Privacy Policy

Touchdown is a business activity of Sarbacane Software. It offers email marketing solution which is completely integrated in Microsoft Dynamics 365. 

Touchdown attaches great importance to the protection of your personal data. 
This charter applies to all services offered by Touchdown (“We”) including the business relationship with partners. For any product or service offered by Touchdown, additional rules may apply. 
This charter can be modified at any time to meet legal, regulatory and technical changes. 

With this document, we wish to inform our customers and prospects (“You”) or partners of the means implemented and the purposes pursued in relation to the collection of personal data when we act as the controller, in accordance with the regulations in force. This applies in particular to when We process the contact details of a person in your company, when You contact us for support or assistance, when You browse our Websites, or when You use our forms to contact us. 
When we process personal data for your account and under your instructions, we act as a subcontractor. This is particularly the case when we are processing your campaign recipient databases. This relationship is governed by this Agreement in compliance with GDPR Article 28.3. 

1. Definitions

For the purpose of this document, the following terms are defined as: 

Personal data 

Personal data, or data of personal nature, is any information that directly or indirectly identifies a natural person, that is treated by Touchdown in its capacity as Processing Manager. 

Data controller 

Refers to Touchdown. The person responsible for the data as the ‘data controller’, is anyone who determines the purposes and means of the processing of the personal data. 

Data processor 

The ‘data processor’ is a subcontractor processing the data on behalf of a data controller and acting under their instructions. The data processor must be in a position to provide sufficient technical and organizational guarantees to ensure the protection of personal data. 


Processing is any transaction (or set of transactions) involving personal data, regardless of the processing method applied. In particular, this includes the collection, recording, organization, preservation, adaptation or modification, extraction, consultation, use, communication by transmission, broadcast or any other form of provision, reconciliation or interconnection, and the locking, erasure or destruction of data. 

2. Measures for the protection of Personal Data

Identity of the Data controller

The Data controller is: 
Sarbacane Software. 3 Avenue Antoine Pinay, Parc d’activités des 4 vents, 59510 HEM, RCS Lille Métropole 509 568 598, represented by SASU KALOMA CAPITAL as Chairman.
The collection and processing of Personal Data by Touchdown (Sarbacane Software) is governed by the French Law “Informatique et Libertés” and by Regulation (EU)2016/679 of the European Parliament and the Council of 27 April 2016 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free circulation of such data. 

We are transparent: 

All Personal Data about you is collected directly from You. 
The legal grounds for the collection of your Personal Data are: 
– The execution of our contractual relations. The non-provision of these would result in impossibility or difficulty of carrying out the Services; 
– Our legitimate interest in ensuring the best possible quality of service; 
– When necessary, your consent is requested. This consent can be withdrawn at any time and easily. 


We are required to process your Personal Data for the following purposes: 
– the creation of your customer account;  – the creation of your customer account;
– the management of your orders and the payment; 
– the management of your subscriptions and services; 
– monitoring of the customer/business relationship such as satisfaction surveys, claims management and technical support; 
– evaluate and improve the quality of our products, services and websites including the development of sales statistics ;
– management of technical direct marketing operations (which includes technical operations such as standardization, enrichment and deduplication); 
– carry out operations relating to direct marketing; 
– the performance of requested operations; Send You newsletters, informative messages and promotional offers by email or SMS, to keep You informed of the news; 
– the organization of contests; 
– the management of the exercise of your rights with regard to the rules on the protection of Personal Data 
– management of unpaid bills and litigation;  
– assert our rights; 
– ensure compliance with agreements and laws and regulations; 
– comply with the legal requirements. 

Type of Personal Data 

The mandatory or optional nature of the Personal Data requested and the possible consequences of a lack of response are specified to you during the collection. 
We may collect your following Personal Data and other data: – your contact information (name, surname, function, address, telephone number, email address); – transaction history, orders, payment IP address; – bank details (within the framework provided by law); – machine identifiers when using our software, connection IP address, the log of activities; – information collected via cookies; – the performance data of our products and the information on how You use them; – your exchanges with Us; – the data collected as part of our affiliate program. 

– We only keep your data for the necessary amount of time: 

We retain your personal data as long as necessary to fulfil the purposes for which it was collected. We also keep your personal data during the retention period required by law, particularly in civil and commercial matters. 
The data necessary for commercial prospection, in particular, first and last name, postal address, electronic address or telephone is kept for a period of three years from the end of the commercial relationship. If You are a prospect, your data is kept for a maximum of 3 years from the collection or last contact with You. 

– Your Personal Data is confidential: 

Your Personal Data, including your databases and campaign content, is not sold, rented to third parties. 
Touchdown commits to maintain the confidentiality of Personal Data, not to disclose it, in whatever form, except (i) for the purposes of the Services and performance of it; (ii) pursuant to a legal or regulatory provision; (iii) to respond to communication requests from judicial and/or administrative authorities; (iv) to enforce our rights or those of our partners and third parties; (iv) with Your prior agreement or at your request. 
We use services provided by specialized companies, including our subcontractors, the list of which can be communicated to you by contacting our DPO. When these companies use servers outside the EU, we have taken care to conclude contracts with them on the protection of Personal data, and in particular, the standard clauses of the European Commission, to regulate the transfer of Personal data.
In all cases, Touchdown ensures that the persons authorized to process your Personal data (personnel, partners, subcontractors, etc.) guarantee to respect the confidentiality of the Personal data or are subject to an appropriate legal obligation to confidentiality.  

Your Personal Data is secure

As part of our obligation of means, We inform you that appropriate organizational and technical measures are taken to preserve the security, the integrity and the confidentiality of your Personal Data and in particular, to prevent that they are distorted, damaged or accessible to unauthorized third parties. 

We respect your rights

In accordance with the GDPR and other rules, You have the following rights: 
– the right of access to your Personal data (article 15 of the GDPR); 
– the right to rectify your Personal Data in the event that it is inaccurate (Article 16 of the GDPR); 
– the right to have your Personal Data erased (Article 17 GDPR) in some cases; 
– the right to a limitation of the Processing of Your Personal data (article 18 of the GDPR) and the right to the portability of your Personal data (article 20 of the GDPR), within the limits fixed by the applicable regulations; 
– the right to withdraw Your consent at any time when the Processing is based on it (Article 13 of the GDPR); 
– the right of opposition to the Processing of your Personal data (article 21 of the GDPR); 
– the right to define the guidelines regarding the fate of your Personal data after your death. In the absence of this, your heirs may exercise their rights to your Personal data. 

These rights can be exercised, in support of a valid identification document, by contacting us at the following email address:

You can contact us at any time – Contact details of our DPO: 
You can contact us at the following email address: 
Or contact our Data Protection Officer directly at 

Badge RGPD

Your privacy matters to us. We use cookies to improve your user experience on our website by analysing statistics on collected data.