Data controller
The data controller is Liam Domenech, entrepreneur individuel (EI), trading as “Coal Marketing”, based in Restinclières (34160), France. Full contact details are in the legal notice.
For any question about your data: contact@coal.marketing. We have not appointed a data protection officer (DPO).
At a glance
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, email, project type, message; company, phone and budget if you provide them | Answer your request, prepare a quote | Pre-contractual steps (GDPR art. 6.1.b) and legitimate interest (GDPR art. 6.1.f) | Up to 3 years after your last contact; backup copy: up to 12 months |
| Audience measurement (Google Analytics 4) | Pages viewed, events, device and browser, approximate location | Understand how the site is used, to improve it | Your consent (GDPR art. 6.1.a) | Data: 14 months; cookies: up to 13 months |
| Necessary cookies | Your cookie choice, your language | Remember your choices | Exempt from consent (strictly necessary) | 6 months (choice), 12 months (language) |
| Server logs | IP address, date and time, requested URL, browser, response code | Security and troubleshooting | Legitimate interest (GDPR art. 6.1.f) | A few weeks |
Contact form
When you write to us through the contact page, we receive your name, email address, project type and message, plus your company, phone number and budget range if you provide them. Name, email, project type and message are needed to answer you; the other fields are optional.
- Purpose: to answer your request and, where relevant, prepare a quote.
- Legal basis: steps taken at your request before entering into a contract (GDPR art. 6.1.b) and our legitimate interest in answering business enquiries (art. 6.1.f).
- How it works: the form is handled on our own server, hosted by OVH in France. Your message is then emailed to us through OVHcloud’s mail service, to our inbox hosted by Google (Gmail).
- Retention: a backup copy is kept on our server for up to 12 months, in case an email fails to arrive, then deleted. Our exchanges are kept for up to 3 years after your last contact, as recommended by the CNIL. If a contract is signed, the data needed to perform it is kept for the duration of the relationship, then for the periods required by law (accounting, tax).
- Anti-spam: a hidden field traps bots and the number of submissions per IP address is limited. For this check, your IP address is only held in memory, never stored; it does, however, appear in the server logs (see below).
Live chat
If you use the chat window on the site, your messages and the contact details you choose to share (first name, email or phone) are processed to answer you.
- Purpose: to answer your questions and, if you wish, put you in touch with us.
- Legal basis: our legitimate interest in answering people who contact us (GDPR art. 6.1.f) and pre-contractual steps taken at your request (art. 6.1.b).
- How it works: a first reply may be drafted automatically by an artificial intelligence (xAI, USA, acting as a processor); the conversation is forwarded to Coal Marketing via Telegram so a person can take over. Please don't share sensitive information in the chat.
- Retention: conversations are kept on our server for 12 months at most, then deleted.
- Limits: messages per conversation and per day are capped to prevent abuse; your IP address is only used in memory for this check.
Audience measurement (Google Analytics 4)
We use Google Analytics 4, on an account owned by Coal Marketing, to see which pages are viewed and how the site is used. Until you accept audience measurement, the tag runs in cookieless mode (Google’s “Consent Mode v2”): no cookie is set or read on your device, and only anonymous, aggregated signals (page viewed, device type, country) are sent. If you accept, Google Analytics cookies are set for more accurate statistics.
- Data: pages viewed, events such as “contact form sent”, device and browser type, approximate location. Google Analytics 4 does not log or store IP addresses.
- Legal basis: your consent (GDPR art. 6.1.a), which you can withdraw at any time.
- Retention: up to 13 months for the cookies; 14 months for the event data kept in Google Analytics.
- Settings: Google signals and advertising features are turned off; no advertising cookies are set.
- Provider: Google Ireland Limited, acting as our processor. Data may be transferred to Google LLC, in the United States (see “Transfers outside the European Union”).
To learn more, see Google’s privacy policy.
Necessary cookies
Two cookies, exempt from consent, remember your choices: coal_consent (your cookie choice, 6 months) and coal_locale (the language you picked, 12 months). Full details are in the cookie policy.
Server logs
Like any web server, ours (nginx, at OVH) records for each request the IP address, date and time, requested URL, browser used (user agent) and response code.
- Purpose: site security and troubleshooting.
- Legal basis: our legitimate interest in protecting the site and keeping it running (GDPR art. 6.1.f).
- Retention: a few weeks, then automatically deleted as the logs rotate.
Recipients and processors
Your data is processed by Coal Marketing and by the following technical providers, acting on our behalf:
- OVH SAS (France): hosting of the site, the form and the logs; sending of the form’s emails.
- Google: hosting of our mailbox (Gmail), which receives the form’s messages.
- Google Ireland Limited: Google Analytics audience measurement, only if you accept it.
We do not sell any data. The site carries no advertising pixels (Meta, TikTok…), and we do no profiling and no automated decision-making.
Transfers outside the European Union
The site is hosted in France. Google services (Google Analytics, if you accept it, and Gmail) may involve transferring data to Google LLC, in the United States. This transfer is covered by the EU–US Data Privacy Framework, which benefits from an adequacy decision of the European Commission (10 July 2023).
Your rights
Under the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your data:
- Access: find out what data we hold about you and get a copy.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: have your data deleted.
- Restriction: have the use of your data temporarily suspended.
- Objection: object to processing based on our legitimate interest.
- Portability: receive the data you gave us in a structured, machine-readable format.
- Withdrawing consent: withdraw your consent to audience measurement at any time, with the “Manage cookies” link at the bottom of every page or from the cookie policy.
- Instructions after death: set out what happens to your data after your death (directives post-mortem).
To exercise a right, email contact@coal.marketing. We reply within one month. If we have reasonable doubts about your identity, we may ask you for additional information.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
Children
This site is not intended for children under 15.
Updates
We may update this policy as the site or the regulations change. The date of the latest update is shown on this page.