This personal data protection policy defines and informs you on how GMED uses and protects the personal data that you may communicate to us.
The processing of personal data implemented by GMED as data controller, is carried out in accordance with the General Data Protection Regulation (GDPR) 2016-679 of 27 April 2016, and French law no. 78-17 of 6 January 1978, the “Data Protection Act,” as amended, and its implementing decree no. 2019-536 of 29 May 2019.


Data controller identity

The data controller is GMED, a wholly-owned subsidiary of LNE, an Industrial and State-owned Establishment. GMED is a simplified joint-stock company (SAS) with its registered office at 1 rue Gaston Boissier 75015 Paris, France, Tel. + 33 1 40 43 37 00,,


Ways to collect personal data

As part of our relations, you will likely send us your personal data in a variety of ways and, in particular,  through our website by filling out an information form when you request a service, when you submit an application, when you establish any contact with GMED, or when you send us your personal data in any other way.


Purposes of personal data processing

GMED may process your personal data for the following purposes (non-exhaustive list):

  • responding to your requests
  • process your job or internship applications
  • handling your service requests and managing our business relationships
  • facilitating the completion of administrative formalities for signing up for our training sessions, forums, webinars, and other events organized by GMED
  • providing you with information about GMED and technical, regulatory, or standard developments that are likely to interest you
  • ensuring that our information, offers, and other forms of services correspond as much as possible with your interests

GMED processes your personal data for the purposes of legitimate interests pursued by GMED, and in particular for the development and improvement of our services and our service offering, with your consent when it comes to processing your data for specific purposes, or in a pre-contractual framework if applicable.

GMED undertakes not to act against your interests, freedoms, or fundamental human rights.


Personal data recipients

The sole recipient of personal data is GMED, more specifically: the Sales, Marketing and Communications department for marketing and sales processes; the operations departments to respond to service requests (certification, training); the administrative and financial department for service billing; the human resources department for the job processing or internship applications.

GMED does not commercialize personal data.

GMED may, however, use third-party service providers to process personal data on its behalf, such as for telemarketing campaigns, mailings, customer satisfaction surveys, and, where applicable, to host data. GMED only uses trusted subcontractors and within the framework of contractual relations compliant to the GDPR.


Personal data retention period

Personal data is stored no longer than necessary to fulfill the purpose of the processing, while complying with applicable legal and regulatory limits; or for another period taking into account operational constraints and efficient customer relations management; or responses to legal claims, or requests from supervisory authorities.
For existing GMED’s customers, information is stored for the duration of the contractual relations and for 10 years after the end of the contractual term.
For prospective customers, information is stored for 3 years from the time it was collected or from the last contact with the prospective customer.

For candidates to a job or internship, information is stored for 2 years from the last contact with the candidate.
In addition, GMED regularly analyzes the data stored and removes data that appears obsolete or expired.

Rights of the persons whose personal data is collected
In accordance with applicable regulations on personal data protection, you have the right to access, correct, and delete your personal data, as well as the right to restrict and object to the processing and portability of your data.

You can exercise these rights by sending an email to or by letter to the following address:
Direction Commerciale, Marketing et Communication (DCMC)
1 rue Gaston Boissier
75015 PARIS

GMED will respond to anyone exercising their aforementioned rights within a period of one (1) month of receiving the request. This deadline may be extended by two (2) months, taking into account the complexity and number of ongoing requests.
You also have the right to appeal to the French Data Protection Commission (Commission nationale de l’informatique et des libertés – CNIL) in the event of any violation of applicable regulations on personal data protection.


Information systems security

GMED implements all reasonable technical and organizational measures, with regard to the nature, scope, and context of the personal data you share with us and the risks of processing it, to keep your personal data secure, and, in particular, to prevent any destruction, loss, alteration, disclosure, intrusion, or unauthorized access to this data, whether by accidental or illicit means.



What are cookies?

A cookie is a small file made up of text and numbers, which is downloaded to your computer when you access certain websites. The purpose of a cookie, when read by a browser, is to help a Website to improve the services it provides. A cookie contains several types of data, including the name of the server that issued it, its expiry date and a unique ID number.

Who can install cookies on your browser, and for what purpose?

GMED may install cookies on your browser to ensure the website functions properly, to monitor the number of visits to our site, and to enable you to follow GMED’s news via various social media platforms.

What types of cookies are placed by the site, and how long do they last?

When you browse our site, we may be required to store certain types of cookies on your device.

  • Cookies strictly necessary to ensure the site functions properly.
    These cookies are essential for you to browse our website, as they help keep the site safe and enable you to use its main features.
  • Visitor Tracking Cookies
    These cookies are only used to assess the viewers of the site; i.e. to gauge its performance levels, compile statistics, log the volume of visits and use of the various elements of our site (browsing patterns, content viewed), to allow us to make our services more user-friendly (e.g, by establishing the most popular pages or the commonest searches). Google Analytics is the tool GMED uses to generate these cookies.
  • Social Media Cookies
    Our website features “Share” buttons linking to social networks LinkedIn, YouTube and Twitter, enabling visitors to share content from our site with other people, and to let them know what you have viewed or your opinions regarding our site content. The social networks can identify you via this button, even if you haven’t clicked on it during your visit to our site, simply because your account linked to your social media account is active (open session) while you’re browsing the site. We have no control over what personal data may be collected by social networks; so we recommend that you consult their confidentiality policies for further information.

Cookies are kept for a maximum of 13 months.

How can you authorize or refuse to accept cookies on your browser?

You can choose to delete or deactivate cookies on your browser at any time. Every browser has a setting to notify you when cookies are being installed on your computer, enabling you to accept or refuse them, either across the board or on a case-by-case basis.

How cookies are managed depends on the configuration of individual browsers; you can consult your browser’s user manual to modify your cookie options. These modifications can be carried out via the links for the most common browsers listed below:


Policy updates

GMED reserves the right to modify or supplement to this privacy policy, at any time and without prior notice, particularly for the purposes of complying with any legislative, regulatory, legal, or technological developments. Changes take effect as soon as they are posted on the GMED website ( and you are legally bound by them.

By using our website, you fully and completely accept any revisions or changes to our rules governing the protection of your personal data.


July 2020