Privacy policy

Last updated: 3 October 2026.

1. Who processes your data

The data controller is NextFabrique, trading name of Benjamin Roland Maxant, sole trader (micro-enterprise), 790 312 003 R.C.S. Manosque, 3 rue du Gypse, 04000 Digne-les-Bains, France. For any question about your data: contact@fairwinds.network. No data protection officer has been appointed: the business meets none of the criteria that would make such an appointment mandatory.

2. What the site collects, why, and for how long

FairWinds collects only what it needs to work. No data is sold, rented or passed to a third party for advertising purposes.

• Request for an introduction: name, email, phone, vessel name and characteristics, port, description of the need. Purpose: sending the request to the relevant professionals and following it up. Legal basis: steps taken at your request prior to entering into a contract (article 6.1.b GDPR). Retention: three years from the last exchange relating to the request.
• Professional account: email, password (stored only as a cryptographic hash, never in clear text), last login date, company listing. Purpose: managing access to the professional area. Legal basis: performance of the contract. Retention: for the life of the account, then twelve months after the last login.
• Payment and invoicing (professionals and advertisers only): company name, billing email, Stripe customer ID, history of subscriptions, unlocked Leads and invoices. Card details are entered and processed solely by Stripe: FairWinds never has access to them. Purpose: collecting payment for paid services and keeping the accounts. Legal basis: performance of the contract and legal obligation. Retention: ten years for accounting records (article L123-22 of the French Commercial Code), the life of the account for the rest.
• Newsletter and publication alerts: email address, language and followed topics (shows, guides, news, new professionals, experiences, ports). Purpose: letting you know when content is published, through a weekly digest and, for major items, an immediate alert. Links in these emails go through a redirect on our own site that records the click (subscriber address, content clicked, date) so we know which content is of interest. No data is shared with a third party for this. The emails themselves are delivered by Resend. Legal basis: your consent, collected through a two-step confirmation (an email asks you to validate your address). Retention: until you unsubscribe, possible in one click from every message, then deletion or anonymisation.
• Itinerary planner: the plan you build, tied to a random code. No identity data is attached to it. Legal basis: legitimate interest in providing the tool. Retention: twelve months, then automatic deletion.
• Emails sent by the site (acknowledgement of a request, notification to a professional, tracking link): recipient address and message content. Legal basis: performance of the service requested. Retention: the time needed for delivery, then as per the technical logs below.
• Audience measurement with Umami, free and open-source software hosted by NextFabrique in the European Union: pages viewed, the page or site the visit came from, campaign parameters in the link (UTM), country, device type, browser and language. No IP address is kept, no cookie or identifier is written to your device, and nothing is passed to a third party. Purpose: understanding the site’s audience and improving its content. Legal basis: legitimate interest in measuring the audience of one’s own site, with statistical data only; this measurement is exempt from consent under the conditions set by the CNIL and needs no banner. Retention: 13 months, then the raw data is deleted. Objection: nothing is measured if your browser sends the Do Not Track signal, or at any time through the contact page.
• Technical logs kept by the host (IP address, date and time, page requested), needed to keep the service secure. Legal basis: legitimate interest. Retention: twelve months at most.

The site uses no advertising pixel and no embedded social network. It carries out no automated decision-making and no profiling.

3. Who receives this data

A request posted on the site is sent to the professionals matching your criteria, as an anonymised extract: your name and your vessel’s name stay hidden until a professional has unlocked your request. A professional who has not unlocked it has no way of contacting you. This rule is set out in article 6 of the terms of use.

Unlocking is paid for by the professional. From that point on, it holds your contact details and becomes, in turn, a controller of that data for its own purposes: FairWinds no longer processes it on its behalf. Article 3 of the terms of sale forbids it from using that data for anything other than your request, from passing it on and from adding it to a prospecting file, and requires it to erase the data if no relationship begins. You may ask at any time for your request to be withdrawn, at contact@fairwinds.network, after which it is no longer offered. If a professional has already unlocked it, your rights over the data it holds are exercised directly with that professional, whose identity we will give you on request.

The technical providers processing data on behalf of FairWinds are:

• the database host (Supabase), whose servers are located in Francfort, Allemagne (eu-central-1);
• the website host (Vercel Inc.), a US company whose transfers outside the European Union are covered by the European Commission’s standard contractual clauses;
• the email delivery service (Resend), whose sending infrastructure in use is located in Irlande (eu-west-1);
• the payment provider (Stripe Payments Europe, Ireland), only for professionals and advertisers who buy a service. Stripe processes payment data on behalf of FairWinds and, for its own obligations (fraud prevention, banking obligations), as a controller; any transfers outside the European Union are covered by the European Commission’s standard contractual clauses.

Data may also be disclosed to a judicial or administrative authority where the law requires it.

4. Security and discretion

Exchanges with the site are encrypted (HTTPS). Passwords for professional accounts are stored as cryptographic hashes and cannot be read back, including by the publisher. The vessel’s name and the owner’s identity are protected by a rule applied at database level, not by hiding fields on screen. No photograph and no public identification of a vessel or of its owner is published without explicit consent.

5. Cookies

The site sets only cookies strictly necessary for it to work; audience measurement is done without cookies. They are detailed on the cookie policypage.

6. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions about what happens to it after your death. These rights are exercised in writing at contact@fairwinds.network, with a reply within one month. Where processing relies on your consent (newsletter), you may withdraw it at any time, without affecting messages already sent.

If the answer does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.

7. Changes to this policy

This policy is updated whenever a change to the site changes what is collected. The date at the top of the page indicates the current version. Account holders are told of any substantial change by email or by a notification on the Platform.