Privacy Policy

Last updated : 09/03/2026

1. Data Controller

Personal data collected on this site is processed by:

  • Company: Lerm
  • Representative: Nicolas Dubut
  • Email: contact@lerm.tech

2. Data Collected

We collect only the data strictly necessary to process your requests:

  • Full name (contact form)
  • Professional email address
  • Company name
  • Free-text message
  • Navigation data (analytics cookies, with prior consent)

3. Legal Basis for Processing

Processing is based on the following legal grounds (GDPR, Art. 6):

  • Legitimate interest: analysis of navigation logs for security purposes
  • Consent: analytics and audience measurement cookies
  • Performance of a contract: processing contact requests and client follow-up

4. Data Retention

Data is retained only for as long as necessary for its purpose:

  • Contact data: 3 years from the last interaction
  • Billing data: 10 years (legal accounting obligation)
  • Technical logs: 12 months
  • Analytics cookies: maximum 13 months

5. Data Security

Appropriate technical and organisational measures are in place:

  • Encrypted communications (TLS)
  • Restricted access to data by authorised personnel only
  • Hosting in France (OVH Cloud)
  • Regular review of access rights and permissions

6. Your Rights

Under GDPR, you have the following rights, exercisable by email at contact@lerm.tech:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ('right to be forgotten')
  • Right to data portability
  • Right to object to processing
  • Right to restriction of processing

7. Contact and Complaints

To exercise your rights or for any question regarding data protection:

  • Email: contact@lerm.tech — response within 30 days
  • You may also lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr