1. Data controller

The data controller for personal data collected through the bois-exo.com website is:

2. Data collected

BOIS EXO may collect the following data when you use the contact form or communicate directly with BOIS EXO:

• first name and last name;
• email address;
• phone number, if provided;
• company name;
• job title or professional activity;
• content of the message sent;
• information related to the timber project: species, format, volume, destination, incoterm, quality constraints, documents, photos or attachments;
• technical data related to browsing, including IP address, server logs, browser, pages viewed and audience measurement data when these tools are activated.

3. Purposes of processing

Personal data is used to:

• respond to requests sent through the contact form;
• analyse the feasibility of a professional timber requirement;
• prepare a commercial response, quotation or supplier exchange;
• follow up exchanges with prospects, customers, suppliers or partners;
• ensure the security and proper functioning of the website;
• measure website traffic when analytics tools are activated;
• comply with applicable legal, accounting or administrative obligations.

4. Legal bases

Depending on the case, processing is based on:

• BOIS EXO’s legitimate interest in responding to professional requests and developing its activity;
• the performance of pre-contractual measures when the request concerns a quotation, offer or commercial relationship;
• consent when required, particularly for certain cookies or trackers;
• compliance with legal obligations when data must be retained for administrative, accounting or tax purposes.

5. Data recipients

The data collected is intended for BOIS EXO. It may also be transmitted, when necessary to process the request, to technical service providers or operational partners, including:

• website hosting provider;
• form provider and WordPress tools;
• email or SMTP service;
• audience analytics providers, if activated;
• suppliers, inspectors, freight forwarders or commercial partners concerned by the file, only when necessary for the analysis or processing of the request.

6. Retention period

Data from contact requests is retained for the time necessary to process the request and follow up the commercial relationship.

As an indication, data relating to prospects may be retained for up to three years after the last active exchange, unless deletion is requested or a contrary legal obligation applies.

Commercial, accounting or administrative documents may be retained for a longer period when required by law.

7. Transfers outside the European Union

BOIS EXO gives preference to technical providers located within the European Union whenever possible. However, certain tools or professional exchanges may involve access to or processing of data outside the European Union.

In such cases, BOIS EXO ensures that the data transmitted is limited to the information necessary to process the request and uses providers or partners offering appropriate safeguards.

8. Security

BOIS EXO implements reasonable measures to protect personal data against unauthorized access, loss, alteration or disclosure.

However, no electronic transmission or storage system can guarantee absolute security.

9. Your rights

In accordance with applicable regulations, you may request access, rectification, erasure, restriction of processing, objection to processing or portability of your data where this right applies.

You can exercise your rights by writing to: contact@bois-exo.com.

Proof of identity may be requested in the event of reasonable doubt regarding the identity of the requester.

10. Complaint

If you believe that your rights are not being respected, you can contact BOIS EXO at the address indicated above.

You may also lodge a complaint with the competent data protection authority.

11. Cookies

Information relating to cookies and trackers is detailed in the Cookie Policy.

12. Changes to this policy

BOIS EXO may modify this Privacy Policy to reflect changes to the website, tools used or applicable regulations.