Last Updated: 1 April 2026
1. Data Controller
The data controller for personal data processed through this website is:
- Company name: Dexvexium SAS
- Registered address: 34 Bd de l'Hôpital, Paris, France
- Email: info@dexvexium.com
- Phone: +33 1 47 07 48 58
- SIRET: 301 313 458 16866
2. Legal Basis and Applicable Law
This Privacy Policy is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, "GDPR"), as well as French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties (Loi Informatique et Libertés), as amended. The supervisory authority for data protection in France is the Commission Nationale de l'Informatique et des Libertés (CNIL).
3. Personal Data We Collect
We collect personal data only when you voluntarily provide it. The categories of data we may collect include:
- Contact data: full name, email address, telephone number
- Communication data: the content of messages you send us via the contact form
- Technical data: IP address, browser type, device type, pages visited, and session duration, collected automatically via cookies and server logs
- Cookie preferences: your consent choices regarding cookies
We do not collect sensitive personal data (special categories under Article 9 GDPR) and we do not process data relating to minors under the age of 16.
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes, each resting on a specific legal basis:
- Responding to enquiries (contact form): processing is necessary to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR), or based on our legitimate interest in responding to communications addressed to us (Article 6(1)(f) GDPR).
- Website operation and security: processing is necessary for the purposes of our legitimate interests in maintaining the security and functionality of our website (Article 6(1)(f) GDPR).
- Analytics cookies: processed only with your prior consent (Article 6(1)(a) GDPR). You may withdraw consent at any time.
- Compliance with legal obligations: processing may be required to comply with applicable French or European law (Article 6(1)(c) GDPR).
5. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected:
- Contact form data: retained for a maximum of 3 years from the date of last contact, in accordance with the applicable limitation period under French civil law.
- Technical logs: retained for a maximum of 12 months.
- Cookie consent records: retained for 13 months from the date of consent, in accordance with CNIL guidelines.
After these periods, data is securely deleted or anonymised.
6. Data Sharing and Transfers
We do not sell, rent, or trade your personal data. We may share data with:
- Hosting providers: our website is hosted on servers located within the European Economic Area (EEA). Our hosting provider acts as a data processor under a data processing agreement.
- Email service providers: used solely to deliver communications you have initiated.
- Competent authorities: where required by applicable law or a court order.
We do not transfer personal data to third countries outside the EEA without ensuring appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission).
7. Your Rights
Under the GDPR and the Loi Informatique et Libertés, you have the following rights with respect to your personal data:
- Right of access (Article 15 GDPR): you may request confirmation of whether we process your data and obtain a copy.
- Right to rectification (Article 16 GDPR): you may request correction of inaccurate or incomplete data.
- Right to erasure (Article 17 GDPR): you may request deletion of your data where there is no overriding legitimate reason for continued processing.
- Right to restriction (Article 18 GDPR): you may request that we limit processing of your data in certain circumstances.
- Right to data portability (Article 20 GDPR): where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
- Right to object (Article 21 GDPR): you may object at any time to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, contact us at: info@dexvexium.com. We will respond within one month. You also have the right to lodge a complaint with the CNIL: www.cnil.fr.
8. Cookies
We use cookies and similar tracking technologies on this website. For full details of the cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy.
9. Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are reviewed and updated periodically. However, no transmission over the internet is entirely secure, and we cannot guarantee absolute security.
10. Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. Continued use of the website after a revision constitutes acceptance of the updated policy.
12. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact us at info@dexvexium.com or by post at: Dexvexium SAS, 34 Bd de l'Hôpital, Paris, France.