Privacy policy

1. Who is responsible for your data

The data controller for your personal data is Terres d'Ocre, an SAS with its registered office at 20, rue du Rhin - 75019 Paris (RCS Paris 988 127 676), represented by Manon Felix.

For any questions about your data, you can write to us at rgpd@terresdocre.com.

2. What data we collect

We only collect the data you choose to give us, in three places on the website:

• Newsletter sign-up: your email address and the topics you are interested in;
• Quote requests for companies: your first name, last name, company or organisation, work email address and group size;
• Booking a workshop or buying a gift card: this information is entered in the booking module of our partner Wecandoo, which processes it itself (see section 4).

We also collect, automatically and to a limited extent, technical data needed for the website to work properly and securely (for example, the IP address in the server's connection logs).

We do not collect any sensitive data, and we never ask you for more than is strictly necessary.

3. Why (purposes & legal basis)

You can withdraw your consent at any time (see your rights), without affecting the lawfulness of the processing already carried out.

4. Who has access to it (processors)

Your data is never sold or transferred to third parties for commercial purposes. It is accessible to the Terres d'Ocre team and to our technical service providers, strictly for the purposes described above:

• Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France): sending emails (newsletter and forms) and managing the subscriber list. Data hosted within the European Union.
• Hetzner Online GmbH (Germany, European Union): hosting the website on a dedicated server.
• Google Ireland Limited (Ireland, European Union): Google Workspace business email, which receives your quote requests and messages.
• Cloudflare, Inc. (United States): website delivery and protection. Technical connection data passes through its network; transfers outside the European Union are covered by the safeguards provided for by the GDPR (the European Commission's standard contractual clauses).
• Sentry (Functional Software, Inc.): detecting technical errors on the website, without your form data and without storing IP addresses. Data hosted within the European Union (Germany).

Each of these providers is contractually bound to comply with the GDPR and to guarantee an adequate level of protection for your data.

For workshop bookings and gift cards, our partner Wecandoo (France) acts as a separate data controller: it processes your contact details and your payment under its own privacy policy, available at wecandoo.fr.

5. How long we keep it

Newsletter: we keep your sign-up data for up to 3 years after your last interaction with us (opening an email, clicking a link, making a purchase), or until you withdraw your consent or ask us to delete it.

Quote requests: 3 years from our last exchange. If your request leads to a service, the resulting accounting documents are kept for 10 years, as required by law.

The server's technical logs are kept for 12 months, for security purposes.

6. Transfers outside the European Union

Our hosting and our main service providers are located within the European Union. There are two exceptions, covered by the safeguards provided for by the GDPR (the European Commission's standard contractual clauses): technical connection data passes through Cloudflare's network, and Google Workspace email may process some data outside the European Union. Your newsletter sign-up data remains hosted in the European Union.

7. Your rights

Under the GDPR and the French Data Protection Act (“Informatique et Libertés”), you have the following rights over your data at any time:

• Right of access — to know what data we hold about you;
• Right to rectification — to correct inaccurate information;
• Right to erasure — to ask for your data to be deleted;
• Right to object — to object to processing;
• Right to restriction of processing;
• Right to data portability — to receive your data in a reusable format;
• Right to withdraw your consent at any time, in particular through the unsubscribe link in each of our emails.

To exercise these rights, write to us at rgpd@terresdocre.com. We will reply within one month.

If, after contacting us, you believe that your rights have not been respected, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, the French data protection authority): www.cnil.fr.

8. Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration (encrypted connections, restricted access, GDPR-compliant providers).

9. Cookies

This website uses no advertising or tracking cookies. To measure its audience, we use Plausible Analytics, a cookie-free European tool installed on our own server in Germany: it only produces aggregated, anonymous statistics (pages viewed, where visits come from, type of device), with no individual tracking and no sharing with third parties. In line with the CNIL's recommendations, this audience measurement does not require a consent banner.

The booking module of our partner Wecandoo, which opens when you click “Book”, may set its own cookies: it asks for your consent within the module. The websites we link to (Ulule, Instagram, LinkedIn) apply their own policies.

10. Contact us

For any questions about this policy or about how your data is processed:

• By email: rgpd@terresdocre.com
• By post: 20, rue du Rhin - 75019 Paris