Privacy Policy

The controller responsible for processing data collected on kolixia.com is:

• Endy ALEXIS, Sole Trader trading under the business name "Kolixia"
• SIREN: 890 629 587
• Address: 2 Villa Champagne, 91860 Épinay-sous-Sénart, France
• Contact: contact@kolixia.com

Given the size and nature of the business, no Data Protection Officer (DPO) has been appointed at this time; any question regarding your personal data can be sent directly to the address above.

We only collect personal data that you voluntarily provide, through:

• The contact form: first name, last name, email address, phone number (optional), company and website (optional), message, and any commercial qualification details you choose to provide (project type, company size, budget, desired timeline).
• The appointment booking form: the same information, plus the date and time of the selected slot.

No banking or payment data is collected through the marketing site, as it does not include any online payment feature.

Your data is used to:

• respond to your contact or information request;
• organize and confirm an appointment you have booked;
• assess your project so we can provide a relevant response;
• where applicable, follow up commercially, within the retention period described in section 6.

The processing of your data is based on:

• your consent, given by voluntarily filling out the site's forms;
• our legitimate interest in following up on received inquiries, as part of a pre-contractual relationship.

Your data is processed by Kolixia (Endy ALEXIS) and is never sold, rented, or shared with third parties for commercial purposes.

It may be shared with the following technical processors, strictly for the purpose of operating the site:

• OVH SAS (hosting of the site, database and application servers), data center located in Strasbourg, France;
• Brevo (transactional email delivery: confirmations, appointment notifications), a company based in France;
• Matomo, a web analytics tool used for statistical purposes (see section 8, "Cookies and analytics").

These providers are bound by confidentiality and security obligations consistent with GDPR. To our knowledge, all data processed through the site remains hosted in France / the European Union; please refer to each provider's own privacy policy for further details.

Data belonging to individuals who contacted us through the site but did not become clients is kept for a maximum of 3 years from the last contact (exchange, reply, appointment), in line with CNIL recommendations on commercial prospecting. After this period, data is deleted or anonymized, unless a longer legal retention obligation applies or a contractual relationship is ongoing.

Kolixia implements technical measures to protect your data:

• sensitive data from the forms (first name, last name, email, phone, company, website, message) is encrypted at rest in our database;
• the email address is additionally hashed to allow technical lookup without exposing the plain-text value;
• hosting is provided in France, on dedicated infrastructure.

The site uses Matomo, a web analytics tool self-hosted on our own infrastructure (no browsing data is sent to any third party or external cloud service), used to understand site traffic (pages viewed, traffic sources) for statistical purposes only.

Configured with an anonymized IP address, no cross-referencing with other processing or third-party sites, and an option to opt out, this tool falls under the prior-consent exemption set by the French data protection authority (CNIL deliberation n°2020-091): its use therefore does not require your prior consent, but you are informed of it through this policy.

Should this configuration change (for instance if a third-party service not meeting these criteria were used instead), a consent banner would be implemented before any non-essential cookie is set.

The site does not set any advertising or third-party tracking cookies.

Under GDPR, you have the following rights over your personal data:

• right of access: confirmation that your data is processed and a copy of it;
• right to rectification: correction of inaccurate or incomplete data;
• right to erasure: request deletion of your data;
• right to restriction of processing;
• right to object, in particular to prospecting;
• right to data portability for data you provided to us.

To exercise these rights, contact us at contact@kolixia.com. Proof of identity may be requested if there is reasonable doubt about your identity. We commit to responding within one month.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL):

• Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
• Website: www.cnil.fr

Kolixia reserves the right to update this privacy policy at any time, in particular to comply with legal, regulatory or technical changes. The last update date is shown at the top of this page.