Privacy Policy

Data Controller

IMACS SERVICES — 2 rue Pierre Mendès France, 27000 Évreux.

Contact: service-clients@imacs-services.fr

Data Collected

When you complete a contact or pre-assessment form, we collect:

• First and last name, organisation
• Professional email address
• Phone number (required on our contact and callback forms)
• Content of your enquiry

No health, financial or sensitive data is collected via this website.

Purposes

Your data is used to:

• Process your commercial or technical enquiry
• Send you the requested free pre-assessment
• Keep you informed of the progress of your case
• Improve our services (aggregated and anonymised statistics)

Legal Basis

Processing is based on your explicit consent (form tick box) and on our legitimate interest in responding to commercial enquiries.

Retention Period

Prospect data is retained for 12 months from the last active contact, unless an earlier deletion request is made. Beyond this period, data is purged automatically. Client data is retained for the duration of the contractual relationship, then for 5 years to meet accounting and legal obligations.

Technical logs (IP address, user-agent) related to form submissions are retained for 30 days for security and anti-spam purposes, then purged.

Recipients

Your data is shared only with IMACS SERVICES' internal teams. No data is sold or passed to third parties for marketing purposes. Our technical service providers (hosting, messaging) are based in France or the EU and are bound by a data processing agreement compliant with Article 28 of the GDPR.

Your Rights

In accordance with GDPR, you have the right to access, rectify, erase, restrict, port and object to the processing of your data. To exercise these rights, write to service-clients@imacs-services.fr.

If you have a complaint, you may lodge it with the CNIL (cnil.fr).

Cookies and Audience Measurement

This website uses only cookies strictly necessary for its operation (administrator session). No audience measurement is carried out by any third-party tool: no advertising cookies, no third-party trackers, no external analytics service (no Google Analytics, no Cloudflare Web Analytics, or equivalent). Your visits are therefore not tracked for statistical purposes.

Records of Processing Activities (Art. 30 GDPR)

IMACS SERVICES maintains a record of processing activities compliant with Article 30 of the GDPR. This record is an internal document available on reasoned request to service-clients@imacs-services.fr (response within 1 month, in accordance with Article 12 of the GDPR), or presented in the event of a CNIL audit.

The record is updated following any significant change to processing activities and is subject to a systematic annual review.