Personal data protection
Users are informed of the regulations applicable to marketing communications: the Law of 21 June 2014 on confidence in the digital economy, the Data Protection Act of 6 August 2004, and the General Data Protection Regulation (GDPR: No. 2016-679).
Gimar & Co is committed to the protection of personal data and undertakes to ensure the highest level of protection for your personal data, in compliance with applicable law and the General Data Protection Regulation.
Data controller
Personal data collected on this website is recorded in a computerised database by the data controller: Gimar & Co, 27 avenue Pierre 1er de Serbie, 75116 Paris, France. +33 1 53 05 30 00. rgpd[at]gimarandco.com.
As data controller, Gimar & Co undertakes to comply with the applicable legal framework, including establishing the purposes of its data processing, providing prospects and clients with full information on the processing of their personal data (subject to their consent), and maintaining a processing register that accurately reflects reality. Gimar & Co takes all reasonable measures to ensure that personal data is accurate and relevant to the purposes for which it is processed.
Purposes of processing
Personal data collected is used to send email responses to contact form enquiries. Certain data is collected automatically as a result of your actions on the site, for audience measurement purposes (pages viewed, number of site visits, etc.).
Data collected
Personal data collected and processed includes name, title, email address, telephone number, postal address, IP address, and so on. Only the minimum data necessary for the proper functioning of the service is collected. Mandatory and optional fields are indicated at the time of entry.
Retention period
Data is retained for as long as the service is used, then archived for an additional period in line with legal prescription and retention periods, for strictly limited and legally authorised purposes (payment, warranty, disputes, etc.). After this period, data is deleted.
Recipients
Collected data is intended for our internal administrative department and is also transmitted to the following third parties: AAMSET (www.aamset.com) as technical operator of the website; Google Analytics (analytics.google.com) as audience tracking tool.
Location and hosting of collected data
Data is hosted by: AAMSET as website host (data location: France); Google Analytics (data location: worldwide).
Right of access, rectification, objection, and right to erasure
In accordance with applicable European regulations, users have the following rights: right of access (Article 15 GDPR) and rectification (Article 16 GDPR), right to erasure (Article 17 GDPR), right to withdraw consent at any time (Article 13-2c GDPR), right to restriction of processing (Article 18 GDPR), right to object to processing (Article 21 GDPR), right to data portability (Article 20 GDPR), and the right to define what happens to data after death and to designate a recipient.
Upon being informed of a user’s death and in the absence of instructions, Gimar & Co undertakes to destroy the relevant data, unless its retention is required for evidentiary purposes or to fulfil a legal obligation.
To exercise these rights, users may contact Gimar & Co in writing at: 27 avenue Pierre 1er de Serbie, 75116 Paris, France — or by email at rgpd[at]gimarandco.com.
Requests for deletion of personal data will be subject to the legal obligations applicable to Gimar & Co, particularly regarding document retention and archiving. Users may also lodge a complaint with the supervisory authority, in particular the CNIL (https://www.cnil.fr/fr/plaintes).
To protect the confidentiality of your personal data, any request relating to the exercise of your rights must include a certified copy of a valid identity document (identity card or passport). This copy will be returned to you along with the requested information or confirmation that your request has been processed.
Non-disclosure of personal data
Gimar & Co undertakes not to process, host, or transfer data to a country outside the European Union or deemed “inadequate” by the European Commission without first informing the client. Gimar & Co remains free to choose its technical and commercial subcontractors, provided they offer sufficient guarantees with regard to the requirements of the GDPR. Gimar & Co does not collect any sensitive data. In the event of an incident affecting the integrity or confidentiality of user data, Gimar & Co undertakes to notify the user as promptly as possible and to communicate the corrective measures taken.
