01Introduction and Data Controller Identity
LMDH Group SAS, operating the site under the trade name Clarendis, attaches the utmost importance to the protection of your personal data and is committed to processing it in strict compliance with the General Data Protection Regulation (GDPR — EU 2016/679) and the French Data Protection Act (Loi Informatique et Libertés) of 6 January 1978 as amended.
| Data Controller | Contact |
|---|---|
| Company | LMDH Group SAS |
| Registered office | 97 Route de Valréas, 84600 Grillon, France |
| contact@clarendis.com | |
| Data Protection Officer (DPO) | contact@clarendis.com |
02Data Collected and Purposes
2.1 Data collected via the contact form
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name | Identification of the contact | Legitimate interest | 3 years after last contact |
| Email address | Communication and response to enquiry | Contract performance / Consent | 3 years after last contact |
| Company name | Commercial enquiry qualification | Legitimate interest | 3 years after last contact |
| Phone number | Phone contact if necessary | Consent | 3 years after last contact |
| Message | Processing the enquiry | Legitimate interest | 3 years after last contact |
| IP address | Security, anti-spam, rate limiting | Legitimate interest | 1 hour (transient) |
2.2 Data collected via cookies and trackers
Cookies and trackers may be placed on your device when you visit clarendis.com. You will be informed of their placement via our cookie consent banner, in accordance with CNIL recommendations.
03Data Recipients
Your personal data is intended solely for LMDH Group SAS employees and agents authorised to process it within the scope of their duties.
| Sub-processor | Role | Location |
|---|---|---|
| PlanetHoster / N0C | Website and data hosting | Canada / Europe |
| Infomaniak | Email service | Switzerland (data in Europe) |
| Microsoft 365 | Office suite and internal messaging | EU (European data centres) |
Your data is never sold, rented or transferred to third parties for commercial purposes.
04Transfers Outside the European Union
Some of our sub-processors may be established outside the European Union. In such cases, LMDH Group SAS ensures that these transfers are governed by appropriate safeguards, such as:
- Standard contractual clauses approved by the European Commission
- The sub-processor’s adherence to an adequacy framework recognised by the Commission
- Binding Corporate Rules
PlanetHoster is headquartered in Canada, which benefits from an adequacy decision by the European Commission.
05Your Rights
Under the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:
| Right | Description | How to exercise it |
|---|---|---|
| Right of access (Art. 15 GDPR) | Obtain confirmation that your data is processed and receive a copy | Email to contact@clarendis.com |
| Right to rectification (Art. 16 GDPR) | Correct inaccurate or incomplete data | Email to contact@clarendis.com |
| Right to erasure (Art. 17 GDPR) | Request deletion of your data in certain circumstances | Email to contact@clarendis.com |
| Right to restriction (Art. 18 GDPR) | Restrict the processing of your data | Email to contact@clarendis.com |
| Right to portability (Art. 20 GDPR) | Receive your data in a structured format | Email to contact@clarendis.com |
| Right to object (Art. 21 GDPR) | Object to processing based on legitimate interest | Email to contact@clarendis.com |
| Right to withdraw consent | Withdraw consent at any time | Email to contact@clarendis.com |
To exercise your rights, send your request to: contact@clarendis.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority in your country of residence.
06Data Security
LMDH Group SAS implements all appropriate technical and organisational measures to ensure the security and confidentiality of your personal data, including:
- Encrypted communications via HTTPS (TLS 1.3)
- Strong authentication for access to internal systems
- Access to data restricted on a need-to-know basis
- Regular system and software updates
- Access logging and anomaly monitoring
- Data breach management procedure compliant with Article 33 GDPR
- Anti-spam protection and rate limiting on forms
- CSRF protection via nonce tokens on all forms
07Cookies and Trackers
Cookie management is covered separately via our consent banner. In accordance with CNIL recommendations, no non-essential cookies are placed without your prior consent.
The cookie management banner is live on clarendis.com. It lets you accept, refuse or adjust your preferences, and change them at any time.
7.1 Your browser’s local storage
Some display features rely on your browser’s local storage — localStorage and sessionStorage — rather than on cookies. This storage never leaves your device: it is not sent to Clarendis, to a hosting provider, or to any third party, and is read only by the clarendis.com pages you visit.
| Information stored | Purpose | Legal basis | Retention |
|---|---|---|---|
| The last twenty pages you viewed: address, title and illustration | Display the “Pages you viewed” strip at the foot of the page and adapt the order of some lists to your browsing | User-interface personalisation — exempt from consent under Article 82 of the French Data Protection Act | 7 days, then automatically erased |
| Your cookie choice | Avoid asking you again on every visit | Keeping proof of the choice | Until you clear site data yourself |
| Your refusal of the “Pages you viewed” strip, if given | Stop displaying it | Carrying out your request | Until you clear site data yourself |
None of this information is an identifier. None allows you to be recognised across devices or across browsers. None is used for audience measurement, advertising profiling or transfer to a third party.
You can erase this information at any time, with no consequence for your browsing: through the “Clear my history” link shown in the “Pages you viewed” strip, or by deleting clarendis.com site data from your browser settings.
08Policy Updates
This privacy policy may be updated at any time to reflect legislative, regulatory or operational changes. The date of last update is shown at the top of this page.