Legal Document
Privacy Policy & Data Protection Statement
Coolocca SARL takes the protection of your personal and corporate data seriously. This Privacy Policy describes how we collect, use, store, and protect the information you provide on www.coolocca.com, in compliance with the European General Data Protection Regulation (GDPR) 2016/679 and other applicable data protection laws.
Contents
02 — Data We Collect
03 — Purposes & Legal Bases
04 — Project Confidentiality
05 — Recipients of Data
06 — International Transfers
07 — Retention Periods
08 — Cookies & Analytics
09 — Security
10 — Your Rights (GDPR)
11 — California (CCPA/CPRA)
12 — Data Breach
13 — Third-Party Links
14 — Contact
Data Controller
The data controller responsible for processing personal data collected through this website is:
| Company | Coolocca SARL |
| SIRET | 918 628 389 00010 |
| Address | 302 Rue de la Gare, 13770 Venelles, France |
| privacy@coolocca.com | |
| Telephone | +33 (0)4 84 49 65 67 |
Data We Collect
We collect data in two ways: directly through forms on this website, and automatically through website analytics tools.
Form data — direct submission
- Full name and job title
- Business email address
- Telephone number
- Company or brand name
- Country
- Service of interest
- Project description and message
- Uploaded files (CAD, PDF, images)
Analytics data — automatic collection
- Pages visited and navigation paths
- Approximate geographic location
- Device type and browser
- Session duration
- Search terms and referral sources
Collected via Google Analytics 4 and Google Search Console, subject to your cookie consent.
Purposes & Legal Bases
We process your data only for the purposes listed below, each supported by a specific legal basis under GDPR Article 6:
Pre-contractual & contractual performance
Responding to project enquiries, preparing quotations, evaluating project feasibility, and executing manufacturing contracts.
Consent
Website analytics via Google Analytics 4 where you have accepted cookies. Commercial communications about our products, services, and new developments, where you have given explicit consent via our contact form.
Legitimate interests
Improving website functionality, ensuring security of our systems, and maintaining records of commercial communications.
Legal obligations
Compliance with applicable French and European legal requirements including accounting, tax, and commercial record-keeping.
Project & Design Confidentiality
Project files submitted through our website — including concept designs, technical drawings, AI renders, and CAD files — are treated as confidential business information. We access and use these materials solely for the purpose of evaluating and executing your project.
Your project files and descriptions are never sold, leased, or disclosed to third parties for commercial or marketing purposes.
Where clients require a Non-Disclosure Agreement before sharing sensitive design assets, Coolocca is willing to review and sign an NDA provided by the client. Please contact us at privacy@coolocca.com to discuss this before submitting any files.
Recipients of Your Data
Your personal and project data may be accessed by the following categories of recipients, strictly limited to what is necessary for each purpose:
Authorised Coolocca personnel — project managers and commercial contacts directly responsible for your enquiry or project.
Hosting and IT providers — our website is hosted by OVH SAS (France), operating within the European Union.
Manufacturing and production partners — when required for technical evaluation or production of your specific project. We share only the minimum information necessary and select partners with care.
Analytics providers — Google LLC, via Google Analytics 4 and Google Search Console, subject to your cookie consent.
Your data is never sold, rented, or disclosed to any third party for commercial or marketing purposes.
International Data Transfers
Coolocca works with manufacturing and production partners located outside the European Economic Area. Where project data is accessed by such partners, we rely on the transfer mechanisms available under GDPR Article 46, including Standard Contractual Clauses (SCCs), to ensure an appropriate level of data protection.
Analytics data processed by Google LLC may be stored on servers located outside the EEA. This transfer is covered by Standard Contractual Clauses and Google’s data processing terms.
Retention Periods
Maximum 3 years from last contact
Data submitted by visitors who made an enquiry but did not proceed to contract is retained for a maximum of 3 years from the date of last contact.
Contract duration plus statutory periods
Data related to active or completed contracts is retained for the duration of the contract and subsequently for the applicable statutory retention period under French commercial and accounting law.
Maximum 2 years
Analytics data collected via Google Analytics 4 is retained for a maximum of 2 years in accordance with applicable regulations.
Upon expiry of the applicable retention period, or upon valid exercise of your right to erasure, personal data held by Coolocca will be securely deleted.
Cookies & Analytics
This website uses cookies and similar tracking technologies.
Essential cookies
Necessary for form submission and site security. Cannot be disabled without impairing core functionality. Legal basis: Art. 6(1)(f) GDPR.
Google Analytics 4
Used to understand site usage and improve the visitor experience. Only activated with your explicit consent. Legal basis: Art. 6(1)(a) GDPR.
Google Search Console
Used to monitor search performance. Does not place cookies on your device. Data is anonymous and does not identify individual users.
You may modify or withdraw your cookie consent at any time via the preference banner on this site, or through your browser settings.
Security
Coolocca implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include HTTPS encryption for all data transmitted through this website and restricted internal access to personal and project data.
No data transmission over the internet or electronic storage system can be guaranteed as completely secure. In the event of a personal data breach likely to affect your rights, we will notify you and the relevant supervisory authority in accordance with our GDPR obligations.
Your Rights Under GDPR
As a data subject within the European Economic Area, you hold the following rights regarding your personal data processed by Coolocca SARL:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data, subject to active contractual obligations or statutory retention requirements.
Right to Restriction
Request restriction of processing in certain circumstances.
Right to Data Portability
Request your data in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing based on legitimate interest, or withdraw consent for analytics or commercial communications at any time.
Right to Lodge a Complaint
Lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés) at www.cnil.fr.
Exercising your rights
Contact us at privacy@coolocca.com. We will respond within 30 days in accordance with GDPR Article 12.
California Residents — CCPA/CPRA
Where the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) apply, California residents benefit from the following additional rights: the right to know what personal information is collected and how it is used; the right to request deletion; the right to opt out of the sale of personal information (Coolocca does not sell personal information); and the right to non-discrimination for exercising these rights.
To exercise these rights, contact us at privacy@coolocca.com.
Data Breach Notification
In the event of a personal data breach likely to result in a risk to your rights and freedoms, Coolocca will notify the CNIL within 72 hours of becoming aware of the breach in accordance with GDPR Article 33, and will notify affected individuals without undue delay where required under GDPR Article 34.
Third-Party Links
This website may contain links to external websites and third-party resources — including regulatory authorities such as the CNIL (www.cnil.fr), service providers, and other reference sites. These links are provided for information purposes only.
Coolocca has no control over the content, privacy practices, or data protection policies of any external website. We are not responsible for the privacy policies, terms of use, or the handling of personal data by any third-party website you access via a link on this site. We recommend that you review the privacy policy of any external website before providing any personal data to it.
The presence of a link to a third-party website does not constitute an endorsement, recommendation, or approval by Coolocca of that website or its content.
Contact & Policy Updates
For any questions relating to this Privacy Policy or to exercise your rights:
| privacy@coolocca.com | |
| Post | Coolocca SARL, 302 Rue de la Gare, 13770 Venelles, France |
| Telephone | +33 (0)4 84 49 65 67 |
| CNIL | www.cnil.fr |
Coolocca SARL reserves the right to update this Privacy Policy at any time. The date of the most recent revision is shown at the top of this document. This policy is governed by French law.
