Privacy policy

The controller is Artema, SARL, 229 rue Saint-Honoré, 75001 Paris, France, SIRET 932 616 717 00017, VAT FR11932616717. Blonkira is the name of the service.

Privacy requests: contact@blonkira.com. We reply within one month, or we tell you if we need longer.

Blonkira is a platform where a company describes a physical rework job once — relabelling, repacking, sorting, inspection or kitting — and is introduced to a partner with available capacity.

A capacity request includes the operation, the quantity, the location, the deadline, any notes or files you add, and the contact details of the person making the request.

We process:

• first name, last name, company, work email and phone number
• the operation, units, country, stock location, deadline and additional information
• files you attach to the request
• account and session data when you use an account
• billing data when a paid engagement exists
• technical and security logs

Pages load the Schibsted Grotesk typeface from Google Fonts (Google Ireland Limited / Google LLC). Your browser sends a request to Google’s servers, which includes your IP address, so the font files can be delivered. We use this so the site displays in a consistent typeface. We do not use Google Analytics, Google advertising products, or a Google tag on this site.

That request can involve a transfer outside the European Economic Area, to the United States. Google describes its safeguards, including the EU–US Data Privacy Framework and standard contractual clauses, in its own privacy documentation.

We process a capacity request to find available rework capacity and to contact you about it. The legal basis is the steps taken at your request before a contract, and the contract when one is agreed (Article 6(1)(b) GDPR). Security logs are processed on the basis of our legitimate interest in keeping the service secure (Article 6(1)(f) GDPR). Newsletters, marketing messages and optional cookies rely on your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. Billing records are kept to meet a legal obligation (Article 6(1)(c) GDPR).

We retain personal data for the following periods:

• Account data: for the contract, then 3 years after it ends
• Capacity requests and related files: for the time needed to handle the request, then 3 years
• Technical and security logs: 12 months maximum
• Billing data: 10 years, in accordance with legal accounting obligations, including after an account is closed

Your data is never sold to third parties. The organisations listed below are our processors (or, for certain cookies, independent controllers as described).

Data may be shared with our processors only in the following cases:

• Cloudflare, Inc.: DNS and domain protection. Technical processing may involve transfers outside the EEA, framed by appropriate safeguards (in particular standard contractual clauses and/or the Data Privacy Framework where applicable).
• Meta Platforms, Inc. (Meta Pixel): measurement of advertising campaign effectiveness, only if you consent via the cookie banner. Technical identifiers (and, where applicable, sign-up or subscription events) may be transferred to the United States. This transfer is framed by Meta’s EU–US standard contractual clauses and, where applicable, by the EU-US Data Privacy Framework. The Pixel is loaded only after your consent and is not used to analyse session content.
• Resend, Inc.: sending of transactional emails (account verification, password reset, login codes, workspace invitations, billing notices, automations). Resend stores email contents and metadata in the United States. This transfer outside the EEA is framed by the European Commission’s standard contractual clauses (EU–US module) concluded with Resend, and where applicable by the EU-US Data Privacy Framework.
• Stancer: French payment provider. Processing of subscription payments (billing and card data). Stancer states that it hosts its data in France.
• Supabase, Inc.: hosting of the database and authentication, on infrastructure located in Paris (France). User accounts, dashboards, forms, sessions and billing data are stored in France.
• Umami Software, Inc. (Umami Cloud): website audience measurement, only with your consent.
• Vercel Inc.: hosting of the application (website and API). Vercel is a US company; transfers outside the European Economic Area may occur. They are framed by the European Commission’s standard contractual clauses and, where applicable, by the EU-US Data Privacy Framework.

Data may also be disclosed to legal authorities if required by law or in response to a valid court order. Pages also load a typeface from Google, as described above.

You can ask for access, correction, erasure, restriction, or a copy you can take elsewhere, and you can object to processing based on legitimate interest. You can also lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr.

Send the request to contact@blonkira.com.

Measurement cookies are described in the Cookie Policy.

This policy describes the processing in place. When the processing changes, we update this page and, where the law requires it, ask for consent.