Privacy policy

If you have any questions or problems concerning Luci association’s data processing procedures, please contact the Data Protection Officer at the following e-mail address :
This Policy concerns the Protection of Personal Data (hereinafter “DCP”) as implemented by

This Policy describes how we, the subcontractor, collect and use your personal data in connection with the website and related services, on behalf of our customers who have adopted a Privacy Policy that complies with the applicable rules (see below).
This Data Protection Policy does not apply to “content” processed, stored or hosted by our customers using other offers or services: this Policy does not apply to any product, service, website or content offered by third parties or governed by its own data protection policy.
This Policy outlines our policies and practices relating to your personal information (information about you that can be used to identify you) and how we treat it. This Policy may be modified at any time (see Modifications).

Reminder :
The data controller is, within the meaning of the Data Protection Act and the RGPD, the person who determines the means and purposes of the processing. When two or more data controllers jointly determine the purposes and means of the processing, they are the joint data controllers (or co-controllers). The processor is a person who processes personal data on behalf of the controller, acting under the authority of the controller and on the latter’s instructions.



Sensitive to the challenges of privacy and personal data protection, Luci association committed to the RGPD compliance process very early on.

Luci association is committed to protecting your privacy, confidentiality and security.
Our goal is to offer you our services while respecting your privacy and the commitments we have made in our Two Data Protection laws:

  1. Your data belongs to you
  2. Your data is protected

Luci association undertakes to protect your personal data and not to disclose them without your prior consent.
We collect some of your personal data for the sole purpose of carrying out the tasks related to the purposes for which they are collected and processed (prospecting and commercial relations, customer service, recruitment).
Luci association is committed to offering its services and resources in accordance with the requirements of the General Data Protection Regulation (GDPR).
We confirm that we have completed our RGPD compliance audit: all available services and features comply with the privacy and data protection standards required by the RGPD.
If you have an unresolved privacy or data use issue that we have not satisfactorily addressed, please contact (free of charge):

Protecting the information entrusted to us is very important to us.

  1. Prolegomena
  2. Data collected and method of collection: General rules
  3. Purpose of data collection
  4. Data retention period
  5. Storage location
  6. Your obligations
  7. Data transfer and communication
  8. Safety and organizational measures
  9. Your rights
  10. Modifications
  11. Contact


0- Prolegomena

We, as a processor within the meaning of the RGPD, accept and guarantee the following:
a) we will process personal data exclusively on behalf of a data controller (our “Customer”), in accordance with the latter’s instructions and these clauses;
b) we have implemented the technical and organizational security measures specified in this document before processing personal data;
c) in the event of further subcontracting, we will first inform the above-mentioned data controller and obtain the latter’s written consent.
What information does Luci association collect?


1- Data collected and method of collection: General rules

We collect several types of information about users of our website and others, including information :

  • which allow you to be identified, in particular your surname, first name, company and town, your e-mail address and your telephone number (hereinafter referred to as “personal data”);
  • about your Internet connection, the equipment you use to access our website and details of how you use it.

Luci association collects general and personal data about you:

  • through you when you send us your contact details (via our email or contact form)
  • from Luci association websites; and third parties (such as online service providers or single sign-on methods).

After receiving the data, an electronic profile is created for each individual or legal entity (the “Profile”) using tools that are the exclusive property of Luci association.

In particular, the Profile may contain the following elements:

  • name ;
  • firstname ;
  • company ;
  • country ;
  • phone ;
  • e-mail address ;


We also use cookies on our website.
By continuing to browse our website or closing the cookie banner, you agree to the use of these cookies.
Our cookie policy explains what cookies are, how we use them, how third parties with whom we may deal use them in connection with the Service and what your choices may be in this respect, among other information.


Luci association Cookie Policy


1. What does Luci association do with my information?

We are committed to protecting your privacy. We describe below the ways in which we use the information we collect and receive to provide, maintain and improve the Service; resolve problems and provide customer support; protect the Service for all our users; and contact you.


2. Purpose of data collection

The collection of data is also intended to protect Luci association and its users. Luci association does not collect data for any other purpose. In addition to creating Profiles, Luci association uses your data for the following purposes, to which you subscribe:
a) Sales relationship management
Luci association collects your personal data via the contact form for use according to the purpose selected by the “customer” or “web surfer”, i.e. to establish a commercial relationship concerning the products and services offered by Luci association, for action following a request for intervention or as part of a recruitment process or processing of an unsolicited application.
b) Promotion and marketing :
Luci association may use your data to personalize your experience on its website by showing you appropriate advertisements in order to send you commercial messages that may be of interest to you, such as information about our services, case studies, etc. Luci association will not sell, rent or lease your data to any third party.
c) Satisfaction surveys
Luci association may use your data to offer you the opportunity to respond to satisfaction surveys, with the sole aim of being able to position ourselves on our response to your needs and thus improve. Your consent will be required prior to the questionnaire, and you have the right to object.
d) Technical data :
Luci association or third parties commissioned by Luci association evaluate this data solely for statistical purposes and only in anonymous form, in order to optimize its Internet site and increase its user-friendliness, efficiency and security.
e) Website statistical analysis
Statistical analyses are carried out on the basis of exclusively anonymous data, which in no way allows users to be identified.
f) Other purposes :
Luci association may use your data where it considers it necessary or appropriate: (a) under applicable laws, including those outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public authorities and agencies, including those outside your country of residence; (d) to enforce its terms; (e) to protect its operations; (f) to protect the rights, privacy, safety or property of Luci association, to protect you or to protect others; and (g) to permit Luci association to pursue available remedies or limit the damages that Luci association may sustain; (h) to permit you to apply for a job with Luci association.

Luci association will ask for your consent before using data for purposes other than those mentioned in this Policy, subject to applicable laws.


3. Data retention period

General and personal data will be retained by Luci association for the duration of a commercial relationship between Luci association and the “customer”. In the absence of a commercial relationship between the “customer” and Luci association, the “customer’s” personal data will be retained only for a reasonable period of time to respond to inquiries or resolve problems, to offer new or improved services and to comply with legal requirements under applicable law for a maximum of three years, unless otherwise required by law.
For applicants, data will be kept for a maximum of two years.
You can delete your Luci association account by sending an e-mail to our Data Protection Officer. :


4. Storage location

Profiles created by Luci association are stored in a central database.

  • in the Cloud,
  • on a third-party site

Third-party suppliers have signed our data protection clauses.
Any transfer of your data outside the European Economic Area must only take place with appropriate safeguards, such as contractual clauses that comply with applicable data protection laws and regulations.


5. Your duties

We will use reasonable efforts to keep your Personal Information as accurate, complete and up-to-date as possible. We will not update your Personal Information on a scheduled basis unless such a procedure is necessary. To ensure that your Personal Information is accurate and up-to-date, and to help us maintain this, you must inform us, without delay, of any changes to the information you have provided to us.
You must therefore guarantee that the data you provide is :

  • correct ;
  • exact ;
  • updated ;
  • faithful; and
  • in compliance with applicable laws.

Since Luci association mainly uses electronic communications in its dealings with you, we ask you to notify us of any changes to your e-mail address.

Children under 16
Our website is not intended for children under the age of 16. Such children are prohibited from providing personal data on or through our website. We do not voluntarily collect personal data from children under the age of 16.
If you are under 16 years of age, we strongly recommend that you do not use or provide any information on our website or any of its sections by registering on our website. We also recommend that you do not provide us with any information about yourself, such as your name, telephone number or e-mail address. If we learn that we have collected or received personal data from a child under the age of 16 without verification of parental authority, we will delete this information.
If you believe that we are in possession of information about or received from a child under the age of 16, please contact us.


6. Data transfer and communication

Your personal data may be transferred to and from France, in particular to countries whose data protection laws may differ and be less strict than those of your country of residence.

You hereby agree to Foretec transferring and communicating your data as follows:
a) Transfers within Foretec: transfers are made within Foretec and its subsidiaries as part of their activities and/or services.
b) Transfer to third parties : Foretec may also transfer personal data to third parties at the request of its Customers, for example for data aggregation or emergency tracking services.

Foretec may also transfer your data to a third party in the event of a restructuring, merger, sale, joint venture, assignment, transfer or other disposition of all or part of Luci association’s business or assets (including bankruptcy or similar proceedings).
c) Regulatory transfers :Foretec may be required by law to transfer data to governments and regulatory and/or supervisory authorities.
If you visit a Luci association website, your data will be transferred via a network that is freely accessible to the public. Data may therefore be transmitted across national borders, even if you and Foretec are located in Europe.


7. Safety and organizational measures

We have implemented technical and operational measures to protect personal data against accidental loss, alteration, distribution or unauthorized access. The personal information you provide to us is stored on our password-protected servers behind firewalls. We train our employees in the importance of data protection and focus specifically on measures to protect against the unauthorized dissemination of personal data. We have a contingency plan in place to respond to events that violate Luci association’s data protection and privacy policies. This plan is updated regularly. You are also responsible for the security of your information. Unfortunately, the security of Internet transmissions cannot be guaranteed. We make every effort to protect your personal data, but we cannot guarantee the security of any data you transmit via our website or any public network. You assume the risk of any transmission of personal data. Without prejudice to any mandatory legal obligations to which we may be subject, we cannot be held responsible for any circumvention of the privacy or security measures contained on our website.
Only authorized Foretec personnel, personnel of third-party companies (e.g. service providers) or authorized personnel of our Customers (who have contractually agreed to keep all information confidential) have access to your personal data.
Foretec personnel who have access to your personal data are required to comply with confidentiality regulations.


8. Your rights

In accordance with your rights under European data protection legislation, you have a right of access to the information we hold about you, the purposes for which it is used, to whom it may have been communicated and other information.
We generally take one month to respond to requests for access.
However, we reserve the right to verify your identity and, in the case of complex requests, we may need up to two months to respond.
We may also request financial compensation for administrative costs incurred in the case of excessive or manifestly unreasonable requests.
We may also request additional information to locate the data you are seeking and certain legal exemptions exist to your right of access, in accordance with European data protection legislation.
Under European data protection legislation, you have the following rights, which can be exercised by sending us a written request:
(a) the right to correct inaccurate or incomplete personal data in our possession ;
(b) the right to erasure of personal data as soon as possible when it is no longer required for the purposes for which it was collected;
(c) the right to object to the automated processing of your personal data, where applicable (e.g. for automated background checks);
(d) the right to object to the use of your personal data for direct marketing purposes;
(e) the right to object to or limit the use of personal information for a purpose other than that specified above, unless there is a legitimate reason for not doing so;
(f) the right to the portability of personal data to another data controller when the data has been collected with your consent or is used within a contractual framework and processed automatically.
Please note that, in order to be fully compliant, these requests may be transmitted to third parties involved in the processing of your personal data on our behalf.
If you wish to exercise any of these rights, please write to us at the address below.
If you make a request and are not satisfied with our response or believe that we are processing your personal data unlawfully, you have the right to complain to the CNIL.

Under certain conditions, you may also request the blocking or deletion of your personal data held by Luci association, unless Luci association retains it for legitimate legal purposes.
If you have any questions or problems concerning Foretec’s data processing procedures, please contact the Data Protection Officer at the following e-mail address: