PreambleAt Pactolane, protecting your data is an absolute priority. When you use the website www.pactolane.com (the “Site”), we may collect certain personal data. This policy informs you about how this data is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and French law no. 78-17 of 6 January 1978 as amended.
1.Who is the data controller?
The controller of your data is:
Important note on Pactolane's role
When our customers use the Pactolane platform to manage their contracts, they are the data controllers as customers. Pactolane acts as a processor (Article 4(8) of the GDPR), processing data according to our customers' instructions and in compliance with the data processing clauses of our service contracts.
2.What data do we collect?
We collect different types of data depending on your interaction with the Site:
Identification and contact data
- First and last name
- Professional or personal email address
- Phone number (optional)
- Company name and industry
- Role or position held
Data relating to your use of the Site
- Content of the emails you send us
- Product demo requests
- Newsletter sign-up
- Comments or feedback provided
Connection and browsing data
- IP address
- Unique browser identifier
- Browser type and version
- Operating system used
- Pages viewed and visit duration
- Access timestamps
Data collected via cookies
- Audience analytics data (Google Analytics)
- Cookie consent preferences
- Session data
3.How do we collect the data?
Direct collection
- Emails sent to our contact addresses
- Product demo requests
- Newsletter sign-up
- Email communications
Indirect collection
- Analytics cookies (with your consent)
- Business partners or referrals
- Server log data
Newsletter sign-up · Double opt-in process
Sign-up to our newsletter follows a process of double opt-in (DOI) compliant with GDPR requirements:
This process ensures that only the holder of the email address can sign up. The collected data is transmitted to our processor Brevo (formerly Sendinblue) to manage delivery. You can unsubscribe at any time via the link in each email, or by writing to privacy@pactolane.com.
4.On what legal bases, for what purposes and for how long?
Here is the detail of our data processing:
| Purpose of processing | Legal basis (GDPR Art. 6) | Retention period |
|---|---|---|
| Respond to your contact or demo requests | Legitimate interest (Art. 6.1.f) | 3 years from the last contact |
| Sending the newsletter and marketing communications | Consent (Art. 6.1.a) | Until unsubscription + 3 years |
| Audience measurement (Google Analytics) | Consent (Art. 6.1.a) | 13 months maximum |
| Improvement and optimization of services | Legitimate interest (Art. 6.1.f) | 25 months |
| Compliance with legal and tax obligations | Legal obligation (Art. 6.1.c) | According to the applicable legal periods |
| Handling rights-exercise requests | Legitimate interest (Art. 6.1.f) | 3 years from the request |
5.Who are the recipients of your data?
Your data is processed by the following entities:
Internal staff
- Sales team (handling demo requests)
- Customer support team
- Product team (continuous improvement)
- Compliance team and DPO
Processors
- Google Analytics: for audience measurement and user behavior analysis
- Google Cloud Platform (GCP): for secure hosting in France and Belgium (European Union)
- Brevo (formerly Sendinblue): for sending newsletters and transactional emails (sign-up confirmation). Brevo is a French company whose servers are located in the European Union. Data transmitted: email address, first name (if provided), department and role (if provided), sign-up source. Brevo privacy policy
Public authorities
- Upon legal request or court order
- To comply with legal obligations
6.Is your data transferred outside the European Union?
Most of your data is processed within the European Union. However:
Hosting
- Our host Google Cloud Platform hosts your data in France and Belgium (EU)
- Your data therefore remains on European territory
- No transfer outside the EU for hosting
Google Analytics
- Google Analytics may transfer certain data to the United States
- These transfers are governed by the standard contractual clauses (SCC) of the European Commission
- Google LLC accepts the SCCs and provides equivalent security guarantees
You can request a copy of the safeguards and transfer mechanisms by contacting our DPO at privacy@pactolane.com.
7.What are your rights over your data?
The GDPR grants you the following rights. You can exercise one or more of these rights by writing to us at privacy@pactolane.com :
Right to information
Right to be informed about how your data is processed. We provide this information through this policy.
Right of access
Right to obtain a full copy of the personal data we process about you, within 30 days.
Right to rectification
Right to correct or complete your personal data if it is inaccurate or incomplete.
Right to erasure (“right to be forgotten”)
Under certain conditions, the right to request the deletion of your data (e.g. if it is no longer necessary).
Right to restriction of processing
Right to request that processing of your data be paused pending clarification.
Right to data portability
Right to receive your data in a structured, machine-readable format, and to transmit it to a third party.
Right to object
Right to object to the processing of your data on grounds relating to your particular situation.
Right to withdraw consent
If you have consented to processing, you can withdraw your consent at any time, without retroactive effect.
Right to set post-mortem directives
You can indicate your wishes regarding the processing of your data after your death.
Right to lodge a complaint with the supervisory authority
You can lodge a complaint with the French Data Protection Authority (CNIL) if you believe Pactolane is violating your rights.
9.Contact point to exercise your rights
To exercise your rights:
Response time: We will respond within a maximum of 30 days. In the event of no response or an unsatisfactory response, you can contact the CNIL.
10.Changes to this policy
Last updated: 6 October 2026
We reserve the right to modify this privacy policy at any time. Changes will be published on this page with the update date. We will inform you by email of any significant change. Your continued use of the Site after the changes are published implies your acceptance of the new policy.