Free tools

GDPR notices for your B2B outreach emails

Fill in your identity and where the addresses come from: the texts update and copy in one click.

This is not legal advice. These texts are a starting template based on the principles published by the CNIL, the French data protection authority. Have them reviewed by a lawyer or your data protection officer before use, especially if you process sensitive data or individuals.

Short notice, for the footer of the first email

You are receiving this message because your business contact details come from your company's website, where your business contact details are published. [Nom de l'entreprise] processes them to contact you about [purpose], based on its legitimate interest. You can object at any time by replying "STOP" or writing to [adresse de contact]. Details below.

Full notice (Article 14 GDPR)

Information on the processing of your personal data

Controller: [Nom de l'entreprise], [adresse postale]. Contact for data protection requests: [adresse de contact].
Purpose: sending you business prospecting messages about [purpose].
Legal basis: legitimate interest of the controller (Article 6(1)(f) GDPR) in developing its business activity.
Data concerned: name, job title, company, professional email address.
Source: your company's website, where your business contact details are published.
Retention: 3 years from collection or from the last contact coming from you, whichever is later, or until you object (if you do, we keep only your address on a suppression list so that we do not contact you again).
Recipients: our staff and the technical providers acting on our behalf (email sending, customer management).
Transfers outside the European Union: [none / describe the transfer and its safeguards, for example if a provider is based outside the EU].
Your rights: you may access, rectify or erase your data, restrict its processing, and object to it at any time, free of charge and without giving a reason (this right is absolute for prospecting), by writing to [adresse de contact]. If you object, we will no longer contact you.
You may also lodge a complaint with your data protection authority (in France, the CNIL, cnil.fr).

Opt-out sentence

If you do not wish to receive further messages from us, reply "STOP" or write to [adresse de contact], and we will stop contacting you (we keep only your address on a suppression list for that purpose).

This generation happens in your browser: nothing is sent or stored. The texts assume a message related to the recipient's role, sent to a business address, with an easy way to object. Complete them if your processing is broader.

When to use this generator

Before the first send of an email outreach campaign to professionals. In France, B2B prospecting can be done without prior consent, provided you inform the person, target messages related to their role and give them an easy way to object.

When you do not collect the addresses from the person themselves (public profile, purchased database), Article 14 of the GDPR requires telling them the source of the data, at the latest at first contact, and within one month of collection. That first message must also clearly remind the person of their right to object.

How to use the texts produced

The short notice goes under the signature of the first email and points to the full notice, published on a page of your site or attached. The opt-out sentence is repeated in every message of the sequence.

Square brackets mark an empty field: complete it before copying. The retention period offered, three years from collection or from the last contact coming from the person, matches the CNIL's usual benchmark for prospecting non-customers. A click or a reply counts as contact, simply opening an email does not. After that period, delete the data or ask the person again whether they want to keep being contacted; without an explicit positive answer, delete it.

Frequently asked questions

Is recipient consent needed in B2B?

In France, not for a message related to the recipient's role, sent to their business address, provided you inform them and respect their objection. Consent is still required for individuals. If in doubt, ask a lawyer.

What if someone objects or asks where their data came from?

Stop contacting them immediately, remove them from your prospecting lists and keep only a minimal record of the objection (a suppression list) so you do not contact them again, used for that purpose only and kept at least three years from the objection. Answer any access request within one month.

Must I name the provider of my contact database?

Yes: the source of the data is part of the information to give when it does not come from the person. Name the provider (or the category of source) and keep proof of provenance.

Do these texts apply to individuals or liberal professions?

No. The rules differ for individuals and, depending on the case, for sole traders and liberal professions. This generator targets B2B prospecting to business addresses.

These tools are free and need no account. To send your sequences from your own mailboxes, FluenzR offers a free account with 14 days of Pro included. Create a free account

The other free tools