your Rights

In accordance with articles 15 to 22 of the GDPR, you have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent at any time
  • Right to define directives regarding your data after death

10. Exercising Your Rights

A response will be provided within a maximum of one month from receipt of the request.

11. Complaint to CNIL

If you believe your rights are not respected, you can file a complaint with the French Data Protection Authority (CNIL):

  • CNIL - 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
  • Website: www.cnil.fr

12. Policy Changes

SACHA DESTOCK reserves the right to modify this privacy policy at any time. Please check this page regularly.

Note: The French version of this policy prevails in case of discrepancy.