1.Controller
The controller of the data collected on the Site and in the Customer Area is:
Gabin Grobost, sole trader (French EI), trading as GNL Solution
20 rue Gustave Courbet, 25000 Besançon, France
SIREN 942 358 805 · SIRET 942 358 805 00011
VAT not applicable, article 293 B of the French General Tax Code
Email: contact@gnl-solution.com · Phone: 03 65 67 01 69
This policy is drawn up in accordance with Regulation (EU) 2016/679 ("GDPR") and the amended French "Informatique et Libertés" Act of 6 January 1978. Contact for any question: contact@gnl-solution.com.
2.Data collected
We only collect the data that is necessary:
- Identification and contact: surname, first name, organisation, email, phone, billing address;
- Account: username, password (stored encrypted), preferences;
- Orders and billing: services subscribed, amounts, invoices;
- Payment: processed directly by our payment provider — we do not keep your bank details;
- Technical data: IP address, connection and monitoring logs;
- Reports: information you send via the contact, incident or illegal content forms.
3.Purposes, legal bases and retention
| Purpose | Legal basis | Retention period |
|---|---|---|
| Creating and managing the account, Customer Area | Performance of the contract | Duration of the relationship, then 3 years |
| Orders, billing, accounting | Legal obligation | 10 years (accounting records) |
| Providing and monitoring the services | Performance of the contract | Duration of the contract |
| Customer identification and connection data (hosting provider) | Legal obligation | 1 year |
| Contact form | Legitimate interest (answering your request) | 3 years after the last exchange |
| Technical incident report | Performance of the contract / legitimate interest | [DURÉE] |
| Notice of illegal content | Legal obligation (DSA, LCEN) | [DURÉE] |
| Visit statistics | Legitimate interest (audience measurement exempt from consent) | Cookie: 13 months maximum · statistics: 25 months maximum |
4.Data hosted for our customers
For the sites and data that our customers host with us, the customer is the controller and GNL Solution acts as processor (article 28 of the GDPR): we do not consult or use this data, except for the technical performance of the service, on the customer's instructions or under a legal obligation. Visitors to these sites exercise their rights with the publisher of the site concerned.
5.Recipients
Your data is accessible only to authorised GNL Solution staff. It may be passed on to our payment provider [Mollie] and to [AUTRES PRESTATAIRES ÉVENTUELS], who act on instruction and offer GDPR-compliant guarantees, as well as to the authorities when the law so requires. It is never sold or rented.
6.Data location
Your data is hosted on our own infrastructure in Besançon (France). No transfer outside the European Union takes place; should a provider involve one, it would be covered by the safeguards provided for by the GDPR.
7.Security
We apply appropriate technical and organisational measures: encrypted exchanges (HTTPS), password encryption, access control and logging, backups, security updates and continuous monitoring.
8.Cookies
The Site does not display a cookie banner, because it only uses trackers that are exempt from consent:
- Strictly necessary cookies: session, security, cart, Customer Area login;
- Visit statistics: Matomo tool hosted on our servers, configured according to CNIL recommendations (anonymised IP address, no cross-referencing with other processing and no transfer to third parties, cookie lasting 13 months maximum, data kept 25 months maximum, purpose limited to measuring Site traffic).
You can object at any time to your visits being counted via the "GDPR and statistics" link at the bottom of each page.
9.Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time and to set instructions for what happens to your data after your death.
To exercise them: contact@gnl-solution.com or by post to 20 rue Gustave Courbet, 25000 Besançon, France. We reply within one month. Proof of identity may be requested in case of reasonable doubt.
10.Complaint to the CNIL
If you consider that your rights are not being respected, you can refer the matter to the CNIL (French data protection authority): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.
11.Changes
This policy may change to reflect regulations or our services. The date of the last update is shown at the top of the page.