Privacy policy

1. Data controller

The data controller is The Sov Company, a French single-shareholder simplified joint-stock company (SASU) with a share capital of 31,500 €, 60 rue François 1er, 75008 Paris. For any question about your data: dpo@thesovcompany.com.

2. Data we collect

• Contact or briefing request: name, business email address, message, and any information you choose to share with us.
• Newsletter signup: name and business email address.
• Browsing: anonymous traffic statistics, collected without tracking cookies or personal identifiers.

We collect no sensitive data and buy no data from third parties.

3. Purposes and legal bases

• Responding to your requests and engaging in a commercial context: pre-contractual measures and legitimate interest.
• Sending the newsletter: consent, revocable at any time.
• Security, audience measurement and site improvement: legitimate interest.

4. Recipients and processors

Your data is accessible only to authorised teams at The Sov Company. It is hosted by our sovereign infrastructure provider, located in France. No data is transferred outside the European Union. We neither sell nor rent your data.

5. Retention periods

• Contact requests: up to 3 years after the last exchange.
• Newsletter subscribers: until consent is withdrawn (unsubscribe link in every email).
• Traffic statistics: aggregated and anonymous, with no identifying data retained.

6. Security

We protect your data with measures aligned with the ISO/IEC 27001 standard, for which The Sov Company is pursuing certification:

• Sovereign hosting in France, on controlled infrastructure.
• Encryption of data in transit (TLS) and at rest (AES-256).
• Access control: multi-factor authentication, role management, least-privilege principle.
• Logging, continuous monitoring and security alerting.
• Encrypted backups and tested restore procedures.

7. Transfers outside the European Union

None. All processing and hosting remains within the European Union, in France.

8. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, object to, restrict and port your data. You can exercise these rights at any time by writing to dpo@thesovcompany.com. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

9. Cookies

This site runs without tracking cookies. Audience measurement is anonymous, with no advertising tracker set and no sharing with third-party ad networks.

10. Changes to this statement

We may update this privacy statement from time to time. The most current version is always available on our website, and the last-updated date appears at the top of the page.