GDPR & Data Protection

Data Protection Officer

Serrurerie01 has appointed a Data Protection Officer (DPO) who can be contacted at serrurerie01@gmail.com or by post at Place de Gex, Ain, France. The DPO is your primary contact for any questions regarding the processing of your personal data and the exercise of your rights.

Data Processing Activities

In accordance with Article 30 of the GDPR, Serrurerie01 maintains a record of processing activities. The main processing activities relate to: management of quotation requests and locksmith interventions, customer relationship management and invoicing, statistical analysis of website traffic, and recruitment and human resources management.

Each processing activity is documented with its purpose, legal basis, categories of data processed, recipients, retention periods, and security measures applied.

International Data Transfers

Your data is primarily processed and stored within the European Union. Where a transfer to a third country is necessary (particularly for certain analytics services), it is governed by the mechanisms provided for by the GDPR: adequacy decision of the European Commission, standard contractual clauses, or appropriate safeguards in accordance with Articles 46 and 49 of the GDPR.

Security Measures

Serrurerie01 implements state-of-the-art technical and organisational measures to ensure the security and confidentiality of processed data: encryption of data in transit (TLS 1.2 minimum) and at rest, reinforced authentication for access to systems containing personal data, environment segregation and role-based access control, access logging and continuous system monitoring, regular backups and business continuity planning.

Data Breach Notification

In the event of a personal data breach, Serrurerie01 undertakes to notify the French Data Protection Authority (CNIL) within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR.

If the breach is likely to result in a high risk to your rights and freedoms, you will be informed without undue delay, in accordance with Article 34 of the GDPR, with a description of the nature of the breach, its likely consequences, and the measures taken to address it.

Data Protection Impact Assessment

For any processing likely to result in a high risk to the rights and freedoms of data subjects, Serrurerie01 carries out a Data Protection Impact Assessment (DPIA) in accordance with Article 35 of the GDPR, before implementing the processing.

Complaint to Supervisory Authority

If you believe that the processing of your personal data constitutes a breach of the GDPR, you have the right to lodge a complaint with the French Data Protection Authority (CNIL): 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, website: www.cnil.fr.

For Swiss residents, complaints may be addressed to the Federal Data Protection and Information Commissioner (FDPIC): Feldeggweg 1, 3003 Berne, Switzerland.