Privacy policy
This policy explains which personal data is processed when you browse waxym.com or get in touch with us, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
Data controller
The data controller is Waxym, whose registered office is at 12 rue Louis Renault, 31130 Balma, France.
For any question relating to your personal data, write to us at contact@waxym.com or by post at the address above.
The principle: we collect the strict minimum
This is a static brochure website. There is no user account, no analytics, no advertising network and no tracking social widget. No profiling or automated decision-making takes place.
The contact form on this site sends nothing to a server: it simply pre-fills a message in your own email client. You stay in control of whether it is sent.
Data processed, purposes and legal bases
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email address, company, message content (sent by email or given by phone) | Answer your enquiry and, where relevant, prepare a commercial proposal | Pre-contractual steps taken at your request (art. 6(1)(b)) and legitimate interest in replying (art. 6(1)(f)) | 3 years from the last contact |
| Unsolicited job applications (CV, background) | Review your application | Pre-contractual steps taken at your request (art. 6(1)(b)) | 2 years from the last contact, unless hired |
| Technical server logs: IP address, date and time, requested page, user agent | Keep the site available and secure, detect abuse | Legitimate interest in securing our infrastructure (art. 6(1)(f)) | Retention period applied by the hosting provider |
| Display preferences stored in your browser (theme, language) | Honour your choices from one visit to the next | Legitimate interest in the site working properly (art. 6(1)(f)) — never transmitted | Until you clear it yourself |
Data relating to commercial and contractual exchanges may be kept longer where the law requires it, in particular to meet accounting and tax obligations (10 years).
Recipients and processors
Your data is only seen by the members of the Waxym team concerned by your enquiry. It is never sold, rented or passed on to third parties for commercial purposes.
The following act as processors or technical suppliers:
- Google Ireland Limited (Firebase Hosting) — website hosting and the associated technical logs;
- Our business email provider — delivery and storage of the emails you send us;
- Google Maps — only if you explicitly choose to display the map on the contact section.
Transfers outside the European Union
The website is hosted within the European Union. Some suppliers belonging to international groups may nonetheless process data outside the European Union, in particular for technical support purposes.
Such transfers are then covered by the appropriate safeguards set out in articles 44 et seq. of the GDPR, in particular the standard contractual clauses adopted by the European Commission and, where applicable, the EU–US Data Privacy Framework.
Security
The website is served entirely over HTTPS and applies restrictive security headers (content security policy, protection against MIME type sniffing and against framing by third parties).
Access to the messages you send us is limited to the team members who need it. We apply technical and organisational measures proportionate to the risk, while acknowledging that no transmission over the internet can be guaranteed entirely risk-free.
Your rights
Under articles 15 to 22 of the GDPR, you have the following rights over your data:
- Right of access — confirm whether your data is processed and obtain a copy of it;
- Right to rectification — have inaccurate or incomplete data corrected;
- Right to erasure — request deletion of your data in the cases provided for by the regulation;
- Right to restriction — request that processing be temporarily frozen;
- Right to object — object to processing based on legitimate interest, on grounds relating to your particular situation;
- Right to data portability — receive your data in a structured, machine-readable format;
- Right to give instructions about what happens to your data after your death.
To exercise these rights, write to us at contact@waxym.com. We may ask for proof of identity in case of reasonable doubt, and we undertake to reply within one month.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Changes to this policy
This policy may change to reflect regulatory developments or changes to the website. The date it was last updated appears at the top of this page; we invite you to check it from time to time.
A question about this page? Write to us at contact@waxym.com.