Skip to main content
Logo Hecker & Frères Énergie (HFE)
FR EN

Privacy policy

Last updated :

HECKER & FRERES ENERGIE (Hecker & Frères Énergie (HFE)) attaches the greatest importance to protecting your privacy and respecting your personal data. This privacy policy aims to inform you transparently about how your data is collected, used and protected in the context of our installation and maintenance of heating and air-conditioning equipment.

This policy complies with the General Data Protection Regulation (GDPR) No. 2016/679 of 27 April 2016, as well as the French "Informatique et Libertés" Law No. 78-17 of 6 January 1978, as amended.

1. Data controller

The controller of your personal data is:

As a very small craft business, we are not required to appoint a Data Protection Officer (DPO). However, for any questions relating to your data, you may write to us at the email address above.

2. Personal data collected

We collect only data strictly necessary for the performance of our services. Depending on your interaction with us, this data may include:

2.1 Via the website contact form

  • First and last name
  • Email address
  • Phone number (optional)
  • Postcode (optional)
  • Selected project type (heat pump, air conditioning, heating, etc.)
  • Free-text message content

2.2 When requesting a quote or carrying out work

  • Full address of the worksite
  • Technical information about the property (floor area, existing equipment, etc.)
  • Photos of existing installation (if provided by you)
  • Bank details in the event of payment by bank transfer (IBAN)

2.3 When submitting a grant application (MaPrimeRénov', CEE)

  • Tax assessment notice (proof of income)
  • Tax identification number
  • Household composition
  • Proof of ownership or tenancy

These documents are transmitted only to the relevant official bodies (French National Housing Agency — ANAH, CEE obligated partners) and are never used for any other purpose.

3. Purposes of processing

Your data is collected and processed for the following purposes:

  • Responding to your contact or quote request
  • Carrying out the technical assessment of your project
  • Preparing and following up quotes, contracts or invoices
  • Planning and carrying out technical interventions
  • Providing after-sales service, maintenance and regulatory inspections
  • Preparing grant applications (MaPrimeRénov', CEE) with your consent
  • Complying with our legal obligations (accounting, tax, ten-year guarantee)
  • Sending commercial information related to your project (only if you consent)

4. Legal basis for processing

In accordance with Article 6 of the GDPR, each processing operation is based on one of the following legal bases:

  • Consent (Art. 6.1.a): submitting the contact form, subscribing to a newsletter
  • Performance of a contract (Art. 6.1.b): quotes, installation and maintenance contracts
  • Legal obligation (Art. 6.1.c): retention of invoices (10 years), ten-year guarantee
  • Legitimate interest (Art. 6.1.f): improving our services, site security

5. Retention periods

Category of data Retention period
Data from a contact form with no follow-up 3 years from last contact
Signed quotes and invoices (accounting obligation) 10 years
Documents relating to the ten-year guarantee 10 years from acceptance of works
MaPrimeRénov' / CEE files 10 years (in accordance with ANAH requirements)
Commercial prospecting data 3 years from last contact

6. Recipients of data

Your data is never sold or transferred to third parties for commercial purposes. It may only be transmitted to the following recipients, within the limits of their duties:

  • Authorised staff of HECKER & FRERES ENERGIE (technical team, accounting)
  • Technical subcontractors: website host, email provider
  • CEE obligated partners and the ANAH when preparing grant applications, with your consent
  • Accountant of HECKER & FRERES ENERGIE
  • Tax authorities and social bodies where legally required
  • Insurance companies in connection with the ten-year guarantee

7. Transfers outside the European Union

Your personal data is hosted and processed within the European Union. No transfer outside the European Union is carried out. Should such a situation arise, we would ensure it is covered by appropriate safeguards (standard contractual clauses, adequacy decision, etc.).

8. Data security

HECKER & FRERES ENERGIE implements appropriate technical and organisational measures to preserve the security and confidentiality of your data:

  • Secure connection to the site via HTTPS (TLS encryption)
  • Data stored on secure servers within the European Union
  • Access restricted to authorised persons only
  • Regular backups
  • Strong passwords and protection against unauthorised access

9. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your data:

  • Right of access: obtain a copy of your data and information about how it is processed
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten"): request deletion of your data, subject to legal retention obligations
  • Right to restriction: temporarily suspend processing of your data
  • Right to object: object to processing of your data on legitimate grounds
  • Right to data portability: receive your data in a structured, reusable format
  • Right to withdraw consent at any time
  • Right to define directives regarding the fate of your data after your death

How to exercise your rights

To exercise any of these rights, please send us your request:

  • By email: contact@hfe-energie.fr
  • By post: HECKER & FRERES ENERGIE - 44 Rue Jean sans peur, 59800 Lille, France

A copy of your identity document may be requested to verify your identity. We undertake to respond within a maximum of one month from receipt of your request.

10. Complaint to the CNIL

If you believe, after contacting us, that your data protection rights are not being respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

  • Address: 3 place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07
  • Phone: 01 53 73 22 22
  • Website: https://www.cnil.fr

11. Cookies

Use of cookies on our website is covered by a dedicated policy. For more information, please see our Cookie policy.

12. Changes to this policy

HECKER & FRERES ENERGIE reserves the right to amend this privacy policy at any time, in particular to adapt to legislative or technical developments. The version in force is that available on the website on the date of your visit. We invite you to consult it regularly.