EDICAD GROUP · PERSONAL DATA
Privacy policy
Understand how your data is used, how long it is kept and how to exercise your rights.
Updated: 5 October 2026Your enquiries, our services and the business relationship.
Retention suited to each purpose.
Who is responsible for your data?
Groupe EDICAD, 250 route des Falguières – Planques Ouest, 46230 Fontanes, France, is the controller for the processing described in this policy concerning www.edicad.com and its exchanges with visitors, prospects and clients. For questions or to exercise your rights, contact dpo@edicad.com. Last updated: 5 October 2026. Visiting the site does not constitute consent to marketing or tracking.
What data do we collect?
Depending on your exchanges with EDICAD, data may include your name, company, professional contact details, requests, orders, invoicing, licences and support information. The contact form requests your full name, company, telephone number, email address and message. Fields marked with an asterisk are mandatory; without them, the form cannot be sent. Technical data, including IP addresses, browser information and connection logs, may be processed to operate and secure the site. An IP address may be personal data. Do not include sensitive or unnecessary information in your message.
Why do we use your data, and on what basis?
Responding to requests and preparing an offer: pre-contractual measures requested by you where a proposed contract is involved, or EDICAD’s legitimate interest in answering other professional enquiries. Providing software, licences, orders and support: performance of the contract. Invoicing and accounting: legal obligations. Website operation and security: legitimate interest in protecting the site and its users. Marketing: consent where required, or legitimate interest for professional marketing relevant to the recipient’s role and permitted customer relationships. You may easily object. A contact request does not automatically subscribe you to a newsletter.
How long do we keep your data?
Prospect data used for marketing: three years from collection or the prospect’s last contact. Customer marketing: during the business relationship, then three years after it ends. Invoices and accounting records: ten years from the close of the relevant financial year. Data needed to perform a contract is kept during the contractual relationship. Records required by law or for the defence of rights are then archived for the applicable period, with access restricted to that purpose. Marketing retention periods do not mean that all data is kept for three years.
Who can access your data?
Authorised EDICAD personnel access data according to their duties: enquiries, sales, support and accounting. Technical providers, including hosting provider AMEN, may access data as needed for their services. Contact form requests are managed with Contact Form 7 and may be stored in WordPress through Flamingo. Data may be disclosed to authorities where legally required and to distribution partners where necessary to handle your request or provide the service. Data is not sold to third parties for their own marketing. Processors must be governed by arrangements compliant with the GDPR.
Cookies, third-party services and international transfers
The site uses WordPress components and third-party services, including Google reCAPTCHA for form protection, which may process technical data. Google Tag Manager is also integrated; its presence alone does not identify the analytics or advertising tools actually enabled. Non-essential trackers require prior consent unless a legal exemption applies. Refusing must be as easy as accepting, and consent must be withdrawable. Browser cookie settings do not replace consent required on the site. Depending on the service, data may be processed outside the European Economic Area. Transfers must rely on an adequacy decision or appropriate GDPR safeguards. Contact the GDPR representative for information about recipients, processing locations and safeguards relevant to your situation. External linked sites have their own policies; review them before providing information.
What are your rights?
Subject to the GDPR’s conditions, you have rights of access, rectification, erasure, restriction and portability where applicable. You may object to legitimate-interest processing on grounds relating to your situation and to direct marketing at any time. You may withdraw consent without affecting the lawfulness of earlier processing. You may also give instructions concerning your data after your death. Send requests to dpo@edicad.com or by post to Groupe EDICAD at the address above. Proof of identity will be requested only where there is reasonable doubt about your identity. A response is due within one month, extendable by two months for complex or numerous requests, with notice during the first month. You may lodge a complaint with the CNIL.
Security and confidentiality
EDICAD must implement technical and organisational measures appropriate to the risks to protect data against unauthorised access, loss and alteration. Access must be limited to people who need it for their work. No system guarantees absolute security. Remote support is provided at your request. Close unrelated documents and applications before the session and remain attentive to information displayed on screen.
Contact and updates to this policy
For questions, email dpo@edicad.com. This policy may change to reflect practices and applicable obligations. Its update date appears at the beginning. Material changes requiring specific notice will be communicated appropriately.
Would you like to exercise your rights?
Send your request to our GDPR contact.