Privacy policy | LEREM laboratory

PROTECTION OF YOUR DATA

How LEREM uses your personal data

This policy explains what information may be collected when you browse the website or contact the laboratory, why it is used and how you can exercise your rights.

Last updated: 26 August 2026

Data controller

Laboratoire d’Études et de Recherches des Emballages Métalliques (LEREM)
Non-profit association governed by the French Act of 1 July 1901
Parc Industriel Européen – Les Marches de l’Oise
100 rue Louis Blanc, 60160 Montataire – France

Email: laboratoire@lerem.org
Telephone: +33 (0)3 44 72 82 77

Only the necessary data

LEREM only collects the information required to answer your enquiries, provide its services and protect the proper operation of the website.

Data concerned

identity and professional contact details: name, organisation, position, telephone number and email address;
the content of your enquiry and any documents you choose to provide;
information required to follow up a quotation, service or contractual relationship;
technical browsing data and information relating to your cookie choices.

Why is this data used?

to answer enquiries and, at your request, prepare a technical or commercial proposal;
to organise and monitor tests, studies, training and other agreed services;
to manage administrative, contractual and accounting matters;
to secure and maintain the website and measure its audience in accordance with your preferences.

Legal bases for processing

Depending on the circumstances, processing is based on steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, LEREM’s legitimate interest in answering enquiries and securing its website, or your consent where it is required.

Cookies that are strictly necessary for the website to operate do not require consent. Other trackers are only placed according to the choices you make in the consent management tool.

Retention periods

Contact enquiries: for the time required to process them and, where professional follow-up is relevant, for no more than three years after the last active exchange.
Customer and service files: for the duration of the contractual relationship, then archived for the periods required to comply with legal obligations and defend LEREM’s rights.
Accounting records: ten years from the end of the relevant financial year.
Technical data and cookies: for a period proportionate to their purpose, as specified in the cookie policy and consent management tool.

Recipients and processors

Data is accessible to authorised LEREM staff who need it to handle your enquiry or file. It may also be entrusted, within the scope of their duties, to providers responsible in particular for hosting, maintenance, email, security or administrative management.

LEREM does not sell your data. It may be disclosed to competent authorities where required by law or an enforceable decision.

Transfers outside the European Economic Area

If a provider used by the website processes data outside the European Economic Area, the transfer is governed by a mechanism recognised under the GDPR: an adequacy decision, the European Commission’s standard contractual clauses or equivalent appropriate safeguards. Further information may be requested from LEREM.

Security and confidentiality

LEREM implements appropriate technical and organisational measures to limit the risks of loss, alteration, disclosure or unauthorised access. Access to data is restricted to the people and providers who need it to perform their duties.

Your rights

You may request access to, rectification or erasure of your data, restriction of processing, object to certain processing, withdraw your consent at any time and, where the relevant conditions are met, request data portability. You may also provide instructions concerning your personal data after your death.

To exercise your rights, write to laboratoire@lerem.org or to LEREM’s postal address. Proof of identity will only be requested if there is reasonable doubt about the applicant’s identity.

Complaint to the CNIL

If you believe that your rights have not been respected, you may lodge a complaint with the French data protection authority.

Submit a complaint on cnil.fr

Cookies and preference management

The website uses a consent management tool that allows you to accept, refuse or change your choices by cookie category. Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing carried out beforehand.

For details of tracker categories, purposes and durations, please read the cookie policy. You can reopen the preference tool at any time using the consent management link available on the website.

Changes to this policy

This policy may be updated to reflect changes to the website, processing activities or applicable law. The date of the latest revision appears at the top of this page. In the event of any discrepancy between language versions, the French version prevails.