Updated: 25 October 2025.

In this personal data protection policy (the “Policy”), Axxès informs you of the conditions under which your personal data is collected, the purposes for which data from the website (the “Website”) is processed and your rights.

Contents

1. Who is the data controller?

For all the processing operations presented in this policy, Axxès, a simplified joint stock company (SAS) registered with the Lyon trade and companies register (RCS) under number 482 930 385, and based at 15, rue des Cuirassiers, 69003 Lyon, France, acts as the data controller within the meaning of the GDPR (“Axxès” or “We”).

2. Which personal details do we process?

We collect and process the following personal data about you:

Only the personal data strictly necessary for the purposes described below is collected. You do not have to provide us with the personal data we request. However, if you decide not to provide this information, we may not always be able to provide you with our products and services, or answer your questions.

3. What are the purposes of the processing?

The table below lists the purposes for which your personal data is processed, together with the corresponding legal basis and data retention period:

Purpose Legal basis Retention period
Communication operations: sending newsletters and information emails about Axxès activities Consent Duration of the contract with Axxès
Contacting B2B prospects to offer them Axxès services Consent 5 years
Improving the Website (audience statistics, cookies) Consent 13 months maximum
Website security and fraud prevention Axxès' legitimate interests 6 months maximum
Processing requests for information sent via the contact form Axxès' legitimate interests 3 years from the date the request is processed
Customer satisfaction surveys Axxès' legitimate interests 2 years
Processing requests to exercise rights (right of access, objection, correction etc.) Legal obligations 5 years from the date of the request

4. Who receives your personal data?

The following people receive your personal data, depending on the processing carried out:

The data is never transferred to countries outside the European Union. If this were nevertheless to occur, we undertake to ensure that these transfers take place in compliance with the regulations in force or with regulations offering an adequate and equivalent level of protection.

5. What are your rights with regard to your personal data?

In accordance with the applicable legislation, you have the following rights:

You can exercise these rights:
• By email: data-privacy@axxes.fr
• By post: Axxès SAS – for the attention of the DPO, 15 Rue des Cuirassiers, 69487 Lyon Cedex 03

If you are not satisfied with our response, you can complain to the CNIL (the French data protection authority):
• By post: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07
• Online: https://www.cnil.fr/fr/plaintes

6. What security measures are in place?

As the data controller, we take all the necessary steps to preserve the security and confidentiality of your data, including preventing damage and access by unauthorised third parties. For this purpose, we apply all the necessary technical and organisational measures to guarantee an adequate level of security in view of the risks. We also ensure that our subcontractors comply with the same rules on data protection.

7. What about changes to this policy?

This policy may change. In the case of minor changes, the updated version will be published on the Website. In the case of substantial changes (purposes, the exercise of your rights, etc.), you will be informed by any appropriate means.

Simulate my costs