Privacy policy
This policy explains how GE2Smart handles information submitted through its public website.
English translation of the French privacy policy, with the same purposes, rights and retention information.
Data controller
Eric Pignol, sole trader — GE2Smart
115 rue du Comte des Permissions, 01220 Divonne-les-Bains, France
Contact: contact@GE2Smart.com
Information collected
Depending on the form used, GE2Smart may receive your name, work email address, phone number, company, industry, website, current tools, description of the process or need, user profiles and numbers, desired outcome, indicative budget, currency, timing and any information voluntarily entered in free-text fields.
Fields marked with an asterisk are necessary to respond to the request. Other fields are optional. Please do not submit passwords, health data, trade secrets or other people's personal information through public forms.
Purposes and legal bases
Information is used to receive, assess and respond to contact, callback or diagnostic requests; prepare a conversation, project scope, proposal or requested pre-contractual steps; follow up relationships with prospective and existing clients; prevent abuse and secure the website; and meet applicable legal, accounting and administrative obligations.
Requested pre-contractual steps rely on Article 6(1)(b) of the GDPR. Reasonable follow-up of conversations and website security rely on GE2Smart's legitimate interests under Article 6(1)(f). Processing required by law relies on Article 6(1)(c).
Public forms do not automatically subscribe anyone to a newsletter or electronic marketing.
Recipients and service providers
Information is accessible to Eric Pignol and, only where necessary, to technical providers involved in hosting, email, maintenance and security. It is not sold or shared with partners for their own marketing.
The website is hosted by Hostinger. Notifications use the email service configured for GE2Smart. Technical providers are subject to applicable processor obligations when acting on GE2Smart's behalf.
Retention periods
- Contact, callback and diagnostic requests that do not lead to a contract: no more than three years from collection or the latest contact initiated by the prospect, unless erasure is requested or some information needs to be retained temporarily to establish, exercise or defend a legal claim.
- Contract-related information: during the relationship, followed by restricted archiving for the applicable statutory retention or limitation periods.
- Abuse prevention: a hashed technical identifier derived from the IP address limits submissions, with a validity of one hour. A second hashed identifier, derived from the contact details and IP address, prevents duplicates for three minutes. These periods apply to the theme's controls, not the hosting provider's logs. The invisible anti-bot field is not used for another purpose.
- Technical logs under GE2Smart's control: a period proportionate to security and incident diagnosis. Logs managed directly by the hosting provider follow that provider's policies.
Website assistant and voice dictation
The GE2Smart assistant searches a controlled collection of public website content. In this version, the theme does not send typed questions to an external generative AI service or add them to commercial enquiries.
When voice dictation is available and enabled, recognition depends on the user's browser or operating system. GE2Smart does not retain audio recordings in the theme. Typing remains available without enabling the microphone.
Cookies and audience measurement
In this version, the GE2Smart theme does not include advertising trackers or a third-party audience measurement tool for visitors. Strictly necessary elements may be used by WordPress, the hosting provider, active plugins or security mechanisms. Any future activation of a non-essential tracker will require an update to this policy and, where required by law, a consent mechanism.
Transfers outside the European Economic Area
Some providers may process information from several countries. Where a transfer outside the European Economic Area is necessary, it must rely on a mechanism recognised by the GDPR, such as an adequacy decision or standard contractual clauses.
Your rights
Depending on the legal basis and conditions set by the GDPR, you may request access to your information, its rectification or erasure, restriction of processing, object to certain processing, and exercise the right to data portability where applicable.
Requests can be sent to contact@GE2Smart.com. Proof of identity will only be requested where there is reasonable doubt and in a proportionate manner. GE2Smart responds within the statutory period, generally one month. You may also lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL).
Automated decisions
Public forms do not give rise to decisions producing legal effects based solely on automated processing. Requests are reviewed by a person.
Last updated
13 September 2026 (technical clarification of abuse-prevention controls and English translation).