Privacy Policy
This English version is provided for information purposes only. In the event of any discrepancy, the French version shall prevail.
À Pas de Géant attaches the utmost importance to protecting people’s privacy. The company believes that a privacy policy should be simple and easy to understand, and should serve two specific purposes: keeping you informed and protecting you.
In accordance with Regulation (EU) 2016/679 on the protection of personal data [hereinafter “the Regulation” or “the GDPR”], À Pas de Géant ([37 AVENUE DU GENERAL PATTON, 49000 Angers, France), owner of the website and of the À Pas de Géant brand, is the controller of the personal data collected on its behalf on the non-commercial website apasdegeant.fr [hereinafter “the Website”].
In this capacity, À Pas de Géant undertakes to comply with all the rules and obligations laid down by the Regulation.
1. Key definitions
“Personal data”: any information relating to an identified or identifiable natural person (hereinafter the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
“Processing”: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Controller”: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing.
“Processor”: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
“Recipient”: a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not.
“Third party”: a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorised to process personal data.
“Consent” of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
“Personal data breach”: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
2. Purposes and terms of data processing
Users of the Website [hereinafter “the User”] are informed in particular that any information they agree to provide is used for their browsing and for accessing, using and personalising the services offered on the Website, in accordance with the Legal Notice and the Website’s General Terms of Use (hereinafter the “Services”).
The information collected on the Website is primarily intended for À Pas de Géant’s internal teams. Service providers duly appointed by À Pas de Géant are also authorised to work on the Website and its databases where this is strictly necessary to provide the Services (see section 5 “Processors and data transfers”). The User’s contact details will never be passed on to third parties, whether free of charge or for payment, without the User having been informed and having given their express consent.
The data processing carried out on the Website is as follows:
Processing and purposes
| Purposes | Processing categories |
|---|---|
| Ensuring the secure and stable operation and maintenance of the Website | Website hosting Continuous, preventive application monitoring and security operations |
| Improving the user experience of the Services | Provision of a contact form Use of browsing cookies (functional/analytics) |
| Managing online recruitment | Provision of a job application form |
| Managing quote requests | Provision of a quote request form |
| Communicating about our services | Provision of a newsletter sign-up form |
Personal data processed
| Data category | Data that may be collected | Mandatory data |
|---|---|---|
| Identification data | Title, surname, first name | Title, surname, first name (when using a form, except the newsletter sign-up form) |
| Contact data | Email address, phone number, postal address | Email address (when using a form), postal address (when using the job application or quote request form) |
| Professional data | Company or organisation, CV | Company or organisation (when using the job application or quote request form), CV (when using the job application form) |
| Connection data | IP address, browsing cookies | IP address, browsing cookies (only those essential to the proper functioning of the Website) |
Any other data the User may provide through a form made available to them cannot be anticipated by À Pas de Géant. Nevertheless, such data will be protected in the same way as the data requested or required. Should any sensitive data (such as health, political affiliation, religious belief, sexual orientation, etc.) be submitted, it will be automatically deleted without being processed. Under no circumstances should the User submit intimate or highly personal information on the Website. Such information is of no concern to À Pas de Géant.
Categories of data subjects
Users of the Website, in the broadest sense.
Retention period
| Data concerned | Retention period | Deletion method |
|---|---|---|
| Identification data Contact data Professional data |
3 years from the User’s last contact | Manual deletion based on timestamped indicators |
| Connection data | Maximum 13 months for analytics/statistics cookies | Automatic deletion |
3. Rights of data subjects
In accordance with Chapter III “Rights of the data subject” of the GDPR, the User has the right to access, rectify, restrict, erase and object to the processing of information concerning them. These rights can be exercised as follows:
- By email to: mesdonnees.personnelles@[DOMAIN]
- Via the contact form on the Website, by selecting “GDPR request” in the “Subject of your request” drop-down menu
- By post to: À Pas de Géant, [ADDRESS], [POSTCODE] [CITY], France
À Pas de Géant also informs the User that, if they believe their rights have not been respected, they may lodge a complaint at any time with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), via www.cnil.fr/fr/plaintes/ or at the following address:
3 place de Fontenoy, TSA 80715
75334 PARIS CEDEX 07, France
www.cnil.fr
4. Security
À Pas de Géant undertakes to implement all organisational, technical and structural measures needed to ensure the physical and logical security of personal data, and to maintain these measures until the data is deleted. In particular, it actively guards against any alteration, destruction of or unauthorised access to the data.
À Pas de Géant points out that the internet is not an entirely secure environment and that the Website cannot guarantee the complete security of information transmitted and stored over this network. It nevertheless works every day to improve its security measures. In particular, connections and data flows are encrypted to secure information sent to the Website.
À Pas de Géant also undertakes to comply with the personal data breach notification rules set out in Articles 33 and 34 of the GDPR (notification to the CNIL and/or to Users).
All of these rules are also applied by À Pas de Géant’s Processors. This commitment is a decisive and essential part of its processing agreements.
5. Processors and data transfers
À Pas de Géant informs Users that the proper functioning of the Website requires the involvement of several processors (hereinafter the “Processors”) for the following processing operations:
| Processing concerned | Processor | Tier | Contact details (and server location if different) |
|---|---|---|---|
| Website publishing, monitoring and maintenance | Atelier ASAP | 1 | Registered office: 7 rue Max Richard, 49100 Angers, France |
| Website hosting and backup | Infomaniak Network SA | 1 | Registered office: 25 rue Eugène-Marziano, 1227 Les Acacias (Geneva), Switzerland Server location: Switzerland |
À Pas de Géant certifies that it has reviewed and selected its Processors on the basis of personal data protection levels that meet the requirements of the Regulation. Like À Pas de Géant, the Processors have undertaken to comply with the provisions of the Regulation and to enable À Pas de Géant, by any means, to meet its legal obligations, in particular with regard to the data subject rights mentioned above.
The Processors have also undertaken not to subcontract the processing of personal data without prior notice to and approval from À Pas de Géant. À Pas de Géant will then verify that the sub-processor offers a level of personal data protection equivalent to the one it applies and requires its Processors to apply.
À Pas de Géant and its Processors jointly undertake to ensure that personal data collected on the Website is always processed and hosted within the European Union, or in a country or organisation recognised by the European Commission as offering an adequate level of protection. In accordance with Chapter V of the GDPR, À Pas de Géant has taken all necessary precautions to provide an appropriate framework for any data transfers outside the European Union.
6. Cookies
As mentioned above, some information is collected by means of cookies (small text files placed in the User’s browser that store information about them, which can subsequently be read by the Website).
The cookies and trackers used on the Website are as follows:
| No. | Name | Company | Purpose | Lifetime |
|---|---|---|---|---|
| 1 | _ga | Audience analysis and traffic measurement | 13 months | |
| 2 | _gat | Audience analysis and traffic measurement | 24 hours | |
| 3 | _gid | Audience analysis and traffic measurement | 24 hours |
À Pas de Géant informs the User that they can refuse cookies by adjusting the settings of the cookie manager displayed on their first visit to the Website and, at any time, via the settings button at the bottom of the Website.
Only cookies that are strictly necessary for the Website to function properly cannot be refused by the User. Likewise, if the User refuses so-called “functional” cookies, they acknowledge that the Website may not function properly and that their user experience may be significantly affected.
More generally, if the User wishes to object to the use of cookies, they can also do so by configuring their browser (see the CNIL’s guidance).
7. Updates to this Privacy Policy
This privacy policy may be amended or adjusted at any time. The User is invited to consult it regularly on the Website [SITE URL]. In the event of a major change to this policy, an email will be sent to the User at least 15 days before the change takes effect.
Last updated: 29 September 2026
