**1. Who we are (Data Controller)**
The data controller is:
**Xiangweiads**
CHEZ DOMIDEAL, 11 Avenue Carnot, 25000 Besançon, France
Created on: 07/07/2023
Phone: +33 264 347 814
Email for data protection matters: privacy@xiangweiads.com
**2. What personal data do we collect?**
We collect only the data strictly necessary for our B2B advertising and marketing diagnostic services:
– Identification and contact data (name, first name, job title, company, professional email, phone number)
– Connection and usage data (IP address, browser type, pages visited, date and time)
– Any data you voluntarily provide through contact forms, free diagnostic requests, emails or phone calls
We do **not** collect sensitive data (ethnic origin, health, political opinions, etc.).
**3. Why do we collect this data? (Purposes & legal basis)**
– To respond to your contact requests, quotes or free diagnostics → legal basis: **pre-contractual measures** or **legitimate interest**
– To deliver our B2B advertising, analytics and marketing diagnostic services → **performance of a contract** or **legitimate interest**
– To improve the website and analyze usage (anonymized statistics) → **legitimate interest**
– To comply with legal obligations (invoicing, accounting, fraud prevention) → **legal obligation**
**4. How long do we keep your data?**
– Contact and contractual data: duration of the relationship + 3 years after termination (commercial prescription period)
– Browsing / analytics data: maximum 13 months
– Accounting / invoice data: 10 years (tax obligation)
After these periods, data is deleted or irreversibly anonymized.
**5. Who do we share your data with?**
We do **not** sell or rent your data for marketing purposes.
Your data may be shared with:
– Technical service providers strictly necessary for our operations (web hosting, email service, anonymized analytics tools) – all located in the EU or covered by appropriate safeguards (Standard Contractual Clauses)
– Public authorities when required by law
No transfers outside the EU/EEA take place without adequate guarantees.
**6. Your GDPR rights**
You have the following rights under the GDPR:
– Right of access, rectification, erasure (“right to be forgotten”)
– Right to restriction of processing
– Right to object (in particular to direct marketing)
– Right to data portability
– Right to withdraw consent (where applicable)
To exercise these rights, please contact us at: privacy@xiangweiads.com
We will respond within one month (extendable by two months if complex).
You also have the right to lodge a complaint with the French supervisory authority: CNIL – www.cnil.fr
**7. Cookies and trackers**
Our website uses strictly necessary technical cookies for proper functioning.
Optional analytics cookies (anonymized) may be placed subject to your consent.
Please refer to our cookie banner to manage your preferences or see our separate [Cookie Policy] (to be created if you use cookies).
**8. Data security**
We implement appropriate technical and organizational measures to protect your data (encryption, restricted access, backups, etc.).
**All our processes are carried out exclusively by real humans** – no bots or unsupervised automation are used.
**9. Changes to this policy**
We may update this Privacy Policy from time to time. The version published on the website at the time of your visit is the one that applies. We recommend checking it periodically.
For any questions: privacy@xiangweiads.com
—
You can place this text on a dedicated “Privacy Policy” page on http://xiangweiads.com.
Make sure to link to it from the footer of every page and from any contact / form pages.
Let me know if you want to add or adjust anything (specific tools you use, cookie details, etc.).