Privacy & Data-Confidentiality Policy

Last updated : 26 June 2025

1. Who We Are

GT GARRICK TECHNOLOGIES SASU (trade name “GTEK”) is a French AI-technology company.

Registered office (siège social)	2 Avenue Conventionnel Fabre, 66320 Vinça, France
Operational office	12 Avenue Jean Jaurès, 66270 Le Soler (Maison des Startups – Accueil du Pôle Action Média)
SIREN	905 061 115
SIRET (siège)	905 061 115 00010
RCS	905 061 115 R.C.S. Perpignan (inscription 09/11/2021)
Legal form	Société par Actions Simplifiée Unipersonnelle (SASU)
Share capital	10 000 €
VAT no.	FR00905061115
Activity (NAF/APE)	62.02A – Conseil en systèmes et logiciels informatiques

2. Scope of this Policy

This Policy covers every website, form, product and service operated by GTEK (the “Services”). It explains what personal data we collect, how we use it, and the rights you enjoy under the EU General Data Protection Regulation (GDPR) and other laws.

3. What Data We Collect

Category	What	When & How
Contact Information	Name, email, phone, company, message content	Collected only when you fill in a form, request a quote, or contact us directly.
Technical Logs (minimal)	IP address*, user-agent string*, timestamp	Captured automatically by our hosting providers for basic security and troubleshooting.

*We do not attempt to link log data to individual identities.

No AI usage data : Our AI models run locally on customer-side servers; we do not copy or use your prompts, documents or outputs for training or analytics.

4. Cookies & Tracking

Our public site sets only essential first-party cookies (e.g. CSRF protection, load-balancing). We do not use advertising or cross-site analytics cookies unless you expressly opt-in.

5. How We Use Your Data

1. Respond to enquiries or support requests
2. Draft quotes, contracts or invoices
3. Provide and maintain the Services you purchase
4. Fulfil legal obligations (e.g. accounting, tax)

6. Legal Bases (GDPR Art. 6)

Purpose	Legal basis
Responding to your enquiry	Legitimate Interest
Performance of a contract	Contract
Book-keeping & taxation	Legal Obligation
Optional marketing updates	Consent (opt-out anytime)

7. Data Processors & Sharing

We never sell or rent personal data. We share it only with :

• Trusted processors needed to run our business, each bound by GDPR-compliant agreements :
  • Google Cloud Platform (EU/EEA data centres)
  • Amazon Web Services (AWS) (EU/EEA data centres)
  • Email & CRM providers located in the EU
• Authorities when legally compelled.

8. International Transfers

Our primary servers are in the EU. Should any data leave the EEA (e.g. for backup redundancy) we use an adequacy decision or EU Standard Contractual Clauses.

9. Data Retention

Data type	Retention period
Contact form & support emails	12 months after last interaction or sooner on request
Contractual / customer records	10 years (French commercial law)
Technical logs	30 days

10. Your Rights

You may at any time :

1. Access the data we hold about you
2. Rectify inaccurate data
3. Erase data (“right to be forgotten”)
4. Restrict or object to processing
5. Receive your data (portability)
6. Lodge a complaint with CNIL or your local authority

Contact us (Section 12) ; we reply within 30 days.

11. Security Measures

• End-to-end TLS (HTTPS)
• Firewalled servers with prompt patching
• Role-based, least-privilege access controls
• Encrypted off-site backups
• Local AI processing keeps sensitive user content on-premises

12. Contact

Data Controller : GT GARRICK TECHNOLOGIES (GTEK)
E-mail : ppd@g-tek.fr
Phone :
Registered office : 2 Av. Conventionnel Fabre, 66320 Vinça, France
Operational office : 12 Av. Jean Jaurès, 66270 Le Soler, France

13. Facebook / Meta Data-Deletion Instructions

1. In Facebook : Settings & Privacy → Settings → Apps & Websites
2. Select “GTEK” and click Remove
3. We erase Facebook-sourced data within 24 hours.

You can also e-mail ppd@g-tek.fr with subject “Facebook Data Deletion”.

14. Children

Our Services are not directed to children under 16. If you believe we hold data about a minor, please contact us for immediate deletion.

15. Changes to This Policy

We may update this Policy from time to time. Significant changes will be announced on our website. Continued use of the Services after changes constitutes acceptance.