Privacy Policy

Last updated: July 2026

Through this Privacy Policy, Léko informs users of the website www.leko-organisme.fr (the “Site”) about how Léko collects and manages their personal data, in accordance with applicable regulations governing personal data, specifically Regulation (EU) No. 2016/679, known as the “GDPR,” and the amended French Data Protection Act No. 78-17.

Personal data refers to any information relating to an identified or identifiable natural person.

1. Data Controller

The personal data collected on this website is processed by:

LÉKO SASU

1 rue de Stockholm, 75008 Paris

Paris Commercial Register: 823 308 820

Share capital: €1,003,290.00

Phone: 01 45 26 95 66

Email: contact@leko-organisme.fr

2. Data Collected

Depending on how you use the site, the following categories of data may be collected:

• Identification and contact information: first and last name; company; email address; phone number;
• Content and communication data: the content of messages submitted via forms;
• Browsing data and technical information necessary for the website to function.

3. Purposes of Data Processing

Data is collected in order to:

• Respond to inquiries submitted via the contact form;
• Manage relationships with members, partners, and prospects;
• Send informational messages or newsletters when the user has given consent;
• Ensure the safety and smooth operation of the site;
• Compile traffic statistics;
• Compliance with legal obligations and dispute resolution.

4. Legal Basis for Data Processing

Treatments are based on:

• The user's consent, when required;
• The performance of precontractual measures at the user’s request;
• LÉKO SASU’s legitimate interest in ensuring the operation and improvement of its services;
• Compliance with applicable legal obligations.

5. Recipients of the data

The data is intended exclusively for authorized departments of LÉKO SAS, as well as for technical service providers involved in the hosting, maintenance, or operation of the website.

Data is neither sold nor transferred to third parties.

6. Shelf Life

Personal data is retained for no longer than is strictly necessary for the purposes for which it was collected.

Data from contact forms is retained for a maximum of three (3) years from the date of the last communication.

The data used to send newsletters is retained until the user withdraws consent or unsubscribes, without retroactive effect on processing that has already taken place.

Cookies are retained in accordance with applicable regulations and for a maximum period of thirteen (13) months.

Data necessary to comply with a legal obligation or to manage a legal dispute: for the period required by law and until the conclusion of the proceedings.

In addition, the data may be temporarily archived with restricted access for the applicable retention period, or anonymized for statistical purposes.

7. Cookies and Other Trackers

The Site uses cookies or similar technologies that are stored on the user's device while the user is browsing.

These cookies may be:

• strictly necessary for the operation of the Site;
• for the purposes of audience measurement and content personalization.

Except when the sole purpose of a cookie is to enable or facilitate electronic communication, the placement of cookies is subject to the User’s prior consent, which is obtained through a consent collection mechanism (banner, preference management module, etc.).

Users can change their preferences at any time using the consent manager available on the Site.

8. Rights of Data Subjects

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

• Right of access: to obtain confirmation that personal data concerning you is being processed and, if so, to receive a copy of it;
• Right to rectification: request the correction of inaccurate or incomplete data;
• Right to erasure: Request the erasure of your data in the cases provided for by law (withdrawal of consent, data that is no longer necessary, unlawful processing, etc.);
• Right to object: You have the right to object, on grounds relating to your particular situation, to certain processing activities based on our legitimate interests; you may also object to marketing communications at any time;
• Right to restriction of processing: to obtain the temporary suspension of processing in the event of a dispute regarding the accuracy of the data, unlawful processing, or while a request to object is being reviewed;
• Right to data portability (if applicable): to receive the data you have provided to us in a structured, commonly used, and machine-readable format when the processing is based on your consent or a contract and is carried out using automated means;
• You have the right to withdraw your consent at any time.

To exercise your rights, you may submit your request to:

contact@leko-organisme.fr

or by mail to:

LÉKO SASU

1 rue de Stockholm, 75008 Paris

9. Complaint Filed with the CNIL

If you believe your rights have not been respected, you may file a complaint with the French Data Protection Authority (CNIL): www.cnil.fr

10. Data Security

LÉKO SASU implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of the personal data it processes.

11. Policy Change

This privacy policy may be amended at any time to reflect changes in laws, regulations, or technology.

In the event of a substantial change affecting your rights or the nature of the data processing, you will be notified of this change through an appropriate means (information banner, website notification, email, etc.).

The current version is the one published on the website as of the date of access.

By continuing to use the Site after the effective date of the revised version, you acknowledge that you have read the updated privacy policy.