Privacy policy
Data controller
The controller and full legal contact details must be confirmed before production. The project refers to Platspring Group and a proposed AGRITTO France entity. Data enquiries: contact@agritto.com (verify before publication).
Data collected and purposes
The enquiry form collects name, contact details, company, professional profile, country, postcode, requested roll length and quantity, message, language and optional marketing choice. Data are used to answer enquiries, prepare quotations and follow up on requested business contact.
Legal bases
Quotation enquiries may be processed for pre-contractual steps requested by you (GDPR Article 6(1)(b)) or, as applicable, legitimate interests in answering professional enquiries (Article 6(1)(f)). Optional marketing communications must comply with applicable direct-marketing rules; a separate unchecked opt-in is provided.
Recipients and international transfers
Access is limited to authorised commercial and technical staff and necessary hosting and mail service providers. Any transfers outside the EEA, including proposed coordination in Hong Kong, must be assessed and safeguarded appropriately before they occur. Standard Contractual Clauses may be relevant where required, but no executed agreement has been supplied.
Retention
Unconverted prospect data are intended to be retained for up to three years from the prospect’s last contact, provided a deletion procedure is implemented. Separate statutory retention periods may apply to client accounting records, including ten years for certain accounting records; this does not mean all personal data are retained for ten years.
Your rights
Depending on applicable law, you may request access, rectification, erasure, restriction, objection and portability. Contact: contact@agritto.com (to be verified). You may complain to the French data protection authority, CNIL (www.cnil.fr).
Cookies and security
The enquiry form uses a security session and a CSRF token. Requests are saved to a database and mail notifications are sent. Providers and security controls must be confirmed for the production environment.