Data Protection Policy
Purpose and Scope of the Policy
LEC, a subsidiary of the RAGNI Group, places the utmost importance on and exercises the greatest care in protecting privacy and personal data, as well as in complying with applicable legislation.
Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”) states that personal data must be processed lawfully, fairly and transparently.
Accordingly, this data protection policy (hereinafter the “Policy”) aims to provide you with clear and simple information about the processing of your personal data, in particular in connection with your browsing activity and operations carried out on our website.
Data Controller
The data controller of your personal data, within the meaning of applicable data protection regulations and in particular the GDPR, is LEC, a simplified joint-stock company (SAS) with share capital of €25,000, whose registered office is located at 69 rue Gorge de Loup, 69009 Lyon, France.
All information relating to LEC can be found on our Legal Notice page.
Why do we collect your personal data?
This Policy applies to the collection and processing of your personal data for specific purposes and on various legal bases.
In the context of the performance of a contract or pre-contractual measures, your data is processed for the following purposes:
- Management of quotations;
- Management of orders and purchases;
- Management of contracts with customers/suppliers;
- Management of complaints and after-sales service.
On the basis of your consent, your data is processed for the following purposes:
- Management of cookies requiring your consent (cookies used for audience analysis purposes).
In the context of LEC’s legitimate interest, your data is processed for the following purposes:
- Management of information requests;
- Management of communications;
- Management of IES file downloads;
- Management of relationships with prospects/customers;
- Management of commercial events;
- Management of unsolicited applications or applications submitted in response to a job offer;
- Management of the proper functioning and continuous improvement of the website (via technical cookies);
- Management of pre-litigation and litigation.
In the context of the legal and regulatory obligations to which LEC is subject, your data is processed for the following purposes:
- Maintenance of general and auxiliary accounting;
- Management of your personal data rights.
The personal data we collect about you
Personal data is processed in compliance with the principle of minimisation imposed by the GDPR. The nature and quality of the personal data processed vary according to the relationships you have with LEC, the main ones being:
- Identification data: this includes all information that allows us to identify you, such as your surname, first name and telephone number. We also collect your email address and your postal address (in the event of payment, the postal address is required to generate an invoice).
- Professional data: this data mainly concerns information you provide to us as part of a recruitment process or a professional relationship. This includes your CV, cover letter, diplomas, professional experience, skills, as well as, where applicable, any other information useful for assessing your application or managing the employment relationship.
- Financial data: this corresponds to banking data such as bank account details (IBAN).
- Information relating to your browsing: when you browse our website, you interact with it. As a result, certain information relating to your browsing is collected.
- Data collected from our network of sales agents/distributors: our network of agents/distributors carries out commercial prospecting and the day-to-day management of customer relationships. As such, agents may collect certain personal data about you in the course of their assignments, such as your contact details (surname, first name, email address, telephone number), as well as information relating to your commercial needs or interests. This information is then transmitted to LEC in order to ensure continuity of the commercial relationship and follow-up of your requests.
Recipients of your personal data
Your data is intended for authorised LEC employees responsible for managing and executing contracts and legal obligations, according to the purposes of the collection and within the limits of their respective responsibilities.
It may be communicated, for certain tasks related to the purposes and within the limits of their respective missions and authorisations, to the following recipients:
- Entities of the Ragni Group as part of the outsourcing of activities to another group entity (in particular the sending of communications);
- Our network of sales agents/distributors;
- Service providers to whom we outsource a set of operations and tasks on our behalf, in particular:
Management of order transportation - Website audience analysis
- Data hosting
- Commercial prospecting
- After-sales service
- Duly authorised public authorities (judicial, supervisory, etc.) as part of our legal and regulatory obligations;
- Regulated professions (lawyers, bailiffs, etc.) which may intervene in the implementation of guarantees, debt collection or litigation.
When your data is communicated to our service providers, they are also required not to use the data for purposes other than those initially provided for. We make every effort to ensure that these third parties preserve the confidentiality and security of your data.
In all cases, only the necessary data is provided. We make every effort to ensure secure communication or transmission of your data.
We do not sell your data.
Transfer of your data to third countries
LEC endeavours to keep personal data in France, or at least within the European Economic Area (EEA).
However, it is possible that the data we collect when you use our website or in the context of our services may be transferred to other countries, for example where some of our service providers are located outside the EEA.
In the event of such a transfer, we guarantee that it is carried out:
- To a country ensuring an adequate level of protection, i.e. a level of protection equivalent to that required by European regulations;
- Under standard contractual clauses;
- Under binding corporate rules.
If you wish to obtain more information on these transfers, please send your request to the address indicated in the section “Your contacts”.
Technical and organisational measures to protect your data
LEC undertakes to protect the personal data we collect or process against loss, destruction, alteration, unauthorised access or disclosure.
To this end, we implement all appropriate technical and organisational measures, depending on the nature of the data and the risks associated with their processing. These measures are intended to preserve the security and confidentiality of your personal data. They may include practices such as restricted access to personal data by authorised persons due to their functions, pseudonymisation or encryption.
In addition, our practices, policies and/or physical and/or logical security measures (secure access, authentication procedures, backups, software, etc.) are regularly reviewed and updated where necessary.
Retention period of your personal data
Your personal data is retained at a minimum for the duration of the processing related to our contractual relationship. Beyond this relationship, these periods are extended to take into account statutory limitation periods and legal and regulatory retention obligations.
For prospects, the maximum possible retention period of the data collected is three (3) years from the last contact between LEC and the prospect, unless you request the deletion of your data.
For unsuccessful candidates, your data (in particular CVs and related information) may be retained for a maximum period of two (2) years from the last contact, unless you object.
When you exercise your rights, our Data Protection Officer processes your personal data for the purposes of managing your request (title, surname, first name, copy of identity document, nature of the request, response provided). This data is retained for a period of five (5) years, with the exception of the copy of your identity document – if required – which is retained only for the time necessary to carry out verifications or comply with a legal obligation.
More detailed rules on retention periods are available on a case-by-case basis upon request under the right of access (see section “Your rights regarding your personal data”).
Your rights regarding your personal data
At any time, you may exercise your rights with LEC by contacting the address indicated in the section “Your contacts”.
- Right to object: you may request that your personal data no longer be subject to a specific processing operation, except where the legal basis for the processing is a legal obligation or the performance of a contract.
- Right to withdraw your consent: for all processing operations requiring your consent, you have the right to withdraw it at a later date.
- Right of access: you may request access to your personal data and additional information relating to the processing carried out.
- Right to rectification: you may request the rectification of inaccurate or incomplete personal data.
- Right to erasure: you may request the erasure of your personal data at any time, subject to legal retention requirements.
- Right to restriction of processing: you may request the restriction of processing of your personal data.
- Right to data portability: you may request a copy of the personal data you have provided in a structured format.
- Right to define post-mortem instructions: you may provide instructions regarding the retention, deletion or communication of your data after your death.
If the response received does not satisfy you or in the absence of a response, you may lodge a complaint with the CNIL in accordance with the procedures set out on its website.
Your contacts
To exercise your rights or for any additional information or complaint, you may contact LEC’s Data Protection Officer (DPO) by email at dpo@lec.fr.
When submitting a request to exercise your rights, you are asked to specify as precisely as possible the scope of the request, the type of right exercised, the personal data processing concerned and any other useful information in order to facilitate the examination of your request. In addition, in the event of reasonable doubt, you may be asked to provide proof of your identity.
The exercise of your rights is strictly personal and applies only to the requesting individual, or to a legal guardian acting on behalf of a minor or a protected adult. It cannot apply to another family member or a person living in the same household without proof of a legal mandate.
Amendment of this Policy
LEC may amend this Data Protection Policy as necessary. We will ensure that you are informed in the event of any substantial modification.
Date of last update: January 2026