1. Who controls your data?
ATOUTIME, trading online as Atoutime Global, is the controller for the processing described in this notice.
- SIREN: 844 095 158
- VAT: FR91 844 095 158
- Registered office: 1 rue M. Leblanc, Zone Portuaire, 62223 Saint-Laurent-Blangy, France
- Operating establishment: 1260 Allée des Atrébates, 62223 Athies, France
- Privacy contact: info@atoutime-global.fr
- Telephone: +33 7 53 40 58 55
2. Personal data we process
Data you provide
- Business and contact details, including company name, contact name, business email, telephone or WhatsApp number and delivery country.
- Quotation and logistics details, including requested products, brands, pack sizes, quantities, expected volume, destination and warehousing requirements.
- Messages, attachments and correspondence sent by form, email, telephone or live chat.
- Marketing preferences or newsletter details when you choose to subscribe.
Data collected when you use the website
- IP address, device and browser information, referring page, pages viewed, approximate location derived from IP, dates, times and diagnostic or security events.
- Cookie identifiers and interaction or conversion events, subject to applicable consent requirements.
Sources
We normally obtain data directly from you or your organisation. We may also receive professional contact information from a colleague, commercial partner or a publicly available business source. When data is obtained indirectly, we provide the required information within the applicable GDPR period.
3. Why we use data and our legal bases
| Purpose |
Typical data |
Legal basis |
| Assess and respond to a quotation, product, warehousing or delivery enquiry |
Business contact and requirement details |
Steps requested before a contract and our legitimate interest in responding to B2B enquiries |
| Prepare, manage and support a commercial relationship |
Contacts, quotations, orders, delivery and correspondence |
Contract performance, legitimate interests and legal obligations |
| Operate, secure and improve the website |
Technical, diagnostic and security data |
Legitimate interests in reliable and secure services |
| Measure website use, advertising or conversions |
Cookie identifiers, device and interaction data |
Consent where required |
| Send relevant B2B marketing |
Professional contact details and preferences |
Consent or legitimate interests where electronic-marketing rules permit, always with an opt-out |
| Meet accounting, tax, regulatory and dispute obligations |
Transaction records and correspondence |
Legal obligations and legitimate interests in establishing or defending legal claims |
Required and optional information
Fields marked as required on the quotation form are needed to assess and answer the request. Optional fields help us prepare a more accurate response. If required information is not provided, we may be unable to process the enquiry.
You may withdraw consent at any time for future processing. Withdrawal does not affect processing that was lawful before withdrawal.
4. Recipients and international transfers
Access is limited to authorised Atoutime personnel and providers that need the data for the stated purposes. Provider categories may include website hosting and IT support, email and communications, live chat, translation, analytics and advertising, professional advisers, logistics partners involved in an enquiry, and public authorities where disclosure is legally required.
We require service providers acting on our behalf to protect personal data and process it only on documented instructions. Some technology providers may process data outside the European Economic Area. Where this occurs, we rely on an applicable adequacy decision, Standard Contractual Clauses or another lawful safeguard. You may request information about the relevant safeguard from the privacy contact above.
5. How long we retain data
| Record |
Typical retention approach |
| Unsuccessful quotation or prospect enquiry |
Up to three years after the last active business contact, unless you object or an earlier deletion is appropriate |
| Customer, supplier and contract records |
For the commercial relationship and then for applicable limitation, accounting and tax periods; French accounting records are generally retained for ten years |
| Direct-marketing records |
Until opt-out or consent withdrawal; inactive prospect records are reviewed against the three-year period |
| Website security and diagnostic logs |
Normally up to twelve months, unless an incident or legal need justifies longer retention |
| Cookie and consent records |
According to the cookie lifetime and the period needed to record or demonstrate your choice |
We may retain limited information longer where required by law or necessary to establish, exercise or defend legal claims. Data is deleted or anonymised when it is no longer needed.
6. Cookies, analytics, advertising and live chat
The website uses technologies needed for security, language preferences and core operation. It may also use Google measurement or advertising services, live-chat technology and similar tools that process device, browser, IP, page-view or interaction information.
Strictly necessary technologies do not require consent. Analytics, advertising and other non-essential technologies are used only where a valid consent or another lawful exemption applies. Where a cookie control is displayed, you can accept, refuse or change categories through that control. You can also delete or block cookies in your browser, although essential functionality may be affected.
Withdrawing or refusing consent must be as easy as giving it. If you cannot access the website cookie control, contact info@atoutime-global.fr.
7. Your data-protection rights
Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction, portability or a copy of your personal data. You may object to processing based on legitimate interests and may object to direct marketing at any time. You may also withdraw consent for future processing.
Send a request to info@atoutime-global.fr. Please describe the request and the business contact details concerned. We may request proportionate information to verify identity. We normally respond within one month, subject to the extensions permitted by law.
You also have the right to complain to the French supervisory authority, the Commission nationale de l’informatique et des libertés (CNIL), or another competent supervisory authority.
8. Security, automated decisions and policy changes
We apply technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet service can guarantee absolute security.
The website does not make solely automated decisions that produce legal or similarly significant effects for individuals. If that changes, this notice will explain the logic, significance and expected consequences where required.
We review this notice when processing, providers or legal requirements change. Material changes will be identified by a revised date and, where appropriate, an additional notice.
For related commercial information, see our Shipping & Export Delivery policy, warehousing services or request a B2B quotation.