Privacy policy
Last updated: 25 September 2026
This English translation is provided for information only. In case of discrepancy, the French version prevails.
This page explains what personal data ELOGAZ collects, why, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
ELOGAZ, SASU with a share capital of €100, RCS Versailles 941 643 173 – SIRET 941 643 173 00011
31 rue des Entrées, Bâtiment 5, 78160 Marly-le-Roi, France
Represented by Ange Sureda-Sanchez, president
Contact: contact@elogaz.com – +33 6 69 99 43 20
2. Data collected
- Contact and appointment form: name and phone number (required); email, town, type of request, boiler brand and age, preferred date and time slot, referrer's name, message and request for the visit to take place before the end of the withdrawal period (all optional).
- Online booking (Cal.com): name, email, phone number, address of the visit, chosen slot and answers to the questions (boiler brand and age, referrer).
- Phone, email or WhatsApp exchanges: the information you give us to arrange the visit (address, description of the fault, any photos).
- Visit and invoicing: identity, address of the visit, boiler details, service report, quotes, invoices, payments.
- Online payment ("Pay my invoice" page): invoice number, name, email (optional), amount. Card details are entered directly with SumUp: ELOGAZ never has access to them.
- Technical data: IP address and connection information recorded by our host for website security. To limit abusive form submissions, the website also keeps a hash of the IP address and the time of submission.
- Customer reviews: the home page shows a few reviews published on our Google listing, with the author's first name and last-name initial. Any author can ask for removal at contact@elogaz.com.
The website uses no audience measurement, advertising or tracking tools, and only asks for the information needed for your request.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering your requests, preparing a quote, booking an appointment (including online booking) | Pre-contractual steps taken at your request |
| Carrying out the service or repair, managing the maintenance contract and referral offer | Performance of the contract |
| Invoicing, accounting, issuing the service certificate | Legal obligations |
| Taking an online payment and matching it to the invoice | Performance of the contract |
| Recording your request for the visit to take place before the end of the withdrawal period | Legal obligation (article L221-25 of the French Consumer Code) |
| Securing the website and preventing spam | ELOGAZ's legitimate interest |
| Showing customer reviews published on Google | ELOGAZ's legitimate interest |
ELOGAZ does not send marketing messages, never sells or rents your data, and makes no automated decisions about you.
4. Recipients and processors
Your data is processed by ELOGAZ only. Where strictly necessary, it may be shared with the following providers:
- Hostinger International Ltd (Cyprus): hosting of the website and of the contact@elogaz.com mailbox.
- SumUp: card payments (terminal and online payment).
- Indy: invoicing and accounting software.
- Cal.com: online booking, synced with ELOGAZ's Google Calendar.
- Google (Gmail and Google Calendar): receiving messages sent to contact@elogaz.com, and scheduling visits.
- WhatsApp (Meta): only if you choose to message us on WhatsApp.
- Google: only if you click "Show the map" (Google Maps).
Some of these providers (Cal.com, Meta, Google) may transfer data outside the European Union, particularly to the United States, under safeguards recognised by the European Commission (Data Privacy Framework or standard contractual clauses).
5. Retention periods
- Contact request with no follow-up: 3 years after the last exchange.
- Customer data: for the duration of the business relationship, then 5 years (limitation period).
- Invoices and accounting records: 10 years (legal obligation).
- Technical connection data kept by the host: 12 months at most.
- IP address hash used against abusive submissions: automatically deleted after 24 hours of inactivity.
- Current payment ID (in your browser): deleted when the payment ends or the tab is closed.
6. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to give instructions on what happens to it after your death. To exercise these rights, email contact@elogaz.com or write to the address above. We reply within one month.
If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.
7. Cookies
The website uses no advertising or analytics cookies. Only strictly necessary trackers (payment, login to the pro area) are used without prior consent; the Google Maps map and the Cal.com calendar only load if you click the dedicated button. The full list is in our cookie policy.
8. Security
The website is served over HTTPS. Access keys for payment and email services are stored on the server, outside the public area, and never pass through your browser.