Privacy

ECSplicite pays particular attention to the protection of your personal data. This policy explains what data we process, why, for how long, and what your rights are, in compliance with amended French Law No. 78-17 of 6 January 1978 and the General Data Protection Regulation (GDPR).

Data controller

ECSplicite (SAS) — 300 avenue du Col de l’Ange, Parc d’activités de la Plaine de Jouques, 13420 Gémenos. Contact: contact@ecsplicite.com.

Some definitions

• Personal data: any information that can be used to identify a natural person, directly or indirectly (name, email address, telephone number, etc.).
• Processing: any operation performed on personal data (collection, recording, storage, etc.).
• Data controller: the person who determines the purposes and means of the processing.
• Processor: the person who processes data on behalf of the controller, subject to security and confidentiality obligations.

Our commitments

We only use your data for specific purposes related to our business; we only collect the data we need; we do not keep it longer than necessary; and we only share it with authorised service providers who need it. No data is passed on to third parties for marketing purposes.

Data we collect on this website

• Contact form and information requests: name, email address, telephone number, company and message, in order to process your request (legal basis: pre-contractual measures and legitimate interest).
• Catalogue requests: first name, surname, email address, telephone number, postcode, type of request and preferred language, in order to send you the catalogue and contact you again (legal basis: your consent, obtained via the form).
• Placement test: your answers to the test are not stored. If you ask to receive your result, we record your last name, first name and email address, the language tested, your estimated level and your score, in order to send you your result by email. This information is also passed on to our team, who may contact you about our training courses (legal basis: pre-contractual measures taken at your request and legitimate interest).
• Funding requests (CPF, skills development plan): the information needed to assess your training project.
• Newsletter: your email address, on the basis of your consent, until you unsubscribe (a link is included in every mailing). Your subscription is confirmed via a link sent by email; we record the date and IP address of this confirmation as proof of your consent (legal basis: obligation to be able to demonstrate consent, Article 7 of the GDPR). An unconfirmed subscription is deleted after 30 days. After you unsubscribe, your address is kept for 3 years, marked as unsubscribed, together with this proof, so that we no longer write to you and can demonstrate past consent; it is then deleted, including from the mailing history. You may ask for it to be deleted sooner.

To prevent abusive submissions, a hashed fingerprint of your IP address (from which the address itself cannot be recovered) is associated with requests sent via forms and is used to limit the number of submissions per hour; these counters are deleted after 24 hours (legal basis: legitimate interest in securing the website).

Cookies and external content

This website sets no advertising cookies and uses no third-party audience measurement tools. The cookies and content concerned are as follows:

• Session cookie (ECSSESSID) — strictly necessary for form security. Duration: 24 hours. Exempt from consent.
• Choice cookie (ecs_consent) — strictly necessary: it remembers whether you have accepted or refused external content. Duration: 6 months. Exempt from consent.
• Display cookie (ecs_side) — interface preference: on desktop, it remembers that the side panel has already been shown to you, so that it is displayed collapsed on subsequent pages and visits. It contains no personal data and is not used for tracking. Duration: 1 year. Exempt from consent.
• External content — subject to your consent. Some pages display content provided by third parties, which receive your IP address and may set their own cookies when the content is displayed: YouTube videos (Google Ireland Ltd, in “privacy-enhanced” mode), OpenStreetMap base maps (OpenStreetMap Foundation) and, where applicable, the service whose content is embedded in a page (its name is then shown where the content appears). These services are responsible for their own processing; we invite you to consult their privacy policies.

Until you have given your consent, none of this external content is loaded: a message indicates the service concerned and you can display it on a case-by-case basis. On your first visit, a banner allows you to accept or refuse everything; your choice is kept for 6 months. You can change it at any time using the “Manage cookies” link at the bottom of every page.

Audience measurement

Our audience measurement is carried out in-house, without cookies and without storing your IP address. For each page viewed, we record the page visited, the date and time, the language, the type of device (computer, tablet or mobile), the referring site (search engine, social network, etc.) as well as the country and, where applicable, the city, estimated from the IP address using a geolocation database installed on our servers, without any transfer to a third party. Unique visitors are counted using a hashed, salted fingerprint renewed every day, which can neither identify you nor track you from one day to the next. Legal basis: legitimate interest (understanding website traffic). Statistics are automatically deleted after 25 months.

Newsletter tracking

Our newsletters contain a tracking image and tracking links. These tell us, for each recipient, whether the newsletter was opened (number and dates of opens) and which links were clicked, so that we can make it more relevant. No IP address is stored and unsubscribing is never tracked. You can prevent opens from being measured by blocking images in your email client, or object to this tracking by writing to us at the address given below.

Retention periods

Retention periods depend on the purpose. By way of indication: data relating to a contractual relationship, up to 5 years after it ends; prospects, contact requests and level test participants, up to 3 years after the last contact; newsletter subscribers, until they unsubscribe, then 3 years for the address marked as unsubscribed and the proof of consent; unconfirmed subscriptions, 30 days; traffic statistics, 25 months; session cookie, 24 hours; side panel display cookie, 1 year; choice cookie, 6 months.

Recipients and transfers

Your data is intended for ECSplicite and, where applicable, its technical processors (hosting, email delivery) whose involvement is necessary. Our hosting provider (OVH) is located in the European Union. All our service providers are bound by security and confidentiality obligations.

If you accept external content, your IP address is sent to the services concerned. Some may process data outside the European Union: Google (YouTube) in the United States, under the EU–US Data Privacy Framework, and the OpenStreetMap Foundation in the United Kingdom, a country recognised by the European Commission as providing an adequate level of protection.

Security

We implement appropriate technical and organisational measures to safeguard the security, integrity and confidentiality of your data. As no system is infallible, we encourage you to submit only the information that is necessary via our forms.

Your rights

Under the GDPR, you have the rights of access, rectification, erasure, objection and restriction, as well as the right to withdraw your consent and the right to lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

To exercise these rights, write to our data protection officer: contact@ecsplicite.com, or by post: ECSplicite, 300 avenue du Col de l’Ange, 13420 Gémenos. To enable us to process your request, please enclose a copy of a proof of identity. We will respond within one month, which may be extended by two months for complex requests.

Changes to this policy

We may update this policy to reflect technical or regulatory developments. The version in force is the one published on this page; we encourage you to consult it regularly. Last updated: October 2026.