GDPR & Data Protection

• Collect only the data strictly necessary for the stated purpose (data minimization).
• Inform data subjects in a clear and transparent way about how their data is processed.
• Obtain consent when required, and allow it to be withdrawn at any time.
• Maintain a register of processing activities (Article 30 GDPR).
• Apply appropriate technical and organizational security measures.
• Notify the CNIL and impacted individuals in the event of a qualifying data breach.

• Consent — for non-essential cookies and marketing communications.
• Contract performance — to deliver quoted, contracted services.
• Legitimate interest — to respond to inquiries and improve our services.
• Legal obligation — for accounting, tax and regulatory requirements.

Personal data is processed on secure infrastructure with encrypted transport (HTTPS), restricted access on a need-to-know basis, and regular monitoring. Data is retained only for as long as necessary to fulfill its purpose, in line with the retention periods detailed in our Privacy Policy.

When INFRA SOLUTION uses external providers (hosting, analytics, email, CRM), these providers act as data processors bound by written contracts. We prioritize providers established within the European Union. If a transfer outside the EU is necessary, it is framed by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

• Right of access, rectification and erasure of your data.
• Right to object to or restrict processing.
• Right to data portability.
• Right to define directives concerning the fate of your data after death.
• Right to lodge a complaint with the CNIL (www.cnil.fr).

To exercise your rights or for any GDPR-related question, please contact us at privacy@infrasolution.com or by post: INFRA SOLUTION — Data Privacy, 66 Avenue des Champs-Élysées, 75008 Paris, France.