Laystone Group
Laystone Group

Legal

Privacy Policy

How Laystone Group collects, uses, and protects your personal data in compliance with the GDPR.

Last updated — 2026

01Data controller

Laystone Group S.A.S., 60 Rue François 1er, 75008 Paris, France, acts as data controller for the personal data collected through the Site.

For any question related to data protection, you may contact us at privacy@laystonegroup.com.

02Data we collect

We collect personal data you voluntarily provide through our contact forms (name, first name, email, company, position, message) for the sole purpose of answering your enquiries.

We also collect technical data automatically via cookies (IP address, browser, pages visited) to measure audience and improve the Site. See our cookie banner for consent management.

03Legal basis

Processing is based on your consent (forms, newsletter, cookies), our legitimate interest (security, audience measurement), or the performance of a contract (client relationship).

04Data retention

Contact form data is kept for a maximum of three (3) years from the last interaction. Prospect data is kept for three (3) years after the last contact.

Technical data is anonymized after thirteen (13) months, in line with CNIL recommendations.

05Recipients

Your data is strictly reserved for Laystone Group and, where applicable, our processors (hosting, email platform), bound by confidentiality obligations.

Your data is never sold or transferred to third parties for commercial purposes.

06Your rights

In accordance with the GDPR, you have a right of access, rectification, erasure, portability, limitation, and objection regarding your personal data.

To exercise these rights, contact privacy@laystonegroup.com with a copy of valid proof of identity. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

07Security

Laystone Group implements all appropriate technical and organizational measures to protect your data against loss, alteration, unauthorized access, or disclosure.

08International transfers

Your data is hosted within the European Union. Any transfer outside the EU is strictly framed by Standard Contractual Clauses approved by the European Commission.