Personal Data of Trademark Applicants
Last updated: October 11, 2026
This page concerns trademark applicants (natural or legal persons whose information appears in the service), not subscribers. If you are a subscriber, see the privacy policy.
This page is an information notice within the meaning of Article 14 of Regulation (EU) 2016/679 (GDPR). It constitutes the general information provided under Article 14 § 5b of the GDPR; see § 4 below.
1. Data controller
Noventik SAS (SAS (société par actions simplifiée), RCS Lyon 945 090 736), whose registered office is located at 8 place Antonin Poncet, 69002 Lyon, France, is the data controller for the personal data of the trademark applicants present in the Priorlead service.
Contact for any request relating to this data: [email protected]
No data protection officer (DPO) has been appointed to date (the processing is not subject to mandatory appointment at its current volume). For any question, the data controller can be reached directly at the address above.
2. Source of the data
Registration data: EUIPO register
The data relating to trademark filings comes from the public European trademark register managed by the EUIPO (Trademark Search API), accessed through the EUIPO Trademark Search API. This register is public by nature: the publication of filings is provided for by Regulation (EU) 2017/1001 on the European Union trade mark (Article 45).
Named contact data: company registers and official websites
For Pro/Team subscribers, named contact data is collected from public third-party sources:
- Recherche d’entreprises (recherche-entreprises.api.gouv.fr), France : named directors, registered office
- Companies House, United Kingdom : named officers, service address
- Official company pages (home page, legal notice, impressum, contact page): generic or named contact details published, name and position of the director mentioned
- Brave Search (search engine): only to find the official website of an applicant company, from the name of the brand and the name of the company
All these sources are public or professional. No personal social network is used.
Note: Priorlead is a private, independent service, not affiliated with the EUIPO or with any industrial property office.
3. Categories of data processed
Data from the EUIPO register (all plans)
- Reference number of the trademark filing
- Name or graphic representation of the trademark
- Filing date and publication date
- Nice classes covered and list of designated goods or services
- Name or company name of the applicant. When the applicant is a natural person or is not identified as a company, their name is hidden on display in the feed and in the brand profile (“Individual applicant: name hidden”)
- Name of the representative or agent, where there is one
- Status of the filing
Named contact data (Pro/Team subscribers)
Minimization applied: only the professional data that is strictly necessary.
- Surname and first name of the director (source: company register or official company page)
- Position (manager, president, CEO, etc.; source: company register or official company page)
- Professional email address of the director (source: official company page, when it is published there)
- Main switchboard phone number of the company (never a personal phone number)
For each item of data: explicit source, source URL, collection date and confidence level (from 0 to 1). No data without documented provenance.
No data concerning health, political opinions, religion, sexual orientation or trade union membership is processed. The data processed is exclusively professional in nature.
4. Purposes and legal basis
Trademark monitoring and B2B prospecting
The data allows professionals in the cosmetics sector to identify companies that have recently filed a trademark, as a signal of a commercial launch activity, and to contact them in a professional context.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
The legitimate interest is based on the public nature of the register, its declarative and commercial purpose, and the proportionality of the processing: only professional data is processed, in the context of targeted B2B prospecting, with safeguards (right to object, active suppression list).
Display in the interface and in the results
The data is presented to subscribers in their brand feed, in the detailed brand profiles and in the exports.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
Deletion on request (objection list)
The EUIPO references for which an objection has been exercised are kept in a suppression list to ensure that the corresponding data does not reappear.
Legal basis: Legal obligation (Article 6(1)(c) GDPR): compliance with the right to object
General information under Art. 14 § 5b GDPR
The named contact data (name, position, professional email) was obtained indirectly, from official public registers and from official company pages. In accordance with Article 14 § 5b of the GDPR, Noventik SAS has chosen to provide publicly accessible general information rather than individual information, the provision of which would involve a disproportionate effort in relation to the processing.
This page constitutes that general information. Any data subject may exercise their rights at any time through the form below (§ 9) or by email to [email protected].
5. Retention period
| Category | Retention period |
|---|---|
| EUIPO registration data (trademark, applicant) | Duration of the service, from integration |
| Named contacts (name, position, professional email) | 12 months from collection, then freshness check |
| Company contact details (generic email, phone number) | 12 months, renewable if validity is confirmed |
| EUIPO suppression list (objections exercised) | Indefinite (to prevent reappearance) |
| Named objection list (hidden contacts) | Indefinite (permanent hiding) |
6. Recipients and transfers outside the EU
The applicants’ data is accessible to the professional subscribers of the Priorlead service, within the limits of their subscription plan. It is not sold to third parties or used for purposes other than those described on this page.
Hosting: the data is hosted on the infrastructure of OVH SAS (Roubaix, France).
The service uses the following providers, which may process or receive applicants’ data:
- OVH SAS : hosting of the infrastructure (database, servers)
- Cloudflare : network and access tunnel to the service. Company established in the United States; Cloudflare states that it relies on the standard contractual clauses of the European Commission and on its certification under the EU-U.S. Data Privacy Framework (Cloudflare page, accessed on October 11, 2026)
- Brave Search : search for the official website of an applicant company. The query contains the name of the brand and the name of the applicant company; it is made only for applicants identified as companies. Brave states that its servers are hosted by Amazon Web Services in the United States; the transfer mechanism could not be verified
- Backblaze : storage of encrypted backups. Company established in the United States; Backblaze states that it adheres to the EU-U.S. Data Privacy Framework (Backblaze privacy policy, accessed on October 11, 2026)
Subscribers established outside the European Union may access the service, which constitutes a transfer of data within the meaning of Articles 44 et seq. of the GDPR. This access takes place within the framework of the general terms and conditions of the service.
7. Your rights
As a trademark applicant or director appearing in the service, you have the following rights:
- Right of access (Art. 15 GDPR): know what data concerning you is present in the service.
- Right to rectification (Art. 16 GDPR): have inaccurate data corrected.
- Right to erasure (Art. 17 GDPR): obtain the deletion of your data in the cases provided for by law.
- Right to object (Art. 21 GDPR): object to the processing of your data. Where there are legitimate grounds, your data will be deleted and added to the permanent suppression list. Two forms are available depending on the type of data: EUIPO removal (§ 8) and named objection (§ 9).
- Right to restriction (Art. 18 GDPR): request the suspension of the processing while your request is being examined.
If you are not satisfied with the response, you may refer the matter to the CNIL (French data protection authority) or to the data protection authority of your country of residence.
8. Removal request form (EUIPO data)
Are you the applicant of a trademark that appears in the service and do you wish to exercise your right to object to the data taken from the EUIPO register? Fill in this form. We respond withinno more than one month (Article 12 of the GDPR).
9. Objection to named contacts (directors)
Are you a director whose name, position or professional email address appears in the service as a contact? Use this form to exercise your right to object. We respond withinno more than one month (Article 12 of the GDPR); your named contacts are hidden after your request has been processed.
This form does not require an account. No personal data is displayed in return.
This page constitutes the general information notice under Article 14 § 5b GDPR. The use of general information under Article 14 § 5 b) of the GDPR was the subject of an external legal opinion on October 1, 2026. For any question, contact [email protected].