Privacy
Privacy policy
Last updated : 2 novembre 2026
This English translation is provided for convenience only. In case of any discrepancy, the French version shall prevail.
This policy explains what personal data PunkMarket collects, why, with whom it is shared and what your rights are. It applies to the PunkMarket Service.
1. Data controller
The data controller is PunkMarket SAS, a société par actions simplifiée (SAS) with share capital of 9 000 €, registered with the RCS Paris 108 164 724, whose registered office is located at 57 Rue Jean de La Fontaine, 75016 Paris, France.
Contact: contact@punkmarket.trade. Data protection officer: dpo@punkmarket.trade.
2. Data collected
Depending on how you use the Service, we collect:
- Account: name, email address, role and associated company, to create and secure your access.
- Contact form: first name, last name, job title, company, email address and message, to answer your request.
- Logs and usage: technical connection data, security logs and use of the Service.
- Audience measurement: aggregated browsing data via Google Analytics 4, only after consent.
We do not process trading, portfolio or securities-account data on behalf of our clients.
3. Purposes and legal bases
- Provision of the Service and access management — performance of the contract.
- Responding to sales enquiries — legitimate interest.
- Security, abuse prevention and Service improvement — legitimate interest.
- Audience measurement and optional cookies — consent.
- Retention of certain documents and accounting obligations — legal obligation.
4. Recipients
Data is accessible to authorised PunkMarket staff and to our technical processors, within the limits necessary for the Service: Vercel (frontend hosting), Scaleway (backend and database), Brevo (email delivery), Google Analytics (audience measurement, after consent) and an LLM provider (OpenAI) for the analysis of public data.
We do not sell your personal data. Content uploaded by the issuer (documents, newsroom) is not used for the analysis and remains its responsibility.
5. Transfers outside the European Union
Some providers may process data outside the European Union. These transfers are governed by the appropriate safeguards provided for by the GDPR, in particular the European Commission’s standard contractual clauses or the applicable protection frameworks.
6. Retention periods
- Contact requests: 24 months.
- Account: for the duration of the contractual relationship, then deletion or anonymisation.
- Logs: 6 to 12 months.
- Audience measurement data: 13 months.
7. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability. You may withdraw your consent at any time.
To exercise these rights, write to dpo@punkmarket.trade. You may also lodge a complaint with the CNIL.
8. Cookies
A banner lets you manage your consent. Google Analytics 4 is loaded only after your agreement. We do not use advertising cookies.