Personal data protection and use of cookies on the GERBOPA website.
GERBOPA pays particular attention to the protection of personal data processed through its website and contact forms.
When you use a form on the website, GERBOPA may receive the information you voluntarily provide:
The website may also process technical data strictly necessary for its operation and security, including session information and, depending on server configuration, technical connection logs.
| Processing | Purpose | Legal basis |
|---|---|---|
| Contact form | Receive your enquiry, route it to the appropriate contact and respond to you. | Consent given when the form is submitted. |
| Membership enquiry | Assess an initial contact with a view to possible membership and continue the requested discussions. | Consent and, where applicable, pre-contractual steps taken at your request. |
| Supplier enquiry | Review a company, product or service presentation and follow up the enquiry. | Consent and, where applicable, pre-contractual steps taken at your request. |
| Form security | Prevent automated submissions and abuse, and protect the operation of the website. | GERBOPA’s legitimate interest in securing its website. |
Data is made available to authorised GERBOPA personnel who need it to process the enquiry.
Technical providers involved in hosting, email or maintenance may also have access strictly to the extent necessary for their role and subject to their confidentiality and security obligations.
The website forms do not create records in a public database: the information is sent to GERBOPA by email.
For enquiries that do not lead to a contractual relationship, data is retained for as long as necessary to process the enquiry and then for a maximum of 3 years from the last exchange, unless a legal obligation, evidential requirement or dispute justifies a different period.
Where a contractual relationship is established, the necessary data is retained for the periods applicable to that relationship and the corresponding legal obligations.
The current version of the website uses a technical session cookie required for secure form operation, including protection against fraudulent submissions and temporary storage of confirmation messages.
A language preference cookie is also used to remember whether the visitor has selected French or English. It contains only the language code and is used solely to provide the requested bilingual interface.
These cookies are strictly necessary or functional for the requested service and are not used for advertising or profiling.
No audience-measurement tool, advertising cookie or marketing tracker is included in the version of the website delivered to date. If such tools are added later, this policy will be updated and, where required, a consent mechanism will be implemented before they are activated.
The anti-bot protection currently enabled runs locally on the GERBOPA server and does not load a third-party CAPTCHA service.
Depending on the applicable law and legal basis for processing, you may have rights of access, rectification, erasure, restriction, objection and, where the conditions are met, data portability.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights or ask a question about your personal data, contact GERBOPA:
By email: contact@gerbopa.com
By post: GERBOPA – Personal Data – 24 Avenue de la Grande Armée – 75017 Paris – France
GERBOPA may ask for additional information to verify the identity of the requester where necessary. A response will be provided within the time limits required by applicable law.
If, after contacting GERBOPA, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL.
GERBOPA implements technical and organisational measures appropriate to the nature of the data processed. The forms in this version of the website include session protection, an anti-CSRF token, an invisible anti-bot field, a single-use form token, a minimum completion-time check, human verification and rate limiting.
This policy may change to reflect changes to the website, processing activities or applicable law.
Last updated: 14 August 2026.
For information about the website publisher and hosting provider, see the legal notice.
