Privacy Policy
Last updated: November 10, 2026
1. Data Controller
This Privacy Policy describes how LEOSAC processes personal data collected through https://leosac.com (the “Website”), in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable French data protection law.
The data controller is:
LEOSAC
Simplified joint-stock company (SAS)
39 rue Principale
67220 Breitenau, France
SIREN: 919 690 420
Privacy contact: legal@leosac.com
This Policy applies to the Website, contact requests and recruitment applications. Other LEOSAC products and services may be subject to separate privacy information.
2. Personal Data and Processing Purposes
2.1 Contact requests
When visitors use our contact form, we collect their name, email address, message and any additional information voluntarily provided.
Messages are forwarded directly by email and are not stored in the Website’s WordPress database.
We use this information to respond to inquiries, provide information about our products and services, prepare quotations where requested and manage related communications.
Processing is based on our legitimate interests in responding to inquiries or, where applicable, taking pre-contractual steps requested by the individual.
Fields marked as mandatory are necessary to process the request. Submitting an inquiry does not automatically subscribe the sender to marketing communications.
2.2 Recruitment
Job applications are received by email. We may process candidates’ contact details, CVs, cover letters, qualifications, professional experience and other relevant information provided with their applications.
These data are used to evaluate applications, communicate with candidates and manage recruitment procedures.
Processing is based on pre-contractual steps, where applicable.
Applications from unsuccessful candidates may also be retained for future recruitment opportunities, subject to appropriate information and a valid legal basis, as described in Section 5.
Candidates are encouraged not to submit unnecessary or sensitive personal information.
2.3 Website operation and security
When visitors access the Website, technical information may be processed, including IP addresses, browser characteristics, request timestamps, accessed resources, error reports and security logs.
These data are used to operate, maintain and secure the Website, based on our legitimate interests in ensuring its availability and security.
2.4 Audience measurement — Matomo
We use Matomo, an open-source analytics platform, to measure Website traffic and improve its content, usability and performance.
Matomo is self-hosted on infrastructure provided by Infomaniak. Analytics data are processed within our own installation rather than through Matomo Cloud.
Matomo is configured in accordance with the requirements of the French Data Protection Authority (CNIL) for consent-exempt audience measurement.
IP address anonymization is enabled. Analytics data are used exclusively for audience measurement and Website improvement and are not shared with third-party advertising platforms.
Depending on the technical settings, the information processed may include pages viewed, visit duration, referral sources, device characteristics and approximate geographic information.
This processing is based on our legitimate interests. Visitors may object to audience measurement through the opt-out mechanism provided on the Website.
3. Cookies and Similar Technologies
The Website uses cookies and similar technologies for essential functionality, language preferences, consent management and audience measurement.
Matomo audience measurement is configured to meet the conditions for exemption from prior consent under applicable French law.
Other non-essential tracking technologies, where used, are activated only after obtaining the required consent.
Visitors may manage their consent preferences through the Website’s cookie management interface and object to Matomo analytics through the available opt-out mechanism.
Details about cookies, their purposes and the available choices are provided in our Cookie Policy.
4. Data Recipients and Hosting
Personal data may be accessed by authorized LEOSAC personnel and service providers involved in the relevant processing activities.
The Website and its Matomo installation are hosted on infrastructure provided by Infomaniak Network SA, Switzerland.
Contact and recruitment correspondence is processed through our email systems and associated service providers.
Service providers acting on our behalf are required to implement appropriate confidentiality, security and data protection safeguards.
Personal data may also be disclosed where required by applicable law.
LEOSAC does not sell personal data collected through the Website.
International data transfers
Switzerland benefits from a European Commission adequacy decision regarding personal data protection.
Any other transfers of personal data outside the European Economic Area are subject to an applicable adequacy decision or appropriate safeguards, such as Standard Contractual Clauses where necessary.
5. Data Retention
Personal data are retained only for as long as necessary for the purposes for which they were collected.
| Data category | Retention period |
|---|---|
| Contact inquiries | For the time necessary to respond and manage appropriate follow-up |
| Business prospecting data | Up to 3 years from collection or the last relevant contact initiated by the prospect |
| Contractual and business correspondence | According to the contractual relationship, applicable legal obligations and legitimate evidentiary needs |
| Recruitment applications | For the duration of the recruitment process |
| Unsuccessful applications retained for future opportunities | Up to 2 years from the last contact with the candidate, subject to an appropriate legal basis and prior information |
| Matomo analytics data | Maximum 25 months |
| Matomo audience measurement trackers | Maximum lifetime of 13 months |
| Technical and security logs | For periods proportionate to their operational and security purposes |
| Other cookies | According to the Cookie Policy |
Certain information may be retained for longer periods where necessary to comply with legal obligations or establish, exercise or defend legal claims.
Data that are no longer required are deleted or anonymized according to the applicable retention policy.
6. Data Security
LEOSAC implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss or destruction.
These measures are adapted to the nature of the processing activities and the associated risks.
7. Your Rights
Under the GDPR, subject to applicable conditions, individuals have the right to:
- Access their personal data
- Request rectification or erasure
- Request restriction of processing
- Object to processing based on legitimate interests
- Request data portability where applicable
- Withdraw consent where processing is based on consent
Requests may be sent to the privacy contact indicated in Section 1.
We normally respond within one month, subject to extensions permitted by applicable law.
Individuals may also lodge a complaint with the French Data Protection Authority, the CNIL.
8. External Websites
The Website may contain links to third-party websites, including documentation platforms and software repositories.
These websites operate under their own privacy policies and are responsible for their independent processing activities.
9. Changes to This Policy
This Privacy Policy may be updated to reflect changes in our activities, technical infrastructure or applicable legislation.
The latest version and its revision date will be published on this page.