Privacy policy
What we do with your information when you contact us, book a visit or simply browse the website.
Privacy
Version of 7 November 2026
Who is responsible for your data
BTPNE, the company operating the Expert Dératisation brand, 8 Bis rue de la Côte d'Or, 94500 Champigny-sur-Marne, France. For any question or to exercise your rights: contact@expertderatisation.com.
This English version is provided to help you read the policy. Only the French text has legal force.
- We never sell or rent out your data.
- No advertising cookies, no social-media pixels.
- No telemarketing using your phone number.
- No automated decision is made about you.
Why we use your data
Each processing operation has a specific purpose, a legal basis provided by the GDPR and a limited retention period.
Answering a contact, call-back or quote request
- Data concerned
- Name, phone, e-mail, postcode or address, pest observed, type of premises, floor area, urgency, company if relevant, message.
- Legal basis
- Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
- Retention
- 3 years after our last exchange if no visit followed.
Organising and carrying out the booked visit
- Data concerned
- Identity, contact details, treatment address and access notes, service, floor area, number of visits, date, slot, reference, treatment report.
- Legal basis
- Performance of the contract (Art. 6(1)(b) GDPR).
- Retention
- For the duration of the relationship, then 5 years (French civil limitation period, Civil Code art. 2224).
Taking payment and keeping accounts
- Data concerned
- Amount, payment status, card brand and last four digits provided by Stripe, invoice.
- Legal basis
- Performance of the contract and statutory accounting obligations (Art. 6(1)(b) and 6(1)(c) GDPR).
- Retention
- 10 years for accounting records (French Commercial Code art. L.123-22).
Writing to you about your request
- Data concerned
- Name, e-mail, message content: acknowledgement, booking confirmation, photo report.
- Legal basis
- Performance of the contract or pre-contractual steps (Art. 6(1)(b) GDPR).
- Retention
- Same period as the request or booking concerned.
Inviting you, where applicable, to share your feedback
- Data concerned
- Name and e-mail, after a visit.
- Legal basis
- Legitimate interest in collecting feedback (Art. 6(1)(f) GDPR), which you may object to whenever you wish.
- Retention
- Until you object, and no longer than customer data is kept.
Blocking automated submissions
- Data concerned
- ALTCHA proof-of-work computed by your browser and an invisible trap field: no identifying data.
- Legal basis
- Legitimate interest in protecting our forms (Art. 6(1)(f) GDPR).
- Retention
- Nothing is kept beyond the check itself.
Measuring website traffic
- Data concerned
- Pages viewed, referral source, device and browser, clicks on our phone number, form submissions, booking steps (including the reference and amount of a paid booking), Google Analytics cookie identifier.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR and art. 82 of the French Data Protection Act).
- Retention
- No more than 14 months in Google Analytics.
Keeping the website technically secure
- Data concerned
- Server logs: IP address, date and time, page requested, browser.
- Legal basis
- Legitimate interest in securing the service (Art. 6(1)(f) GDPR).
- Retention
- No more than 12 months.
Service providers with access
Within our team, only those who need it (office staff, technicians, accounts) see your data. Outside, we rely on:
Stripe Payments Europe, Limited (Ireland)
Online payment. You enter your card directly with Stripe; the booking details travel with the payment so that we can confirm it. For fraud prevention and its own regulatory duties, Stripe acts as an independent controller.
Brevo (Sendinblue SAS, France)
Sending e-mails about your requests and bookings, as a processor.
Google Ireland Limited
Google Analytics 4 audience measurement, only if you have accepted it.
Base Adresse Nationale (French public service)
Suggesting and checking the treatment address. Only the address text is sent, through our server, without your name or contact details.
ALTCHA
Open-source anti-spam software running on our own server: no third-party service is contacted and no cookie is set.
Dim Solution (host)
Hosting the website and keeping technical logs.
Data transferred outside the European Union
Google and Stripe may process some data in the United States. These transfers rely on the European Commission's adequacy decision of 10 July 2023 (Data Privacy Framework) for certified companies and, failing that, on the standard contractual clauses adopted by the Commission.
Security
Every page is served over HTTPS. Access to data is limited to the people who use it. Payments are handled by Stripe, which is PCI DSS certified: no card number is stored on our servers.
Bookings by adults
Online booking and payment are reserved for adults, who alone can enter into the contract.
Changes to this policy
We update this page when a processing operation changes or a provider is added. The date of the current version is shown at the top of the page.
Your rights
Write to contact@expertderatisation.com or to BTPNE, 8 Bis rue de la Côte d'Or, 94500 Champigny-sur-Marne, France. We reply within one month; for a complex request this may be extended by two months, in which case we tell you. Proof of identity is requested only if there is reasonable doubt.
Access
Find out what data we hold and receive a copy.
Rectification
Correct or complete inaccurate information.
Erasure
Have your data deleted, subject to statutory retention duties.
Restriction
Freeze the use of your data while something is checked.
Portability
Receive the data you provided in a common, readable format.
Objection
Refuse processing based on our legitimate interest, such as a feedback request.
Withdrawing consent
Go back on your agreement to audience measurement at any time.
Instructions after death
Say what should happen to your data after your death (art. 85 of the French Data Protection Act).
Contacting the CNIL
If our answer does not satisfy you, you can lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.