Privacy policy

Data controller

Owner-confirmed: Dbox Digital Services SUARL, a company under Tunisian law, unique identifier 1827009/L, Montplaisir, 1073 Tunis, Tunisia, commercially operates the GBI France initiative and is the controller of incoming enquiries. GBI France is not presented here as an incorporated French company.

Data and purpose

Owner-confirmed purpose: receive, qualify and handle commercial and partnership enquiries. If enabled, the form will collect your profile, country, name, company, business email, type of need, description, language and acknowledgement that you have read this notice. The acknowledgement is not consent to marketing; this form does not enable marketing or analytics. Do not include sensitive or confidential information.

Legal basis selected by Dbox for handling enquiries: for a pre-contractual enquiry, Article 6(1)(b) GDPR is used where the individual requests specific and necessary steps towards a contract to which they themselves would be a party. For other commercial enquiries, particularly where an employee or representative acts for a company but is not party to the proposed contract, Dbox relies on legitimate interests (Article 6(1)(f)) to respond to and qualify the enquiry, limiting processing to necessary data and taking account of the individual’s rights and reasonable expectations. The form is not used for later marketing. The requested acknowledgement confirms that this notice has been read; it is not consent to marketing.

Enquiries that become active commercial relationships are subject to separate retention criteria, which remain to be defined according to the relationship and applicable obligations.

Providers and transfers

The site and form are provided by Netlify. In Phase 1, if the form is enabled, submissions will be recorded in Netlify Forms and accessible to Dbox Digital Services SUARL in its Netlify dashboard. No email notification is configured for this phase, so no response copy is sent to Google Workspace. The public contact address and channel for data requests remains contact@gbifrance.com.

Netlify publishes a subprocessor register and a data processing agreement that provides mechanisms for restricted international transfers subject to the applicable terms. Its documentation states that submissions are stored in its database and that Netlify may use providers, including for infrastructure and spam filtering. The public materials reviewed do not state the storage region for this particular form or how long any backup copies remain after deletion. This notice does not claim an exact location.

Applicable subprocessors and transfer mechanisms are described in Netlify’s terms and its Trust Center. The storage region for this particular form and the retention period for any backup copies after deletion are not stated in the information reviewed. The manual deletion described below concerns submissions visible in Netlify Forms; it does not assert a deletion period for the provider’s backups.

Retention

Owner decision: enquiries that do not lead to commercial follow-up are kept for no more than 90 days from the last exchange. The director of Dbox Digital Services SUARL performs a periodic manual review and deletes Netlify Forms submissions from the Netlify dashboard no later than the 90-day point. Deletion is manual; no automatic expiry is configured. Netlify documentation describes a confirmed submission deletion as permanent in the interface, but the public materials reviewed do not state how long residual backups are retained; this remains to be confirmed. In Phase 1, no email copy is created by a notification. The review records the date, period checked and number of submissions deleted, without copying identifiable data.

Enquiries that become active commercial relationships are subject to separate retention criteria, to be defined according to the relationship and applicable obligations. This notice does not set their retention period.

Cookies and analytics

This site's code does not include analytics or tracking cookies. The host may process technical logs, and the form provider will process submissions once activated; applicable details must be verified and described in the published notice.

Your rights and contact

For questions or to exercise your data rights, contact contact@gbifrance.com. Dbox will assess requests under the data protection rules applicable to the individual and the processing.