Privacy policy

Last update : 12/01/2026

1. Introduction and Identity of the Data Controller

The purpose of this Confidentiality Policy is to inform you about the way in which Tour d'Ox collects, uses and protects the personal data that you provide to us or that we collect when you use our website $[WEBSITE ADDRESS]$.
By using our Site, you agree to the terms of this Privacy Policy.

1.1 Identity of the Data Controller

The person responsible for processing personal data is :

Name of company/person : $[LEGAL NAME OF THE COMPANY/BUSINESS]$
Legal form : $[SARL, SAS, Auto-entrepreneur, etc.]$
Registered office address : $[FULL ADDRESS OF REGISTERED OFFICE]$
SIRET number : $[SIRET NUMBER]$
Contact: contact@tourdox.org

2. The Personal Data collected

We collect different types of data for different purposes:

2.1. Data supplied directly by the User

This data is collected when you fill in a form, create an account or interact with our services:

Identity data : Surname, first name, e-mail address.
Contact details : Postal address, telephone number.
Transaction data (if e-commerce) : Details of products/services purchased, but NEVER full bank details (these are processed by Stripe.

Account details : User name, encrypted password.

2.2. Automatically Collected Data (via Cookies and Trackers)

This data is collected when you browse the Site:

Connection data : IP address, browser type, operating system.
Navigation data : Pages viewed, length of visit, clicks, origin (referring sites).

Location data (if activated) : No

3. Purposes of Collection and Legal Basis

Your personal data are processed for specific purposes and on the legal basis provided by the RGPD:

Purpose of Processing	Data concerned	Legal basis for processing
Order management and delivery (if e-commerce)	Identity, contact, transaction	Performance of the contract (Art. 6.1.b RGPD)
Responding to your requests contact or quote	Identity, contact	Legitimate interest / Pre-contractual due diligence (Art. 6.1.f/b)
Sending newsletters and marketing communications	E-mail, name	Consent (Art. 6.1.a RGPD)
Improving the site and audience analysis	Connection, browsing, IP	Legitimate interest (for anonymous statistics) or Consent (for plotters)
User account management	Identity, account	Performance of the contract (Art. 6.1.b RGPD)

Exercising your rights

To exercise these rights, you can contact our Data Controller by email at contact@tourdox.org or by post to our head office address. We promise to reply within 2 weeks. If, after contacting us, you feel that your «Data Protection» rights have not been respected, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés).

4. Data retention period

We only keep your data for as long as is necessary to fulfil the purposes for which it was collected.

Customer/order data : Kept for the duration of the contractual relationship, plus 3 years from the end of that relationship (for evidence, accounting or tax purposes).
Prospect data (no purchase) : Kept for 3 years from the last contact with us.
Connection data/Cookies : Kept for a maximum of 3 years, generally 13 months for non-essential data.

Inactive accounts : Removed after 3 years of inactivity.

5. Recipients of the Data

Your personal data may be shared with the following recipients:

Our in-house services : Authorised staff (customer service, marketing, technical).
Subcontractors : Technical service providers (hosting, maintenance), payment service providers, carriers (if e-commerce).
- Planethoster
- Google Analytics / Google Search Console

Legal authorities : Only if required by law or court order.

6. Your rights (in accordance with the RGPD)

In accordance with the RGPD, you have the following rights with regard to your data:

Law	Description
Right of access (Art. 15)	Obtain confirmation that your data is being processed and, if so, have access to it.
Right of rectification (Art. 16)	Request the modification of inaccurate or incomplete data.
Right to erasure («right to be forgotten») (Art. 17)	Request the deletion of your data in certain cases.
Right to restrict processing (Art. 18)	Request temporary suspension of the use of your data.
Right to portability (Art. 20)	Receive your data in a structured format and forward it to another manager.
Right to object (Art. 21)	Oppose the processing of your data (in particular for direct marketing purposes).
Right to withdraw your consent	Withdraw your consent at any time where processing is based on that consent.

7. Data security

We implement appropriate technical and organisational security measures (encryption, secure access, firewalls) to protect your data against unauthorised access, modification, disclosure or destruction.

8. Transfer of Data Outside the EU

Your data is hosted by Planethoster on servers located in France and Switzerland.
If data is transferred outside the European Union, we undertake to ensure that such transfers are secure and governed by appropriate legal mechanisms (European Commission Standard Contractual Clauses).

9. Modification of the Privacy Policy

The site is subject to French and European law (RGPD).

We reserve the right to modify this policy at any time. Any modification will take effect immediately after its publication on the Site.