Privacy Policy

Last updated: 13/02/2026

1) Data controller

The data controller is PROTOFFROAD (SASU).

Address: Allée B, 33 rue de la République, 69002 Lyon, France
SIRET (registered office): 943 003 137 00016
Trade register: 943 003 137 R.C.S. Lyon
VAT number (EU): FR58943003137
Contact: via the contact form.

2) Data we collect

We collect the information you provide in the contact form: profile type (individual/business), name, company (if provided), location, phone number (if provided), email, request topic and message content.

Our hosting provider may also keep technical logs (e.g., date/time, requested resources, technical request data) for security and proper operation of the website.

3) reCAPTCHA (anti-spam)

The contact form is protected by Google reCAPTCHA to fight spam and abuse. In this context, technical data may be processed by Google (e.g., IP address, browser/device information, interactions and security signals) in accordance with Google’s rules.

Google reCAPTCHA may set cookies/trackers and/or use security signals. See: Google Privacy Policy and Google Terms.

4) External resources (fonts / icons)

Some pages load technical resources from third-party services, including Google Fonts (fonts) and Font Awesome via cdnjs (icons). Loading these resources causes your browser to contact these services and share technical data necessary for display (e.g., IP address, User-Agent).

5) Purposes

• To reply to your request (information, quote, technical discussion).
• To manage pre-sales/customer follow-up.
• To secure the site and prevent abuse (technical logs, reCAPTCHA).

6) Legal basis

• Pre-contractual steps / contract: handling quote requests and exchanges related to services.
• Legitimate interest: replying to inquiries, protecting the website (security, anti-spam).

7) Recipients

Data is processed by PROTOFFROAD. It may transit through strictly necessary technical providers (hosting, email) to operate the site and handle your request.

Technical data required for reCAPTCHA verification is processed by Google.

8) Retention

• Contact requests (non-customer): kept during processing, then deleted/limited archiving (e.g., 12–24 months).
• Customers / projects: for the duration of the relationship, then archived as required (e.g., invoicing/accounting if applicable).
• Hosting logs (IONOS): kept for a maximum of 8 weeks (IP addresses anonymised in log files according to the host).

9) Your rights

You have rights of access, rectification, erasure, objection and restriction. To exercise them, contact us via the contact form.

You may also lodge a complaint with the French DPA (CNIL).

10) Updates

This policy may change. The update date is shown at the top of this page.