1. Data Controller.

Electr, [legal form], registered under SIRET [to be completed], with registered office at [address], is the data controller responsible for processing your personal data in accordance with the GDPR (EU) 2016/679 and the French Data Protection Act (Loi Informatique et Libertés). Contact: [email/phone to be completed].

2. Data We Collect.

We collect data you provide directly (name, contact details, property address, service requests, billing information, messages) and data collected automatically through our website (IP address, browser type, pages visited, approximate geolocation). Automatic data collection is subject to your cookie consent.

3. Purposes and Legal Bases.

We process your data to respond to enquiries and provide quotes (pre-contractual measures, Art. 6(1)(b) GDPR), perform electrical services and after-sales support (contract performance), issue invoices and meet accounting obligations (legal obligation, Art. 6(1)(c)), send marketing communications (your consent, Art. 6(1)(a)), and improve our website through analytics (consent or legitimate interest).

4. Retention.

Client contractual and billing data is kept for 10 years per French commercial law. Prospect data is kept for 3 years from last contact. Marketing data is kept for 3 years or until consent is withdrawn. Cookies expire after 13 months maximum per CNIL guidelines.

5. Data Sharing.

Your data may be shared with Electr staff, subcontractors bound by data processing agreements, IT service providers, accounting and legal professionals, and public authorities when legally required. We never sell or rent your data.

6. International Transfers.

Your data is stored within the EEA. If any transfer outside the EEA is necessary, we rely on adequacy decisions (e.g., the EU-US Data Privacy Framework) or Standard Contractual Clauses.

7. Your Rights.

Under the GDPR you have the right to access, rectify, erase, restrict processing, port your data, object to processing, and withdraw consent at any time. To exercise these rights, contact us at [email]. We will respond within one month. You may also lodge a complaint with the CNIL (www.cnil.fr — 3 Place de Fontenoy, 75334 Paris Cedex 07).

8. Cookies.

Our site uses strictly necessary cookies (no consent required), and analytics/marketing cookies (activated only with your consent). You can manage preferences via our cookie banner or your browser settings at any time.

9. Security.

We implement SSL/TLS encryption, access controls, regular security assessments, confidentiality agreements, and backup procedures. Data breaches posing a risk to your rights will be reported to the CNIL within 72 hours and communicated to you without undue delay.

10. Updates.

We may update this policy at any time. Material changes will be posted on our website.