Privacy Policy

1. What this policy covers

This text covers the Tourante marketing site only. The operational data of firms using the Tourante application under licence is subject to a separate agreement and data processing regime.

2. What we collect

When you visit the site, your IP address and browser details are kept in the session record, and your IP address is also processed for the rate limit on form submissions; the two strictly necessary cookies described below are set as well. When you complete the demo request form, we also receive your company name, country and market, the contact person's name, your email address, your phone if given, your number of users, the modules you are interested in and the message you write; the IP address the request came from and the time of submission are recorded to prevent abuse. No other personal data is collected.

3. Cookies

This site uses no advertising or tracking cookies. On every page visit, two strictly necessary cookies are set to secure form submissions: «tourante-session» (the session cookie) and «XSRF-TOKEN» (the form security key). Both expire 120 minutes after your last visit. These cookies are not used for advertising or tracking and are strictly necessary for the site to work; the session cookie carries a random key that matches your session record on the server (IP address and browser details) to this browser. For this reason the site has no cookie consent banner.

4. Who we share it with

The information in your demo request is used to run the sales process; it is never sold or passed on as a marketing list. We use the following service providers for this, and your data is therefore processed abroad: Hetzner Online GmbH (the servers that record requests), Cloudflare, Inc. (domain and network services; requests pass through Cloudflare's network), Resend, Inc. (email sending; a US-based company sending from its EU region in Ireland) and Google LLC (Gmail; the mailbox where our team receives the notification for each new request). Where the law requires it, it may be shared with authorised public bodies.

5. How long we keep it

Your request is recorded first in this site's database and then in the system where we manage requests. The site's copy is deleted 30 days after it reaches our request system; a copy that has not reached it yet stays on the site until it does. In our request system, a rejected request is anonymised 90 days after the decision and an open request 180 days after it arrived: your name, email address, phone, IP address and message are deleted, while the company details and the outcome remain. An approved request is anonymised in the same way 90 days after the firm's Tourante agreement has ended and its installation has been separated. The session record expires 120 minutes after your last visit and is deleted at a later clean-up. You may ask for deletion at any time. The notification email our team receives for a new request carries your company name, your name and your email address; it stays in our team's mailbox on Google (Gmail) and is not covered by the anonymisation above.

6. Security

The site is served over an encrypted connection (HTTPS), form submissions are protected by rate limiting, and access to records is restricted to authorised personnel.

7. Contact

You can write to us with any questions about this policy: [EMAIL]