Privacy Policy

This Privacy Policy describes how FINERIS (a trade name operated by Eterstain SAS, headquartered at 22 rue Gabriel Péri, 92250 La Garenne-Colombes, France) collects, uses, stores, and protects your personal data when you use the website www.fineris.co and our associated services.

1. Data Collected

We collect the following categories of personal data:

• Identification Data: name, surname, email address, phone number
• Professional Data: company name, company registration number (e.g., SIRET), sector, headcount, location, export objectives, product categories
• Technical and Usage Data: IP address, browser type, operating system, pages visited, time spent, referring URL
• Form Responses: data submitted through online forms such as Typeform questionnaires
• Analytics Data: via tools such as Matomo, Supabase, and potentially Google Analytics

2. Purpose of Processing

Your data is processed for the following purposes:

• To deliver and improve our export intelligence platform and services
• To identify qualified international buyers and export opportunities for your products
• To generate market analysis reports and export strategy recommendations
• To respond to your requests or inquiries
• To contact you about relevant export opportunities, market insights, or service updates
• To fulfill legal obligations, including Know-Your-Customer (KYC) procedures and international trade compliance

3. Legal Basis for Processing

We rely on the following legal bases:

• Performance of a contract or pre-contractual measures (Article 6.1.b GDPR)
• Legal obligation (Article 6.1.c GDPR) for compliance with administrative or financial regulations
• Legitimate interest (Article 6.1.f GDPR) for service improvement and fraud prevention

4. Data Retention

• Client data: retained for the duration of the contractual relationship and up to 5 years thereafter for legal and accounting purposes
• Prospect data: retained for up to 3 years from the last contact

5. Data Sharing and Transfers

Your data may be shared with:

• Hosting providers (e.g., Vercel, Supabase)
• CRM and email marketing tools
• Payment processors and accounting software
• Legal or regulatory authorities when required

No transfer outside the European Economic Area (EEA) occurs unless adequate safeguards (e.g., SCCs) are in place.

6. Your Rights

Under GDPR, you may:

• Access your data
• Request correction or deletion
• Object to processing
• Restrict processing in certain circumstances
• Request data portability
• Withdraw your consent at any time (for consent-based processing)
• File a complaint with the French data protection authority (CNIL)

You can exercise your rights by contacting: contact@fineris.co