Data controller

The data controller is SASU LGS (LG Sécurité), Single-shareholder simplified joint-stock company (SASU), whose registered office is at 8 place Thévenin, 71100 Chalon-sur-Saône, France — RCS Chalon-sur-Saône 104 024 609.

Represented by Richard Le Goff, President.

Data we collect

Data you give us

Via the quote request form or the callback form:

your first and last name;
your phone number and your email address;
where applicable, the name of your company or organisation;
details describing your requirement: type of service, date or period, town, expected number of people, deadline, and the free-text content of your message.

Please do not include any sensitive data in the message field (health, opinions, trade union membership…): it is neither expected nor necessary to process your request.

Technical data

When you submit a form, we also record your IP address, your browser and the originating page of the request. This information is used solely to limit automated submissions (bots, spam) and to keep the service secure.

The server hosting this website also keeps technical connection logs, as any web server does.

Purposes and legal bases

Each processing activity relies on a legal basis set out in Article 6 of the GDPR.
Purpose	Legal basis	Article
Responding to your request and preparing a quote	Pre-contractual measures taken at your request	6.1.b
Handling the commercial follow-up of the request	Legitimate interest of the company in processing and following up the enquiries it receives	6.1.f
Protecting the form against automated submissions	Legitimate interest in ensuring the security and availability of the service	6.1.f
Complying with our legal and accounting obligations	Legal obligation, where the request leads to a contractual relationship	6.1.c

We do not use your data for unsolicited marketing unrelated to your original request.

Recipients

Your data is accessible to:

authorised staff at SASU LGS responsible for handling requests and preparing quotes;
our hosting provider, acting as a technical data processor, solely for the storage of data;
where applicable, our email delivery provider, used only to notify us of your request.

Your data is never transferred, rented out or resold. Should a provider located outside the European Union be used for sending notifications, the transfer would be governed by the European Commission's standard contractual clauses.

Retention periods

Maximum periods, counted from the last contact or the end of the contractual relationship.
Situation	Period	Basis
Request with no commercial follow-up	3 years	CNIL recommendation on marketing
Request that led to a contract	Duration of the relationship, then statutory archiving (10 years for accounting records)	French Commercial Code (Code de commerce)
Anti-spam technical data and server logs	12 months maximum	Security of the service

Your rights

In accordance with Regulation (EU) 2016/679 and the French "Data Protection Act" (loi Informatique et Libertés), you have the following rights over your data:

right of access: obtain a copy of the data concerning you;
right to rectification of inaccurate or incomplete data;
right to erasure in the cases provided for by the Regulation;
right to restriction of processing;
right to object to processing based on legitimate interest;
right to the portability of the data you have provided to us;
right to set directives on what happens to your data after your death.

To exercise these rights, write to us by post to: SASU LGS, 8 place Thévenin, 71100 Chalon-sur-Saône. Proof of identity may be requested if there is reasonable doubt. We respond within one month.

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the French data protection authority, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

Cookies

This website does not set any cookies, whether tracking, advertising or audience-measurement cookies. No consent banner is therefore necessary. The only requests made by your browser are to this same domain: fonts, images, stylesheets and scripts are all hosted locally, with no calls to any third-party service.

Security

The website is served exclusively over HTTPS. Requests received are stored on a server with restricted access, outside publicly-accessible directories. Access to the data is limited to those who need it to process your request.

As no system is infallible, we undertake to notify you, as well as the CNIL, under the conditions set out in the GDPR, in the event of a data breach likely to create a risk to your rights and freedoms.

Changes

This policy may change to reflect legal or technical developments. The date it was last updated appears at the top of this page.