Durabilis & Co France takes the protection of your personal data seriously. This policy explains what data we process, why, for how long, and how to exercise your rights under the General Data Protection Regulation (GDPR) and the French Data Protection Act.
01Data controller
The data controller is DURABILIS & CO (trading as DURABILIS), a Private limited company (SARL) registered with the RCS Paris 978 690 972, with its head office at 4 rue Stéphane Grappelli, 75017 Paris, France, represented by its Managing Director.
You can reach us by email at contact@durabilisandco.com, by post to DURABILIS & CO, 4 rue Stéphane Grappelli, 75017 Paris, France, or by phone on +33 7 59 29 82 46.
02Data we process
This is a presentation website. It has no forms, no user accounts and no audience measurement tools. We only process:
- data you provide to us when you contact us (phone, post, email): name, organisation, contact details and the content of our exchanges;
- technical connection data automatically logged by our hosting provider (IP address, date and time, page visited, browser type), required for the security and proper operation of the site.
03Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your enquiries | Legitimate interest, or pre-contractual steps taken at your request |
| Managing relationships with partners and clients | Performance of a contract |
| Ensuring the security and proper operation of the site | Legitimate interest |
| Complying with our legal obligations | Legal obligation |
04Retention periods
- Exchanges with a contact or prospect: 3 years from your last contact with us.
- Client or partner data: for the duration of the contractual relationship, then archived in line with statutory limitation periods (generally 5 years, 10 years for accounting records).
- Technical connection logs: 12 months maximum.
05Recipients
Your data is accessible only to authorised staff at Durabilis & Co France and, for technical data, to our hosting provider Google Cloud France (Google Cloud), acting as a processor. It is never sold or shared with third parties for marketing purposes. It may be disclosed to public authorities where required by law.
06Transfers outside the European Union
The website is hosted on Google Cloud infrastructure, in a data centre located in France (Paris, europe-west9 region), within the European Union. As Google belongs to a group whose parent company, Google LLC, is established in the United States, access to some technical data from outside the EU cannot be ruled out. Any such transfers are covered by the safeguards set out in the GDPR: Google LLC’s certification under the EU‑US Data Privacy Framework, recognised by the European Commission adequacy decision of 10 July 2023, and the European Commission’s standard contractual clauses.
08Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to set instructions regarding your data after your death.
To exercise these rights, contact us by email at contact@durabilisandco.com, by post to DURABILIS & CO, 4 rue Stéphane Grappelli, 75017 Paris, France, or by phone on +33 7 59 29 82 46. We will reply within one month. We may ask for proof of identity if we have reasonable doubts.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
09Security
The site is served exclusively over HTTPS. We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure.
10Changes to this policy
We may update this policy, in particular if new services are added to the site. The date of the latest update is shown at the top of this page.