Privacy policy
We only collect what we need to provide our service, and we protect it.
This is a working draft pending final legal review by Festilaw. It describes our intended practices and will be finalised before launch.
Who is responsible for your data
Festilaw is the data controller for the personal data collected through this website. For any question about this policy or your data, contact us at laetitia@festilaw.com.
What we collect
- Contact details you provide (name, email, company, website).
- Information needed to set up your EU Responsible Person (company details, and the documents you upload, such as proof of turnover and product technical documentation).
- Payment status (payments are processed by our payment provider; we never see your full card details).
- Technical data strictly necessary to run the site (a session cookie). We do not use advertising or tracking cookies.
Why we collect it and on what basis
We use your data to provide the service you request (performing our contract with you), to reply to your messages, and to meet our legal obligations. We do not sell your data.
Who we share it with
We share data only with the providers strictly needed to deliver the service: our electronic signature provider, our payment provider, and our email provider. They act on our instructions and under their own security and privacy commitments.
How long we keep it
We keep your data only as long as needed to provide the service and to meet our legal and accounting obligations, then we delete or anonymise it. Uploaded documents are stored on a private, access-controlled storage.
Your rights
Under the GDPR you can access, correct, delete, or export your data, and object to or restrict its processing. To exercise these rights, contact us at laetitia@festilaw.com. You may also lodge a complaint with your national data protection authority.