card.pm/info

Privacy policy

Last updated: September 2026

This page explains what CARD.PM does with the information collected through its digital business cards and consent forms.

Data controller

CARD.PM is the controller of the data collected for CARD.PM.

Technical provider

The platform is provided by DATAMIX.IO, which processes the data solely on behalf of CARD.PM, under a processing agreement compliant with Article 28 of the GDPR. DATAMIX.IO never reuses it for its own purposes.

Data concerned

• Viewing a card: the page records no data about you, beyond the server’s technical logs.
• Filling in a form: the information you enter (last name, first name, email, phone and other fields displayed).
• Proof of your choice: each box, checked or not, with the text displayed, the date and time, your IP address, your browser and a signed fingerprint that reveals any alteration.
• Follow-up: the calls, messages and notes of the CARD.PM teams who get back in touch with you.
• Following a card: your browser’s subscription address, if you enable notifications.

Why

• To contact you again through the channels you have accepted, box by box. Legal basis: your consent.
• To be able to prove your choice and any withdrawal. Legal basis: the obligation to demonstrate consent (Article 7 of the GDPR).
• To keep track of our exchanges with you. Legal basis: legitimate interest, within the limits of your consent.

Retention periods

• Your consent is valid for the period stated on the form, 12 months at most. After that, it must be requested again.
• The proof is kept for the period stated on the form (36 months by default), so that your choice can be demonstrated.

Recipients

The card holder and the authorized teams of CARD.PM; its technical provider; the tools CARD.PM connects to its account (its customer software, for example), which receive your choice and any changes to it. Nothing is sold.

Withdrawing your consent

At any time, as easily as it was given: via the link in the confirmation email, or by asking the card holder or CARD.PM. The withdrawal is recorded, signed and forwarded to CARD.PM’s tools.

Cookies

No advertising cookies, no third-party audience measurement, no trackers. Only the technical cookies necessary for the service are used.

Fonts: our fonts are served from our own servers. If a font chosen by a brand is not available there, it is loaded from Google Fonts, which then receives your IP address.

Your rights

You may request access to your data, its rectification, erasure, restriction or portability, and object to processing.

No Data Protection Officer has been appointed for this service: the publisher handles requests directly.

For any question about your data or to exercise your rights, write to support@card.pm.

You may also lodge a complaint with the CNIL: cnil.fr.