Legal bases for processing
Depending on the circumstances, processing is based on steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, LEREM’s legitimate interest in answering enquiries and securing its website, or your consent where it is required.
Cookies that are strictly necessary for the website to operate do not require consent. Other trackers are only placed according to the choices you make in the consent management tool.
Retention periods
- Contact enquiries: for the time required to process them and, where professional follow-up is relevant, for no more than three years after the last active exchange.
- Customer and service files: for the duration of the contractual relationship, then archived for the periods required to comply with legal obligations and defend LEREM’s rights.
- Accounting records: ten years from the end of the relevant financial year.
- Technical data and cookies: for a period proportionate to their purpose, as specified in the cookie policy and consent management tool.
Recipients and processors
Data is accessible to authorised LEREM staff who need it to handle your enquiry or file. It may also be entrusted, within the scope of their duties, to providers responsible in particular for hosting, maintenance, email, security or administrative management.
LEREM does not sell your data. It may be disclosed to competent authorities where required by law or an enforceable decision.
Transfers outside the European Economic Area
If a provider used by the website processes data outside the European Economic Area, the transfer is governed by a mechanism recognised under the GDPR: an adequacy decision, the European Commission’s standard contractual clauses or equivalent appropriate safeguards. Further information may be requested from LEREM.
Security and confidentiality
LEREM implements appropriate technical and organisational measures to limit the risks of loss, alteration, disclosure or unauthorised access. Access to data is restricted to the people and providers who need it to perform their duties.