INGRECOS (hereinafter referred to as “we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect the personal data you provide when using our website ingrecos.com.

We comply with the French Data Protection Act No. 78-17 of January 6, 1978, as amended, and the General Data Protection Regulation (GDPR), adopted by the European Parliament on April 27, 2016, as well as all applicable laws and regulations.

1. Scope and Exclusions

This Policy applies to all processing of personal data carried out by INGRECOS via its website.

2. Data Collected

“Personal data” or “personal information” refers to any information that can directly or indirectly identify a natural person, as defined by Article 4 of the GDPR (2016/679). This includes, but is not limited to: name, first name, IP address, email address, etc.

Nous collectons vos données personnelles directement auprès de vous.

We collect your personal data directly from you, particularly when you:

• Fill out a contact form
• Register via an inscription form
• Request an Extranet access code

Some information in the forms is mandatory. Failure to provide this information will prevent us from processing your request or allowing you to use the tool or service.

We may collect the following types of personal data:

• Identity information (name, first name)
• Contact details (email address, organization / company)
• Usage data (information about how you use our services and sites)
• Technical data (IP address, browser type, time zone)

3. Purpose of Data Collection

Your personal data is collected for one or more of the following purposes:

• To contact individuals who have provided their contact information
• To respond to inquiries
• To send newsletters about our association’s news
• To process your Extranet access code request
• To manage event registrations

We commit to collecting only the data strictly necessary for the intended purpose, in order to process your requests.

4. Legal Basis for Processing Your Personal Data

The collection of personal data described above is carried out because it is necessary:

• For the performance of contracts we are about to enter into or have entered into with you (only for registration/membership requests)
• To comply with our legal obligations

In other cases, data is collected based on your consent, for example when you fill out a contact form.

5. Recipients of Personal Data

The personal data collected about you is intended for INGRECOS staff.

We never share your personal data with third parties without your explicit consent, except when required by law or to comply with legal obligations.

Si nécessaire, nous divulguerons vos données personnelles sur demande légale ou pour se conformer à des obligations légales.

6. Data Retention Period

Personal data is not retained for longer than necessary to fulfill the purposes for which it was collected. Once the data is no longer needed for the purpose for which it was collected, it will be archived or deleted.

7. Data Security and Confidentiality

The security and confidentiality of your personal data is a priority for us.

We implement all necessary technical and organizational measures to protect your personal data and prevent it from being distorted, damaged, or accessed by unauthorized third parties.

To this end, we have implemented the following technical measures:

A cette fin, nous avons mis en place des mesures techniques telles que :

• A secure website using HTTPS, which encrypts data exchanged between your browser and our servers, preventing third parties from easily reading personal data entered and sent via forms
• Compliance of our contact and registration forms
• Hosting of our sites on secure servers located in France

INGRECOS undertakes not to transfer personal data to any country outside the European Union.

8. Cookies

Cookies used on our site help identify the services and sections you have visited, as well as your browsing behavior.

This information is used to personalize content and improve your experience on our site. Cookies are also used to measure audience via third-party services. You may opt out of tracking on this website.This will protect your privacy but may also prevent the site owner from learning from your actions and improving the experience for you and other users.

9. Links to Other Websites

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on these links may allow third parties to collect or share data about you. We do not control these websites and are not responsible for their privacy policies.

10. Newsletter

Data collected from this form is used exclusively by INGRECOS to process your subscription request. By checking the relevant box, you also agree to receive our newsletter. Your data will be retained for the duration of the processing and up to one year after the last contact.

11. Your Rights

You have the right to access, rectify, erase, and port your data, as well as the right to object to and restrict processing. You may exercise these rights by contacting INGRECOS at: sg@ingrecos.com 

Right to Information

INGRECOS provides the necessary information whenever personal data is collected.

Right of Access

Any data subject has the right to obtain confirmation from the data controller as to whether or not their personal data is being processed and, where it is, to access the data and certain additional information. This right also includes obtaining a copy of the data being processed.

Right to Rectification

Any data subject has the right to request that their data be corrected or completed.

Right to Erasure or “Right to be Forgotten”

In cases provided for by regulation, any data subject has the right to request the erasure of their data. If the data has been transmitted to other entities (service providers), the “right to be forgotten” mechanism is triggered: the data controller will take all reasonable steps to inform the other entities that you have requested the erasure of any links to your personal data, or any copy or replication thereof.

Right to Restriction of Processing

In cases provided for by regulation, any data subject has the right to request that the processing of their data be restricted. In case of restriction, the data will be retained but no longer processed.

Right to Data Portability

In cases provided for by regulation, any data subject has the right to receive the data they have provided in a structured, commonly used, and machine-readable format. Where technically feasible, they may also request the direct transfer of their personal data to another data controller.

Right to Object

In cases provided for by regulation, any data subject has the right to object at any time, for reasons relating to their particular situation, to the processing of their personal data.

Right to Lodge a Complaint with a Supervisory Authority

Any data subject has the right to lodge a complaint with the relevant supervisory authority if they believe their rights are not being respected. In France, the competent supervisory authority is the CNIL (www.cnil.fr).

12. Changes to This Privacy Policy

INGRECOS reserves the right to periodically update this policy. Any substantial changes will be published on our website or communicated to you by other available means. We recommend that you regularly review this page to stay informed about how we process your personal data.

This Privacy Policy was last updated on 08/10/2025.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us.