Home » Privacy and Data Security Policy
The society GESTAL undertakes to ensure the highest level of protection of your personal data.
Who collects your personal data?
The data controller implemented on the site www.gestal.fr is:
GESTAL, Company by SAS to the share capital of 2 200 000 Euros, registered in the Trade and Companies Register of Saint-Nazaire under the number 335 339 131 whose head office is located ZI des Pedras 44117 Saint-André-des-Eaux.
The society GESTAL, as data controller, undertakes to comply with the provisions of Law No. 78-17 of 6 January 1978 as amended relating to data processing, files and freedoms with regard to the automated processing of personal data. achieved as well as Regulation (EU) No. 2016/679 of April 27, 2016 from its application on May 25, 2018 on the protection of individuals with regard to the processing of personal data and on the free movement of this data (General Data Protection Regulation GDPR).
To whom are your personal data transmitted?
Your data is only passed on to employees of the company GESTAL
What are the purposes of the processing of your personal data collected?
The society GESTAL is required to collect and record personal data of its Internet users (customers, prospects and prescribers) to carry out the following processing:
- Creation and management of the customer account;
- Information of new or modified services;
- Answering questions and sending commercial proposals by email (following your request);
- Development of trade statistics.
With the exception of commercial prospecting operations, GESTAL considers that all of the above processing is necessary for the performance of these services.
Commercial prospecting operations are based on the consent of the person concerned to the processing of their data.
How long will your data be kept?
The society GESTAL will retain your personal data for the following periods:
- All of the personal data collected from the "customer" Internet user will be kept for the entire duration of the commercial relationship and for a period of 5 years from the end of the said commercial relationship (for example from the date of your last purchase…),
- All the personal data collected from the Internet user "prospects or prescribers", will be kept for 3 years from the last contact from the Internet user (for example request for information on a product, a click on a hypertext link …).
What are your rights to access personal data and how to exercise them?
Any natural person using the service has the right to exercise their rights of access, rectification, opposition and deletion to the processing of their data in accordance with articles 38 to 40 of the law of January 6, 1978. In application of the regulation 2016/679 of April 27, 2016, individuals can exercise their right to limit processing, erase their data and portability from May 25, 2018.
These rights can be exercised with the company GESTAL who collected the personal data in the following way, by writing to us:
By mail :
- 62 Rue de la Gare
- ZI des Pedras
- 44117 SAINT-ANDRE-DES-EAUX
- FRANCE
Electronically:
- accueil@gestal.fr
The society GESTAL will send a response within a maximum period of 1 month after the exercise of the right.
In the event of an unsatisfactory response, the person concerned has the option of entering the CNIL