Privacy policy

Last updated: August 2026

COLMAT takes the protection of personal data seriously. This policy explains which data we collect via colmat.fr, why, how long we keep it, and which rights you can exercise.

1. Data controller

COLMAT, a SASU registered in Strasbourg (France), represented by its President Housseinou BA, is the data controller. Contact: hba@colmat.fr.

2. Data collected

We only collect the data you voluntarily submit through the contact form:

• Name — to identify you and address you personally
• Work email address — to get back to you
• Message content — to understand your technical need

No special category data within the meaning of Article 9 GDPR is collected. No profiling or automated decision-making is carried out.

3. Purpose and legal basis

This data is processed for the sole purpose of responding to your enquiry and, where relevant, entering into a commercial or technical discussion.

The legal basis is your consent (Article 6(1)(a) GDPR), given via the form checkbox, and thereafter, if a relationship begins, COLMAT’s legitimate interest in following up a business contact (Article 6(1)(f)).

4. Recipients and processors

Your data is never sold, rented or transferred to third parties for commercial purposes. It is processed by authorised staff within COLMAT and by the following technical processors:

• Web3Forms — delivery of form submissions to our mailbox. Data transits through this service without being stored there long term.
• IONOS — website hosting and email service (data hosted within the European Union).
• Google Fonts — fonts are loaded from Google servers, which involves transmitting your IP address to Google LLC. If you wish to avoid this, you can block remote fonts in your browser.

5. Transfers outside the European Union

Font loading may involve a transfer to the United States, governed by the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.

6. Retention periods

• Enquiry with no follow-up: 12 months from the last exchange, then deletion.
• Active business relationship: for the duration of the relationship, then 3 years from the last contact, in line with B2B prospecting practice.
• Accounting and legal obligations: applicable statutory retention periods prevail (10 years for accounting records).

7. Cookies and analytics

This site sets no cookies for tracking, advertising or analytics. No third-party tracker is installed, so no consent banner is required.

8. Security

The site is served exclusively over HTTPS. Access to received messages is restricted to authorised persons and protected by authentication. We apply technical and organisational measures proportionate to the sensitivity of the data processed.

9. Your rights

Under Articles 15 to 22 GDPR, you have the right of access, rectification, erasure, restriction, objection, data portability, and the right to withdraw your consent at any time.

To exercise these rights, write to hba@colmat.fr. We respond within one month at the latest. Proof of identity may be requested in the event of reasonable doubt.

10. Complaints

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.

11. Confidentiality of your technical information

Technical information you share with us during an exchange (process constraints, specifications, test results) is treated as confidential. For any in-depth discussion, we offer to sign a non-disclosure agreement beforehand.

12. Changes

This policy may be updated to reflect changes to the site or to applicable regulations. The date of the latest update appears at the top of this page.