Privacy policy

Data controller

The controller of the data collected on gericos.com is [TO BE COMPLETED: First name LAST NAME], operating under the trade name Gericos, [TO BE COMPLETED: address]. Contact: contact@gericos.com.

Data collected and purposes

Contact form: name, company (optional), email address, phone (optional), service concerned, message, site language, as well as the IP address and date of submission (for security and abuse prevention). This data is used solely to process your quote or information request. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and legitimate interest (security). Retention period: 3 years from the last contact.

Live chat: conversation content, session identifier and any information you choose to share. The chat service (Chatwoot) is hosted by Gericos on its own servers in Europe. Legal basis: your consent, given by opening the conversation. Retention period: 12 months.

Connection logs: IP address, browser type, pages visited and timestamp, kept for a maximum of 12 months for security purposes and in accordance with legal obligations.

Display preferences (language, light or dark theme): stored only in your browser, with no tracking.

Anti-spam protection

The contact form is protected by Cloudflare Turnstile, which analyses technical data (IP address, browser characteristics) to tell human visitors from bots, without showing a visual challenge in most cases. This processing is carried out by Cloudflare, Inc. under its GDPR compliance commitments. Learn more: Cloudflare privacy policy.

Recipients and transfers

Your data is intended exclusively for Gericos. It is never sold, shared or passed on to third parties for commercial purposes. It is hosted on Gericos servers located within the European Union. Only the Cloudflare Turnstile anti-spam service may involve processing outside the European Union, governed by the safeguards provided for by the GDPR.

Cookies

This website uses no advertising or audience-measurement cookies. Only cookies and storage strictly necessary for operation are used: remembering your chosen language, the display theme, the anti-spam verification and, if you use the chat, the conversation identifier. These do not require prior consent.

Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to contact@gericos.com. You may also lodge a complaint with the French supervisory authority, the CNIL.

Security

Gericos implements appropriate technical and organisational measures (encrypted communications, monitoring, daily multi-site backups, access control) to protect your data against loss, alteration or unauthorised access.