GDPR Compliance Statement

STATEMENT OF GDPR COMPLIANCE

General Data Protection Regulation (EU 2016/679)

Publisher: Association Gestion Dynamique de Matériel
Software: GDM – Gestion Dynamique de Matériel
Website: https://www.gdmfrance.com
Representative: Marchadier Mickaël

I, the undersigned Marchadier Mickaël, representative of the association Gestion Dynamique de Matériel, publisher of the GDM – Gestion Dynamique de Matériel software, hereby certify that GDM implements all the measures required to comply with the General Data Protection Regulation (GDPR – EU 2016/679) in the hosting and processing of data.

GDM works on a multi-organisation model in which each user has a personal account that can be linked to several client organisations. Data is clearly separated between personal account data (belonging to the user) and data linked to each organisation (belonging to the organisation).

Within this framework, GDM acts as a technical processor and undertakes to:

• Process personal data only on the documented instructions of its clients, acting as controllers
• Ensure the confidentiality, security and integrity of the stored data
• Guarantee that data is hosted within the European Union, on servers located in France (OVH)
• Implement appropriate technical measures, including in particular:
  • Access control and authentication
  • Password encryption
  • Automatic backups (every 30 minutes, 3 locations)
  • Traceability and logging of actions
  • Secure connections (HTTPS/TLS)
  • Regular security updates
• Notify the controller in the event of a security incident likely to result in a data breach
• Assist the client in handling data subjects’ rights (access, rectification, erasure, portability, objection)
• Guarantee that no data is transferred, sold or used for any purpose other than the operation of the GDM service
• Delete or return the data at the end of the contract, at the client’s choice

Sub-processing: GDM does not use any sub-processor with access to clients’ personal data. All processing is carried out in-house.

This statement is provided to meet the verification obligations imposed on controllers by Article 28 of the GDPR, which requires the processor to provide sufficient guarantees regarding the implementation of appropriate technical and organisational measures.

Signed in Pantin
On 1 January 2025

Association Gestion Dynamique de Matériel
Registration no.: W931014617
[email protected] | +33 6 45 80 33 07