Privacy policy

(This is an English translation of the original French legal documents. In case of discrepancy, the French version prevails.)

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (“Loi Informatique et Libertés”) of January 6, 1978, as amended.

Last Updated: April 18, 2026

The company GPG LAMORY CONSULTING, as the Data Controller, attaches particular importance to the protection of your personal data. This policy describes our practices regarding the collection, use, and security of your data when you browse www.gpg-lamory.com.

1. Who Are We?

Data Controller: GPG LAMORY CONSULTING
Address: Imm. Grand Large ● 5 rue des Indes Noires ● 80440 Boves ● France
Contact Email : contact@gpg-lamory.com

2. What Data Do We Collect and Why?

We apply the principle of data minimization: we collect only data that is strictly necessary.

A. Contact Form

Data Collected: Last name, first name, email address, and message content.
Purpose: To respond to your inquiries and manage pre-contractual measures taken at your request.
Legal Basis: Performance of measures taken at your request.
Retention Period: Duration of the relationship plus 3 years for intermediate archiving.

B. Security and Technical Logs

Data Collected: IP address, date, and time of connection.
Purpose: To ensure network security and prevent cyberattacks..
Legal Basis: Legal obligation and legitimate interest.
Retention Period: Maximum of 1 year (in accordance with CNIL recommendations).

C. Cookies and Audience Measurement

Data Collected: Cookie identifiers and browsing data.
Purpose: To measure site audience and improve user experience.
Legal Basis: Your consent via the cookie banner.
Retention Period: Maximum of 13 months.

3. Recipients of Data

Your data is exclusively intended for the internal departments of GPG LAMORY CONSULTING responsible for website management and customer relations.

They may also be transmitted to our technical subprocessors, strictly bound by contracts:

· Infomaniak Network SA (Switzerland): Web hosting and email services.
o Note on transfer: Although located in Switzerland (outside the EU), this country benefits from an adequacy decision by the European Commission (Implementing Decision EU 2023/285), guaranteeing a level of protection equivalent to the GDPR.
Other providers (if applicable): [e.g., Newsletter tool, Security Plugin].

We never sell or rent your data for commercial purposes.

4. Data Security

We implement technical and organizational measures to ensure a level of security appropriate to the risk:

Encryption: Use of HTTPS protocol (SSL/TLS) for all exchanges.
Hosting: Data stored in ISO 27001 certified datacenters, with regular backups.
Access: Restricted to authorized personnel only.

5. Your Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

Right of access and communication of data.
Right to rectification of inaccurate data.
Right to erasure (“right to be forgotten”), subject to legal retention obligations.
Right to restriction of processing.
Right to object (particularly to commercial prospecting).
Right to data portability (retrieval in a readable format).
Right to define guidelines regarding the fate of your data after your death.

To exercise these rights, contact us at contact@gpg-lamory.com attaching a copy of your ID. We will respond within one month.

If you believe your rights are not respected, you may file a complaint with the CNIL (French Data Protection Authority):

Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Website: www.cnil.fr

6. Cookie Management

During your first visit, a banner informs you about cookie deployment and requests your consent.

You may accept or refuse non-essential cookies (audience measurement, marketing) via this banner.
Refusing technical cookies may prevent the proper functioning of the website (e.g., contact form).
You may change your choices at any time via the “Cookie Management” link present in the footer of our website.

7. Modifications

We reserve the right to modify this policy to comply with any legislative or regulatory changes. The update date will be systematically indicated at the top of the page.