Privacy Policy
Updated in March 2025
Welcome to the website https://www.idexlab.com/, which is owned by G.A.C. Group, the entity responsible for processing your personal data.
G.A.C. Group, an innovation and performance consulting firm, is committed to protecting your privacy and personal data. This information notice is intended to explain how we, G.A.C. Group, collect, use, and share the information you provide through the website https://www.idexlab.com/. Please read this notice in its entirety before using our website or providing any information about yourself.
We take all necessary measures to ensure an adequate level of security for your personal data, in accordance with Law No. 78-17 of January 6, 1978 (known as “Informatique et Libertés”) and the European regulation, the GDPR (General Data Protection Regulation No. 2016/79 of April 27, 2016).
In compliance with applicable regulations, you have the right to access, rectify, erase, port, restrict, and object to the processing of your personal data. You may exercise these rights by contacting our Data Protection Officer (DPO) at: dpo@group-gac.com, along with proof of your identity.
- Why and how do we collect your personal data?
- What personal data do we collect?
- Who are the recipients of your personal data?
- Where are your data stored, and are they secure?
- Will your personal data be transferred outside the European Union?
- How long do we retain your personal data?
- What are your rights regarding your personal data?
For the purposes of this website, your data may be collected for the following purposes and on the legal bases described below:
| Purpose | Legal Basis | Mode of Collection |
|---|---|---|
| Processing No. 1: Responses to information requests and event registrations, management of business relationships, and prospecting | Consent | Via the “Contact Form” and/or the registration form |
| Processing No. 2: Management of unsolicited applications and responses to job postings | Consent | Via the “Application Form” |
| Processing No. 3: Statistics, audience measurement, and site performance | Consent | Via cookies installed on your browser |
We collect and process, in particular:
- Your name, company, address, email address, and, optionally, your telephone number and job title (in the context of information requests);
- Your first name, last name, email address, and CV (in the context of unsolicited applications);
- Your browsing data, such as viewed products and other relevant metrics (in the context of audience measurement).
Fields marked with an asterisk are mandatory. Without them, G.A.C. will not be able to process your request.
Your personal data is transmitted and processed by the Marketing, Communication, Human Resources, and Sales departments of G.A.C. Group. They are stored in our databases or those of our service providers, which are located within the European Union.
We implement all appropriate technical and organizational measures to ensure the security and confidentiality of your data, to prevent any alteration, and to avoid unauthorized access by third parties.
Data transfers outside the EU may occur. In such cases, G.A.C. ensures that these transfers are covered by standard contractual clauses or any other mechanism recognized as compliant with the GDPR.
Data is retained for as long as is necessary to fulfill the purposes for which it was collected. For example:
Recruitment data is stored for two (2) years from the date of last contact.
You have the right to access, rectify, delete, restrict, port, and object to the processing of your personal data on legitimate grounds. You may also withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to the withdrawal.
You can exercise your rights by writing to our DPO at: dpo@group-gac.com.
In the event of a personal data breach, G.A.C. is committed to notifying the CNIL and, where applicable, the affected individuals within 72 hours.
Finally, you have the right to lodge a complaint with the CNIL.
