Privacy policy

1. Data controller

The data controller is: SAS JCLK Packaging, with its registered office located at 154 Le petit Chemin, 01600 Reyrieux, France.

For any question regarding the processing of your data, you can contact:

• By email: contact@jclkpackaging.com
• By phone: +33 6 08 21 70 00
• By mail: 154 Le petit Chemin, 01600 Reyrieux, France

2. Data collected

The Site only collects the data strictly necessary to process your contact request. No user account, no client area: data is only collected when you voluntarily fill in the contact form.

The information collected via the form is:

• Full name (mandatory)
• Email address (mandatory)
• Company (optional)
• Phone number (optional)
• Project type (optional)
• Message content (mandatory)

When the form is submitted, we also log — for security purposes (abuse detection, anti-spam) and for a limited period — the IP address, the browser user-agent and the submission date.

3. Purposes and legal basis

Your personal data is processed to:

• Reply to your contact request — legal basis: your consent (form checkbox) and/or performance of pre-contractual measures taken at your request (Article 6.1.a and 6.1.b GDPR).
• Ensure the security of the Site (anti-spam filtering, rate limiting, technical logs) — legal basis: legitimate interest of the data controller (Article 6.1.f GDPR).

No automated decision-making, no profiling and no commercial prospecting are carried out on the basis of this data.

4. Recipients

Your data is intended for:

• Authorised personnel within JCLK Packaging responsible for handling commercial requests and projects.
• Our technical processors, acting only on instruction and within the strict framework defined below.

Your data is never sold, rented or transferred to third parties for commercial purposes.

5. Processors

For the proper functioning of the Site and the routing of emails, we use the following processors:

• OVH SAS — Site and server infrastructure hosting. Data processed: form content, technical logs. Data location: European Union (France).
• Brevo (formerly Sendinblue), Sendinblue SAS — transactional email service (delivery of contact form). Data processed: name, email, message content. Data location: European Union (France). Site: www.brevo.com.
• CookieFirst, Digital Data Solutions BV (Plantage Middenlaan 42a, 1018 DH Amsterdam, Netherlands) — cookie consent management platform. Data processed: consent status, anonymised IP, browser and device information, visit date and time, page URL, approximate location, universally unique identifier (UUID) of the visitor. Data location: European Union. Site: cookiefirst.com.

Each processor is bound to JCLK Packaging by an agreement compliant with Article 28 of the GDPR ensuring an adequate level of protection of your data.

6. Retention period

• Contact requests: messages received are kept for a maximum of 3 years from the last exchange, for commercial follow-up. Beyond that, they are deleted or anonymised.
• Technical logs (IP addresses, user-agent): maximum retention of 12 months, in line with French CNIL security recommendations.

7. Cookie consent

For the proper functioning of our website, we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website, and to document this properly, we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH Amsterdam, Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.

When you access our website, a connection is established with the CookieFirst server to give us the ability to obtain valid consent from you for the use of certain cookies. CookieFirst then stores a cookie in your browser to enable only the cookies you have consented to and to document this properly. Processed data is stored until the predefined storage period expires or until you request the deletion of the data. Certain mandatory legal retention periods may apply notwithstanding the foregoing.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) (c) of the General Data Protection Regulation (GDPR).

Data processing agreement

We have entered into a data processing agreement with CookieFirst. This is a contract required by data protection law, which guarantees that the data of visitors to our website is only processed in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:

• Your consent status or withdrawal of consent.
• Your anonymised IP address
• Information about your browser
• Information about your device
• The date and time of your visit to our website
• The URL of the web page where you saved or updated your consent preferences
• The approximate location of the user who saved their consent preferences.
• A universally unique identifier (UUID) of the website visitor who clicked on the cookie banner.

List of cookies used

The table below lists all cookies dropped by the site, their purpose and their retention period. This list is automatically updated at each scan performed by CookieFirst.

For the full cookie declaration, visit our dedicated page.

8. Security

JCLK Packaging implements the appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR: HTTPS encryption on the entire Site, access logging, anti-spam mechanisms (honeypot, math captcha, rate limiting), restricted data access.

9. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your personal data at any time:

• Right of access: obtain confirmation that your data is processed and receive a copy.
• Right of rectification: have inaccurate or incomplete data corrected.
• Right to erasure: request the deletion of your data ("right to be forgotten").
• Right to restriction: request a temporary freeze of processing.
• Right to portability: retrieve your data in a structured format.
• Right to object: object to processing for reasons relating to your particular situation.
• Right to withdraw consent at any time, without affecting the lawfulness of processing prior to such withdrawal.

To exercise these rights, write to us at contact@jclkpackaging.com specifying your request. We will respond within a maximum of one month.

10. Complaint to the CNIL

If, after contacting us, you believe that your rights are not respected, you may file a complaint with the French data protection authority (CNIL):

• 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
• Phone: +33 1 53 73 22 22
• Site: www.cnil.fr

11. Updates

This privacy policy may be modified at any time to reflect legal, technical or organisational changes. The last update date is displayed at the top of the page. We encourage you to review it regularly.