GDPR policy

The data controller is PunkMarket SAS, société par actions simplifiée (SAS), whose registered office is located at 57 Rue Jean de La Fontaine, 75016 Paris, France. For any question about your data, contact our data protection officer at dpo@punkmarket.trade.

Under the GDPR, you have the following rights:

• right of access, rectification and erasure;
• right to restriction and objection;
• right to portability;
• right to withdraw your consent at any time;
• right to give instructions regarding the fate of your data after your death.

To exercise these rights, write to dpo@punkmarket.trade. You may also lodge a complaint with the CNIL.

PunkMarket relies on technical processors: Vercel (frontend hosting), Scaleway (backend and database), Brevo (email), Google Analytics (audience measurement after consent) and an LLM provider (OpenAI) for the analysis of public data. These providers are bound by appropriate contractual commitments.

We collect only the data necessary for the Service: account, contact, logs and usage. Retention periods are limited to the purposes described in the privacy policy: 24 months for contact requests, the duration of the contractual relationship for the account, 6 to 12 months for logs and 13 months for audience measurement.

Access is limited to authorised persons. We apply appropriate technical and organisational measures: role controls, access logging, encryption in transit, backups and monitoring. No sensitive data is requested within the Service.

In the event of a personal data breach likely to result in a risk to rights and freedoms, PunkMarket notifies the CNIL within 72 hours and informs the data subjects where required by law.