Privacy Policy

1. Purpose of the Privacy Policy

The purpose of this Privacy Policy is to inform users of the website about how their personal data is collected, used, stored and protected.

This policy applies to personal data that may be collected when browsing the website, using the contact form or contacting the company by any other means.

Personal data is processed in accordance with applicable regulations, including Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation or GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

2. Data Controller

The data controller responsible for processing personal data collected through this website is:

RUPEXUS
RUPERT Alexandre
SIRET number: 842 000 846 00019

Email: rupexus@symfonyalex.atlassian.net

3. Personal Data Collected

The personal data collected depends on the features and services used by the visitor.

When using the website, particularly the contact form, the following categories of personal data may be collected:

  • First and last name;
  • Email address;
  • Telephone number, where requested;
  • Subject and content of the message;
  • Any information that the user voluntarily chooses to include in their message.

Certain technical data may also be processed when browsing the website, including IP addresses, browser information and technical logs required to ensure the security and proper functioning of the service.

Only data necessary for the purposes described in this Privacy Policy is collected.

4. Purposes and Legal Bases for Processing

Personal data is collected and processed for the following purposes:

  • Responding to contact requests: processing messages submitted through the contact form or sent by email. The legal basis is the data controller's legitimate interest in responding to enquiries or, where the request relates to pre-contractual measures taken at the individual's request, the implementation of those measures.
  • Managing business relationships: processing quotation requests and pre-contractual or contractual communications. The legal basis is the performance of pre-contractual measures or a contract, depending on the circumstances.
  • Ensuring website security: preventing abuse, detecting incidents and protecting the technical infrastructure. The legal basis may be the data controller's legitimate interest.
  • Measuring website traffic: this purpose applies only if audience measurement tools are actually used. The legal basis and consent requirements depend on the tool and its configuration.

Personal data is not used for purposes incompatible with those for which it was originally collected.

5. Mandatory or Optional Nature of Data

The information necessary to process a request must be provided so that the company can respond.

Failure to provide certain information may prevent the request from being processed.

6. Recipients of Personal Data

Personal data is intended for the data controller and, where necessary, authorised individuals involved in handling enquiries and managing the website.

Personal data may also be accessed by certain technical service providers involved in operating the website, including the hosting provider and email service providers, to the extent necessary for their respective services.

These service providers may process personal data only within the scope of the services they provide and in accordance with applicable data protection requirements.

Personal data is not sold to third parties.

7. Data Retention Periods

Personal data is retained for a limited period, proportionate to the purpose of processing and in accordance with applicable legal obligations.

Retention periods are determined according to the purposes for which the data is processed:

  • Contact enquiries: for the time necessary to handle the enquiry, followed by an appropriate period determined according to the follow-up required and the company's needs.
  • Quotation requests: for the time necessary to follow up on the request and, where applicable, in accordance with the rules governing the business relationship.
  • Contractual and accounting data: for the retention periods required by applicable legal obligations.
  • Technical logs and security data: for the time necessary to ensure website security, troubleshooting and maintenance.

Once the applicable retention periods have expired, personal data is deleted or, where justified, archived in accordance with applicable regulations.

8. Data Security

The data controller implements appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures are adapted to the nature of the data processed, the risks associated with the processing activities and the available resources.

Despite these precautions, no IT system can guarantee absolute security.

9. Users' Rights

In accordance with applicable regulations, individuals have the following rights regarding their personal data, subject to the conditions and limitations provided by law:

  • Right of access: to obtain confirmation as to whether personal data is being processed and to receive a copy of that data.
  • Right to rectification: to request the correction of inaccurate or incomplete data.
  • Right to erasure: to request the deletion of personal data where the legal conditions are met.
  • Right to restriction of processing: to request the restriction of data processing in the circumstances provided for by applicable regulations.
  • Right to object: to object to certain processing activities based on legitimate interests, on grounds relating to their particular situation.
  • Right to data portability: to receive certain personal data provided to the data controller in a structured, commonly used and machine-readable format, where the legal conditions are met.
  • Right to withdraw consent: where processing is based on consent, individuals may withdraw their consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

The exercise of these rights depends on the legal basis for processing and the conditions laid down by applicable regulations.

10. Exercising Your Rights and Lodging a Complaint with the CNIL

To exercise their rights or obtain further information about the processing of their personal data, users may contact the data controller at the following email address:

Email: rupexus@symfonyalex.atlassian.net

Proof of identity may be requested where necessary to prevent personal data from being disclosed to an unauthorised person.

The data controller will respond to requests within the time limits established by applicable regulations.

If users believe that their rights have not been respected, they may lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés, CNIL).

Official website: www.cnil.fr

11. Cookies and Other Tracking Technologies

The website may use cookies or other tracking technologies that are necessary for its operation.

Depending on the features implemented, other tracking technologies may be used, particularly to measure website traffic or provide additional services.

Where required by applicable regulations, the placement or reading of these tracking technologies is subject to the user's prior consent. Users must be able to accept, refuse or withdraw their consent in accordance with applicable regulations.

Cookie management procedures depend on the tools actually used on the website.

12. Transfers of Data Outside the European Union

Depending on the services used, certain technical service providers may process personal data from a country outside the European Union or the European Economic Area.

Where applicable, such transfers are governed by the requirements of applicable data protection regulations.

13. Changes to This Privacy Policy

This Privacy Policy may be amended at any time to reflect changes in laws, regulations, technology or the operation of the website.

The applicable version is the one published on the website at the time of consultation.

14. Contact

For any questions regarding this Privacy Policy or the processing of personal data, you may contact the data controller:

RUPEXUS
RUPERT Alexandre
Email: rupexus@symfonyalex.atlassian.net

Last updated: October 9, 2026