This policy describes how Gatebold collects, processes and protects personal data via the gatebold.com website, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act.
Data controller
- Identity: Gatebold
- Address: 50, avenue des Champs-Élysées, 75008 Paris, France
- Contact email:
- Personal data contact: Gatebold -
Data collected and purposes
The gatebold.com website uses a self-hosted audience measurement tool running on Gatebold infrastructure, without cookies and without collecting personal data(see our cookies policy). Only aggregated and anonymous statistics are recorded. No advertising tracker is used, no data is transmitted to any third party, and your browser'sDo Not Track setting is honoured (no measurement is recorded if it is enabled).
Personal data may also be received through the contact form and is strictly necessary to handle your request. The legal basis is Gatebold’s legitimate interest in responding to professional enquiries.
Files submitted to electronic-invoice tools
The free electronic-invoice tools may receive a Factur-X PDF or a UBL or CII XML file. These files can contain personal and commercial data, such as names, contact details, references or amounts. They are used only to produce the technical result requested by the visitor: viewing, extraction, validation or diagnosis.
The file is sent over HTTPS to Gatebold services, processed in memory, then deleted when processing ends, including in the event of an error. Supporting validation services, where needed, run on Gatebold’s internal infrastructure and are not publicly exposed. The file content and its name are not retained, reused or shared with a third party.
Recipients
Data submitted via the contact form is accessible only to Gatebold staff authorized to handle your request. The form is processed by our subprocessor Formspree, which securely transmits messages to Gatebold.
No data is sold, shared with third parties for unrelated commercial prospecting, used for advertising profiling, or resold.
For electronic-invoice tools, recipients are limited to Gatebold internal services needed for temporary file processing. No third-party invoice-analysis service is called.
Retention period
Messages received via the contact form are retained for the time needed to handle the request, then archived or deleted no later than 3 years after the last contact, in line with the French data protection authority (CNIL) recommendations for B2B prospecting.
Files submitted to electronic-invoice tools are not retained: they are deleted as soon as the result is produced or processing fails. No archive or backup of those files is created.
Security
Gatebold implements technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure (HTTPS encryption, restricted access, size and rate limits, secure XML parsing, non-public internal services and backups adapted to the data that is actually retained).
Your rights
Under the GDPR, you have the following rights:
- Access to your data
- Rectification in case of inaccuracy
- Erasure in cases provided for by law
- Restriction of processing
- Objection to processing
- Portability of your data
- To define post-mortem instructions regarding your data
To exercise these rights, write to . We respond within one month.
Complaint to the supervisory authority
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL): https://www.cnil.fr.