Privacy policy
Last updated: 08/10/2026
This policy explains what personal data is processed by SAS SOLANGE in connection with the cnc-machine website, why, for how long, and how to exercise your rights.
Data controller
SAS SOLANGE, 19 avenue de l’Agriculture, 63000 Clermont-Ferrand, France. Contact: contact@solange-agency.com.
Record of processing activities
The table below lists every processing activity. It serves as the record of processing activities within the meaning of Article 30 of the GDPR.
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Quote request | Email address, phone number, description of the requirement, any attachment, city, IP address | Forward the request to the relevant companies and follow it up | Steps taken at the request of the data subject prior to entering into a contract | Request kept for commercial follow-up; IP address erased after 180 days |
| Business account | Email address, password (hash), sign-in history | Allow a company to manage its listing and receive its requests | Performance of the service contract | For the life of the account; deleted immediately on request |
| Company listing | Company name, city, activity, public business information | Build and publish the directory | Legitimate interest: informing a professional audience | For as long as the listing is published; removed on request |
| Listing claim | Business email address, message, verification token | Check that a claimant genuinely represents the company | Steps taken prior to entering into a contract | 365 days after closure |
| Invitation to claim (outreach) | The company's public generic email address | Tell a company it is listed and invite it to complete its listing | Legitimate interest, business-to-business outreach, with one-click unsubscribe | Until unsubscribe or claim |
| Weekly summary | Account email address | Tell free listings how many requests the site received | Legitimate interest, with one-click unsubscribe | Until unsubscribe or account deletion |
| Traffic statistics | No personal data: aggregated daily counters | Measure page traffic and report it back to listed companies | Legitimate interest | Breakdown by source: 730 days; totals: no limit |
| Access security | Email or IP address, attempt counter, reset tokens | Slow down intrusion attempts and allow account recovery | Legitimate interest: security of the service | Attempts: 30 days · tokens: 30 days |
| Technical logs | Execution logs of automated processing | Diagnose incidents | Legitimate interest | 180 days |
These retention periods are not merely stated: they are enforced automatically by a weekly purge task.
How is the data collected?
Directly from you when you fill in a form or create an account. Company listings, by contrast, are built from publicly available business information — the company's own website, directories, registers. In accordance with Article 14 of the GDPR, every listed company is informed by a message inviting it to claim, correct or remove its listing.
Who receives this data?
- Companies receiving a quote request: your email address and the description of your requirement are passed on to them, since that is the very purpose of your request. Only listings with a paid subscription receive the details.
- The host, Hostinger International Limited, which stores the data within the European Union.
- The email delivery provider (Brevo, a French company, data hosted within the European Union), to transmit the messages. This provider measures message opens and clicks on their links, by means of a pixel and a redirect that it inserts itself and that we cannot switch off. We do not use these measurements and draw no profiling of recipients from them. Sensitive emails — password reset, claim confirmation — are sent as plain text and are therefore not measured at all.
No data is sold, rented or transferred for advertising purposes. No transfer outside the European Union takes place.
A word about artificial intelligence
The descriptions and editorial texts on this site are produced with the help of a language model, from public information about the companies. This content is reviewed before publication. No data from the forms — quote requests, messages, accounts — is sent to that model, nor used to train it.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability.
- If you have an account: the "My data" page of your account area lets you download all of your data in a usable file, and delete your account immediately.
- Otherwise: write to contact@solange-agency.com. You will receive a reply within one month.
One important point: deleting an account does not delete the company's listing. The listing remains published as public business information and simply reverts to "unclaimed". Full removal of a listing must be requested separately, at the same address.
You may also lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, 75007 Paris — www.cnil.fr.
Cookies and trackers
The site sets no advertising cookies, no third-party trackers and no external analytics tools. Traffic is measured from the server's technical logs, as aggregated daily counters that identify no one. The only cookie used is a session cookie, strictly necessary for the forms and the account area to work: as such, it requires no prior consent.
Security
Passwords are stored as irreversible hashes, exchanges are encrypted, attachments are kept outside the web-accessible area, and the site applies a restrictive content security policy. Repeated failed sign-in attempts are automatically slowed down.