( Legal · updated
Your data, kept to what a study needs.
How Breakwater collects, uses and looks after personal data when you visit this website or send us a site study request.
Example text for the Breakwater template, written for a fictional company (Breakwater, Nantes, France). This is an example to be reviewed by a lawyer: adapt it to your company, your tools and your country before you publish.
1. Who is responsible
This website is run by Breakwater, a climate adaptation company based in Nantes, France. Under the General Data Protection Regulation (GDPR) and French data protection law, Breakwater is the controller of the personal data described on this page.
For any question about your data, write to privacy@breakwater.example.
2. What we collect
Site study requests: when you use the form on our contact page, we receive your name, work email, organisation, the type of organisation you represent, the site type, its length or area, your deadline and your message.
Browsing: our hosting provider records technical data needed to serve the pages, such as your IP address, browser type and the pages requested. With your consent, we also collect anonymous statistics on how the site is used (see our Cookie Policy).
We do not ask for sensitive data, and we ask you not to include any in your messages.
3. Why we use it
To answer your site study request, prepare a first hindcast and send you a study proposal, scope and price.
To keep the website secure and working, and, with your consent, to understand which pages are read so we can improve them.
We do not sell your data, and we do not use it for automated decisions about you.
4. Legal basis
Site study requests are handled on the basis of steps taken at your request before a possible contract, and of our legitimate interest in answering public and private buyers.
Analytics relies on your consent, which you can withdraw at any time.
Technical logs rely on our legitimate interest in keeping the website secure.
5. How long we keep it
Site study requests that do not lead to a contract are kept for up to three years after our last exchange, then deleted. If a contract follows, the related data is kept for as long as the law requires for public and commercial records.
Analytics data is kept in aggregated form only.
6. Who we share it with
Your data is seen only by the Breakwater team members who need it to answer you.
We use service providers to host this website and deliver the form. They process data on our instructions, under a data processing agreement, and may not use it for their own purposes.
We share data with public authorities only when the law requires it.
7. Transfers outside the European Union
Some of our service providers may process data outside the European Economic Area. When they do, the transfer is covered by an adequacy decision of the European Commission or by the Commission’s standard contractual clauses.
8. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You can withdraw your consent at any time, without affecting what was done before.
Write to privacy@breakwater.example. We answer within one month. If you are not satisfied with our answer, you can complain to the CNIL, the French data protection authority, or to the authority of the country where you live.
9. Security
The website is served over an encrypted connection, access to form submissions is limited to named team members, and we review our service providers before we use them. No system is perfectly secure, and we will tell you without undue delay if a breach puts your data at risk.
10. Changes to this policy
We may update this policy when our tools or the law change. The date at the top of the page shows the latest version. If a change affects how we use data you already gave us, we will tell you before it applies.
Questions about this page?
