Legal Document

Privacy Policy & Data Protection Statement

Last updated: June 2026
GDPR compliant
CCPA/CPRA compliant
Applicable to www.coolocca.com

Coolocca SARL takes the protection of your personal and corporate data seriously. This Privacy Policy describes how we collect, use, store, and protect the information you provide on www.coolocca.com, in compliance with the European General Data Protection Regulation (GDPR) 2016/679 and other applicable data protection laws.

01

Data Controller

The data controller responsible for processing personal data collected through this website is:

Company Coolocca SARL
SIRET 918 628 389 00010
Address 302 Rue de la Gare, 13770 Venelles, France
Email privacy@coolocca.com
Telephone +33 (0)4 84 49 65 67

02

Data We Collect

We collect data in two ways: directly through forms on this website, and automatically through website analytics tools.

Form data — direct submission

  • Full name and job title
  • Business email address
  • Telephone number
  • Company or brand name
  • Country
  • Service of interest
  • Project description and message
  • Uploaded files (CAD, PDF, images)

Analytics data — automatic collection

  • Pages visited and navigation paths
  • Approximate geographic location
  • Device type and browser
  • Session duration
  • Search terms and referral sources

Collected via Google Analytics 4 and Google Search Console, subject to your cookie consent.

03

Purposes & Legal Bases

We process your data only for the purposes listed below, each supported by a specific legal basis under GDPR Article 6:

Art. 6(1)(b)

Pre-contractual & contractual performance

Responding to project enquiries, preparing quotations, evaluating project feasibility, and executing manufacturing contracts.

Art. 6(1)(a)

Consent

Website analytics via Google Analytics 4 where you have accepted cookies. Commercial communications about our products, services, and new developments, where you have given explicit consent via our contact form.

Art. 6(1)(f)

Legitimate interests

Improving website functionality, ensuring security of our systems, and maintaining records of commercial communications.

Art. 6(1)(c)

Legal obligations

Compliance with applicable French and European legal requirements including accounting, tax, and commercial record-keeping.

04

Project & Design Confidentiality

Project files submitted through our website — including concept designs, technical drawings, AI renders, and CAD files — are treated as confidential business information. We access and use these materials solely for the purpose of evaluating and executing your project.

Your project files and descriptions are never sold, leased, or disclosed to third parties for commercial or marketing purposes.

Where clients require a Non-Disclosure Agreement before sharing sensitive design assets, Coolocca is willing to review and sign an NDA provided by the client. Please contact us at privacy@coolocca.com to discuss this before submitting any files.

05

Recipients of Your Data

Your personal and project data may be accessed by the following categories of recipients, strictly limited to what is necessary for each purpose:

Authorised Coolocca personnel — project managers and commercial contacts directly responsible for your enquiry or project.

Hosting and IT providers — our website is hosted by OVH SAS (France), operating within the European Union.

Manufacturing and production partners — when required for technical evaluation or production of your specific project. We share only the minimum information necessary and select partners with care.

Analytics providers — Google LLC, via Google Analytics 4 and Google Search Console, subject to your cookie consent.

Your data is never sold, rented, or disclosed to any third party for commercial or marketing purposes.

06

International Data Transfers

Coolocca works with manufacturing and production partners located outside the European Economic Area. Where project data is accessed by such partners, we rely on the transfer mechanisms available under GDPR Article 46, including Standard Contractual Clauses (SCCs), to ensure an appropriate level of data protection.

Analytics data processed by Google LLC may be stored on servers located outside the EEA. This transfer is covered by Standard Contractual Clauses and Google’s data processing terms.

07

Retention Periods

Prospects

Maximum 3 years from last contact

Data submitted by visitors who made an enquiry but did not proceed to contract is retained for a maximum of 3 years from the date of last contact.

Clients

Contract duration plus statutory periods

Data related to active or completed contracts is retained for the duration of the contract and subsequently for the applicable statutory retention period under French commercial and accounting law.

Analytics

Maximum 2 years

Analytics data collected via Google Analytics 4 is retained for a maximum of 2 years in accordance with applicable regulations.

Upon expiry of the applicable retention period, or upon valid exercise of your right to erasure, personal data held by Coolocca will be securely deleted.

08

Cookies & Analytics

This website uses cookies and similar tracking technologies.

Required

Essential cookies

Necessary for form submission and site security. Cannot be disabled without impairing core functionality. Legal basis: Art. 6(1)(f) GDPR.

Consent required

Google Analytics 4

Used to understand site usage and improve the visitor experience. Only activated with your explicit consent. Legal basis: Art. 6(1)(a) GDPR.

No cookies placed

Google Search Console

Used to monitor search performance. Does not place cookies on your device. Data is anonymous and does not identify individual users.

You may modify or withdraw your cookie consent at any time via the preference banner on this site, or through your browser settings.

09

Security

Coolocca implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include HTTPS encryption for all data transmitted through this website and restricted internal access to personal and project data.

No data transmission over the internet or electronic storage system can be guaranteed as completely secure. In the event of a personal data breach likely to affect your rights, we will notify you and the relevant supervisory authority in accordance with our GDPR obligations.

10

Your Rights Under GDPR

As a data subject within the European Economic Area, you hold the following rights regarding your personal data processed by Coolocca SARL:

Art. 15

Right of Access

Request a copy of the personal data we hold about you.

Art. 16

Right to Rectification

Request correction of inaccurate or incomplete data.

Art. 17

Right to Erasure

Request deletion of your data, subject to active contractual obligations or statutory retention requirements.

Art. 18

Right to Restriction

Request restriction of processing in certain circumstances.

Art. 20

Right to Data Portability

Request your data in a structured, machine-readable format where technically feasible.

Art. 21

Right to Object

Object to processing based on legitimate interest, or withdraw consent for analytics or commercial communications at any time.

Art. 77

Right to Lodge a Complaint

Lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés) at www.cnil.fr.

Exercising your rights

Contact us at privacy@coolocca.com. We will respond within 30 days in accordance with GDPR Article 12.

11

California Residents — CCPA/CPRA

Where the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) apply, California residents benefit from the following additional rights: the right to know what personal information is collected and how it is used; the right to request deletion; the right to opt out of the sale of personal information (Coolocca does not sell personal information); and the right to non-discrimination for exercising these rights.

To exercise these rights, contact us at privacy@coolocca.com.

12

Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, Coolocca will notify the CNIL within 72 hours of becoming aware of the breach in accordance with GDPR Article 33, and will notify affected individuals without undue delay where required under GDPR Article 34.

13

Third-Party Links

This website may contain links to external websites and third-party resources — including regulatory authorities such as the CNIL (www.cnil.fr), service providers, and other reference sites. These links are provided for information purposes only.

Coolocca has no control over the content, privacy practices, or data protection policies of any external website. We are not responsible for the privacy policies, terms of use, or the handling of personal data by any third-party website you access via a link on this site. We recommend that you review the privacy policy of any external website before providing any personal data to it.

The presence of a link to a third-party website does not constitute an endorsement, recommendation, or approval by Coolocca of that website or its content.

14

Contact & Policy Updates

For any questions relating to this Privacy Policy or to exercise your rights:

Email privacy@coolocca.com
Post Coolocca SARL, 302 Rue de la Gare, 13770 Venelles, France
Telephone +33 (0)4 84 49 65 67
CNIL www.cnil.fr

Coolocca SARL reserves the right to update this Privacy Policy at any time. The date of the most recent revision is shown at the top of this document. This policy is governed by French law.

Scroll to Top