Gwardy

Data Protection

Website Privacy Policy

Website Privacy Policy
1. Data Controller

Personal data collected when you visit this website is processed by:

touwi S.A.S:
12 rue d’Hermia
14200 Hérouville-Saint-Clair
France
SIREN (French company registration number): 922 152 277

2. Data processed, legal bases and retention periods.

Certain data (IP address, browser, etc.) is collected to ensure the proper functioning of the website (legal basis –legitimate interest of touwi – Art. 6(1)(f) GDPR). This information is retained for 1 year.

Other data (pages viewed, visit duration, approximate location, etc.) is used to measure website traffic and improve its content (legal basis – consent – Art. 6(1)(a) GDPR). This data is collected only if you consent. Refusing cookies has no effect on your access to the website. Audience measurement cookies are stored for a maximum of 13 months, and the data collected is retained for 14 months before being deleted. You can change your choices at any time, or view the details of each cookie, by clicking on the Cookie setting button at the bottom of the page.

When you submit a contact request, only the fields marked with an asterisk are mandatory (name, email address and message). Without them, we cannot respond to you (legal basis – legitimate interest of touwi – Art. 6(1)(f) GDPR). Your personal information will be deleted 3 years after our last exchange.

3. Data Recipients

Your data is neither sold nor transferred to third parties.

Within touwi, only the staff responsible for handling contact requests and administering the website have access to it.

Our processors act on our instructions under a contract compliant with Article 28 GDPR:

  • Microsoft (website hosting in France and receipt of contact requests) and Google Analytics (audience measurement);

4. Data Transfers Outside the European Union

Audience measurement data may be transferred to Google LLC in the United States. This transfer is governed by the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, under which Google LLC is certified.

Microsoft Corporation is also certified under this framework for any access from the United States related to support of the Azure infrastructure. No other transfer outside the European Union takes place.

5. Your Rights

Under the GDPR, you have the following rights:

  • Right of access;

  • Right to rectification;

  • Right of object;

  • Right to restriction of processing;

  • Right to erasure, under the conditions provided by applicable law;

  • Right to withdraw your consent at any time;

You can exercise these rights directly with touwi SAS by contacting our Data Protection Officer (DPO) at dpo@touwi.fr.

We will respond within one (1) month, which may be extended by two (2) months if the request is complex.

6. Complaints

If you believe that your data protection rights have not been respected, you have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the French data protection authority.