Privacy Policy

1. Controller

The data controller responsible for the processing of personal data on this website within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:

Remedy Metals SAS

Registered address: 11 rue de l'académie, 67000 Strasbourg, France

(Labs and office now at: Bioparc 1, 850 Boulevard Sébastien Brant, 67400 Illkirch-Graffenstaden, France)

Email: contact@remedy-metals.com

2. Personal Data Collected

We collect and process the following categories of personal data when you use our contact or newsletter forms:

Name
Affiliation
Email address
Phone number
Message content submitted via contact forms
Technical data such as IP address and timestamps

Providing this data is voluntary but necessary to process your request or send newsletters.

3. Purposes of Processing

Your personal data is processed exclusively for the following purposes:

Responding to inquiries submitted via the contact form
Communicating with interested parties regarding our activities and services
Sending newsletters and company updates where explicit consent has been given
Ensuring security and proper website functioning

No profiling or automated decision-making is carried out.

4. Legal Basis for Processing

Personal data is processed on the following legal basis:

Article 6(1)(a) GDPR – Consent

Your explicit consent (newsletter subscription and contact requests)

Article 6(1)(f) GDPR – Legitimate Interest

Our legitimate interest in responding to inquiries and maintaining professional communication

Consent may be withdrawn at any time without affecting prior processing.

5. Data Retention

Personal data is retained only as long as necessary for the purposes described:

Contact Inquiries

3 years

Newsletter Data

Until consent is withdrawn

Technical Logs

12 months

Legal obligations may require longer retention.

6. Recipients of Data

Personal data is not sold or disclosed to third parties. Data may be processed by technical service providers (e.g. hosting or email services) acting as data processors under Article 28 GDPR, bound by contractual confidentiality and data protection obligations.

7. Data Transfers Outside the EU

Personal data is not transferred to countries outside the European Union or the European Economic Area (EU/EEA). If future service providers involve such transfers, we will update this policy and ensure compliance with Chapter V GDPR.

8. Data Security

We implement appropriate technical and organizational measures under Article 32 GDPR to ensure a level of security appropriate to the risk, including protection against unauthorized access, loss, or disclosure.

9. Data Subject Rights

You have the following rights under the GDPR:

Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure ("right to be forgotten") (Article 17)
Right to restriction of processing (Article 18)

Right to data portability (Article 20)
Right to object to processing (Article 21)
Right to withdraw consent at any time (Article 7(3))

French law also gives you the right to define instructions regarding your personal data after your death.

To exercise your rights, please contact us using the details above.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent supervisory authority in your EU Member State if you believe your personal data is being processed unlawfully.

In France:

Commission Nationale de l'Informatique et des Libertés (CNIL)

www.cnil.fr

11. Cookies

This website uses only strictly necessary cookies essential to its functioning.

We do not use analytics, advertising, or tracking cookies.

See our Cookie Policy for full details.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. The current version is published on this page.

13. Newsletter and Double Opt-In

Newsletter subscriptions are processed using a double opt-in procedure. After submitting the newsletter form, you will receive a confirmation email requesting verification of your subscription. Only after confirmation is your subscription activated.

The double opt-in process is used to ensure that no third party registers using another person's email address and to provide proof of consent in accordance with Article 7 GDPR.

You may withdraw your consent at any time by using the unsubscribe link included in each newsletter or by contacting us directly.

Proof of Consent

To comply with Article 7(1) GDPR, we store:

Timestamp of subscription
Timestamp of confirmation
IP address used during subscription