Privacy Policies

Privacy Policy for Our Websites

The websites www.gac-software.com, www.gac-carfleet.com, www.gac-res.com, and www.gac-infoparc.com (hereinafter “the Site” or “the Sites”) were developed by companies within the GAC SOFTWARE group (hereinafter “GAC SOFTWARE”), a publisher of business management software. Personal data collected on the Sites is processed by the respective companies that publish the Sites, and compliance with data processing regulations is managed centrally by the GAC Software Group.

General

The User may be required to provide personal data (hereinafter “the Data”) by filling out the fields indicated on the Sites when submitting a contact request, registering for personalized demo services, or signing up for a web conference.

“you,” “your,” “your,” “User” or “Visitor” means any individual who accesses the Site and uses the Service governed by this Privacy Policy.

The GAC SOFTWARE Group places the utmost importance on the confidentiality of your information and personal data.

For this reason, this Privacy Policy has been established in accordance with applicable laws, regulations, and standards and is intended to provide clear, simple, and comprehensive information to all affected individuals, particularly Users, about how GAC SOFTWARE and its subsidiaries, in their capacity as data controllers, collect and use your personal data, and about the means available to you to control such use and exercise your related rights. It explains what personal data is processed by the Site, how it is processed, by whom, and for what purposes.

This Privacy Policy therefore applies to anyone who accesses the Site. The content and data of our Service are also available to users who are simply browsing the Site (“Visitors”).

To use our Services, you must be at least 16 years old; if you are not, you are not authorized to use our Services.

The websites are hosted exclusively in OVH’s data centers located in France.

1. Data Controller

Under this policy, each company in the GAC Software Group is responsible for the personal data it collects and stores and will be designated as the “Data Controller.” Depending on the page you are viewing, the data controller may vary; you can identify the entity that publishes the site in the “Legal Notice” tab at the bottom of the page.

Here are the names and contact information for the data controllers at the GAC Software Group:

On the website www.gac-software.com:

GAC Software, a simplified joint-stock company (SAS) with a share capital of €27,135,367.00
21 rue Antonin Laborde, 69009 Lyon, France
Registered with the Lyon Trade and Companies Register under number: 917 536 161
Phone: +33 (0) 4 37 49 63 60
Email: contact@gac-software.com / dpo@gac-software.com

On the website www.gac-carfleet.com:

GAC Technology, a simplified joint-stock company (SAS) with a share capital of €141,285.10
21 rue Antonin Laborde, 69009 Lyon, France
Registered with the Lyon Trade and Companies Register under number 500 168 208
Phone: +33 (0) 4 37 49 63 60
Email: contact@gac-software.com / dpo@gac-software.com

On the website www.gac-res.com

GAC Real Estate Software, SAS with a share capital of €30,000.00
21 rue Antonin Laborde, 69009 Lyon, France
Registered with the Lyon Trade and Companies Register under number: 890 167 471
Phone: +33 (0) 4 37 49 63 60
Email: contact@gac-software.com / dpo@gac-software.com

On the website www.gac-infoparc.com

GAC IP, a simplified joint-stock company (SAS) with a share capital of €15,000.00
21 rue Antonin Laborde, 69009 Lyon, France
Registered with the Lyon Trade and Companies Register under number: 921 570 503
Phone: +33 (0) 4 37 49 63 60
Email: contact@gac-software.com / dpo@gac-software.com

2. What personal data is collected?

The personal data collected through the Sites is as follows:

Identification Information: When a User submits a contact request, the data controller collects the User’s last name, first name, email address, and phone number, as well as the name of the User’s company.

Browsing data: information regarding the devices used by the User to access the Sites, IP address, connection data, types of web browsers, and the content you access.

Cookies: electronic identification data. Cookies are used in connection with the use of the Sites. Users can choose whether to allow cookies while browsing the Sites. If you block or refuse cookies that are strictly necessary for the Sites to function, certain features may not work.

3. Use of Personal Data: Why Is It Collected?

The purpose of collecting personal data from Users is to enable those Users to contact the Data Controller and to improve and maintain a secure environment for the Sites.

More specifically, the uses are as follows:

User Access to and Use of the Sites: We need your data to process your contact request and provide personalized follow-up,

Site Operation and Optimization: Your data is used for analytical purposes; we collect and analyze information about your recent visits to the Sites and how you navigate them in order to understand how visitors use our Sites, make them more intuitive, and optimize their operation,

Verification, identification, and authentication of data submitted by the User,

Prevention and detection of fraud and malware (malicious software), and management of security incidents,

Sending commercial and promotional information when the User has consented to receive it.

4. Sharing Users’ Personal Data with GAC SOFTWARE’s Data Processors and Third-Party Companies: Who Has Access to Your Personal Data?

Your data remains for the exclusive use of the Data Controller. It may only be disclosed to the recipients listed below to the extent that the transfer of such data is necessary to fulfill the purposes listed in Section 2 above.

The User’s personal data may be shared among companies within the GAC Software Group, as well as with GAC Software’s subcontractors and third-party companies, for the purpose of providing hosting and maintenance services for the customer database(s).

Service providers have limited access to the data for the purpose of performing these services and are contractually obligated to use it in accordance with the provisions of applicable regulations regarding the protection of personal data,

If required by law, companies within the GAC SOFTWARE Group may disclose data in order to respond to legal or regulatory requests, court orders, subpoenas, or legal proceedings, and to comply with administrative and judicial procedures,

If the Data Controller is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, it may be required to transfer or share all or part of its assets, including personal data. In such a case, Users would be notified before any personal data is transferred to a third party.

5. Shelf Life

In accordance with the law, your personal data is retained only for as long as necessary to fulfill the purposes mentioned above or to enable the Data Controller to meet its legal obligations.

Therefore, the data collected when you submit a contact request is retained for as long as necessary to process it.

Connection data (logs) are retained for a maximum of one year.

Personal data used for marketing purposes may be retained for a maximum of three (3) years from the date of the last interaction.

6. Transfer of Personal Data Abroad

The Data Controller informs the User that, to date, no personal data has been transferred outside the EU. The data being processed is hosted in France or within the European Economic Area.

In any event, the Data Controller undertakes to comply with the legal provisions governing the transfer of personal data abroad: any transfer of data outside the EU will be based on an adequacy decision, governed by standard contractual clauses for data protection, or governed by ad hoc contractual clauses previously authorized by the CNIL.

7. Security and Privacy

The companies of the GAC SOFTWARE Group implement organizational, technical, software, and physical measures related to digital security to protect personal data against alteration, destruction, and unauthorized access. However, it should be noted that the Internet is not a completely secure environment—no technology is 100% reliable—and the Site cannot guarantee the security of the transmission or storage of information over the Internet.

All of our employees and service providers are required to ensure the security and protection of your data.

8. Enforcement of Users’ Rights

In accordance with the regulations governing personal data, Users have the following rights:

You may request information regarding how the Data Controller uses your personal data.

You can update or delete your personal data by sending an email to dpo@gac-software.com.

You may exercise your right of access to find out what personal data we hold about you by writing to the following email address:dpo@gac-software.com. In this case, before granting access, the Data Controller may request proof of the User’s identity in order to verify its accuracy,

If the personal data held by the Data Controller is inaccurate, you may request that the information be updated by writing to the email address dpo@gac-software.com,

Users may request the deletion of their personal data, in accordance with applicable data protection laws, by writing to the email address dpo@gac-software.com,

You may also withdraw your consent to receive direct marketing messages and object to the processing of your data.

If you receive an unsatisfactory response or no response within thirty days of your request, you may file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés) – www.cnil.fr.

9. Changes to the Privacy Policy

The Data Controller reserves the right to make any changes to this Privacy Policy at any time. If any changes are made to this Privacy Policy, the Data Controller agrees to publish the new version on its Website.

10. Learn more

For more information about our Privacy Policy, you can contact the Data Controller by mail at the following address: 21 rue Antonin Laborde, 69009 Lyon, France.

Or via email at: dpo@gac-software.com

11. Cookie Policy

Cookies are used to facilitate navigation on websites and to streamline registration and audience measurement processes. The Data Controller informs the User that cookies record certain information that is stored in the User’s computer’s memory. We use tracking technologies, including cookies, to tailor advertising to your needs and interests on our Sites.

While browsing the Site, a banner explaining the use of“cookies”will appear. The User will have the option to accept or decline the use of cookies.

Cookies on the Websites

The Data Controller uses cookies to provide content and a Service tailored to the User, and to enable the Data Controller to compile visitor statistics, record the data provided, and optimize the user experience.

There are several types of cookies on the Sites. These cookies serve the following purposes:

Cookies necessary for the Websites to function,

Cookies used for audience measurement,

Cookies used for geolocation of content,

Identification Cookies

Cookies necessary for the Websites to function:

These cookies are necessary for the proper functioning of the Sites and for navigating the Sites. They allow the User to access the Sites’ main features. Please note that changing cookie settings may affect access to Services that require the use of cookies. If the browser is configured to reject all cookies, the User will not be able to access the Sites’ features because they will not be able to remain logged in. To enable the User to give clear and valid consent, they have the option to make a selection based on the purpose of each cookie.

For more information on how to use, manage, and delete “ cookies ” for any type of browser, please visit the following link: here

Job Applications – Recruitment Data Processing Policy

As part of the application review process, our company collects and processes personal data about you. In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, we hereby inform you of the conditions under which your data is processed.

1. Identity of the Data Controller

Human resources are managed at the GAC Software Group level, which will be responsible for processing data related to job applications:

Phone: +33 (0) 4 37 49 63 60
Email: contact@gac-software.com / dpo@gac-software.com

2. Purposes of Processing and Legal Bases

Your personal data is collected and processed for the following purposes:

Objectives	Legal Basis
Manage and evaluate your application (profile analysis, scheduling interviews)	Pre-contractual measures (Art. 6.1.b GDPR)
Candidate Pool Management (unsolicited applications, future hires)	Legitimate interests of the company (Art. 6.1.f of the GDPR)
Compliance with legal obligations related to hiring (verification of residency status, DPAE, etc.)	Legal obligation (Art. 6.1.c of the GDPR)
Recommendations from unsuccessful candidates via dedicated platforms or third-party professional networks	Candidate’s Consent

Regarding RQTH (Recognition of Status as a Worker with a Disability): This health-related information will only be processed if you choose to voluntarily provide it to us, so that we can tailor the recruitment process to your specific needs. Its processing is based on your explicit consent (Art. 9.2.a GDPR).

3. Personal Data Collected

Data collected on a routine basis:

Title, last name, first name

City, mobility zone

Previous Work Experience

Degrees and Qualifications

Skills (assessed through tests, resumes, and interviews)

Information that the candidate may voluntarily provide (which will under no circumstances be requested during the recruitment process):

Age, date of birth

Photo (if included on your resume)

Family status, number of children

Mailing Address

Nationality

Health information (special category):

RQTH – only if you voluntarily provide this information

⚠️ Please note that your application should not include any information regarding racial or ethnic origin, political opinions, religious or union beliefs, or sexual orientation. If such information is provided to us If they were received, they would not be taken into account when processing your application.

4. Shelf Life

Rejected Applications	1 year from the last contact with the candidate
Selected Applications	The data is included in the employee file and retained in accordance with the rules applicable to employees

Once these time periods have expired, your data will be deleted from our systems, unless otherwise required by law.

5. Recipients of the Data

Your data is accessible, within the limits of their respective responsibilities, to the following individuals:

Members of the HR department and management involved in recruitment

Managers and department heads involved in the position

Where applicable, technical service providers (ATS tools, recruitment platforms) acting as subcontractors

Employees who have nominated candidates, if applicable, when they forward the resume to members of the HR department

If the candidate expressly consents, a third-party professional platform or network in connection with a recommendation of the unsuccessful candidate

No data is transferred outside the European Union as part of this processing.

6. Your Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

Law	Description
Right of Access	Obtain a copy of your personal data
Right to Correction	Correct Inaccurate or Incomplete Data
Right to Restriction	Temporarily suspend treatment
Withdrawal of Consent	Withdraw your consent at any time (for processing based on consent)

To exercise your rights, you can contact our DPO at dpo@gac-software.com or by mail at our corporate headquarters address.

7. Automated Decision-Making and Profiling

No decisions regarding you are made based solely on fully automated processing. All hiring decisions involve human review.

8. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, disclosure, or destruction. Access to your data is strictly limited to authorized personnel.