Translation provided for information. Only the French version, Politique de confidentialité, is legally binding. In the event of any discrepancy, the French version prevails.
Who is responsible for your data
The data controller is XV DATA, a simplified joint-stock company (SAS) of which Walexia is a brand ("Walexia by XV DATA"), whose registered office is at 9 rue André Bréchet, 75017 Paris, France (Paris RCS 912 851 771), and which can be contacted at contact@walexia.fr.
Data protection officer: Sandra Holvoet, who can be contacted at dpo@walexia.com.
Two situations to distinguish
- You visit our website, request a demo or are a Walexia customer: Walexia by XV DATA decides how your data is used. This policy applies.
- You chat on WhatsApp with a business that uses Walexia: that business is responsible for your data. Walexia by XV DATA processes it only on its behalf and according to its instructions. To exercise your rights, contact that business and read its own privacy policy.
The data we process, and why
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Answering your contact and demo requests | Last name, first name, business email and phone number, company, job title, industry, message | Pre-contractual measures taken at your request | 3 years after the last contact |
| Giving you access to our gated resources (playbook) and contacting you about them | Last name, first name, email, mobile number, resource requested | Pre-contractual measures taken at your request | 3 years after the request |
| Preparing the commercial proposal requested from the Pricing page, emailing you its summary and contacting you about it | Last name, first name, company, job title, business email and phone number, comment, answers to the configurator (industry, organisation, goals, channels, tools, volumes, support) | Pre-contractual measures taken at your request | 3 years after the request |
| Sending you commercial information, if you ticked the box provided in the Pricing page form | First name, last name, business email, company, date of your consent | Consent (can be withdrawn at any time, via the unsubscribe link or by writing to us) | Until you withdraw your consent, then 3 years at most |
| Sending you our tips and news on WhatsApp, if you ticked the box provided | First name, mobile number, date of your consent | Consent (can be withdrawn at any time, from the conversation or by writing to us) | Until you withdraw your consent, then 3 years at most |
| Business prospecting of professionals | Business contact details, stated interests | Legitimate interest (you can object at any time) | 3 years after the last contact |
| Managing customers, contracts and invoicing | Identity, contact details, contracts, invoices, exchanges | Performance of the contract, legal obligations | Term of the contract; accounting records: 10 years |
| Platform user accounts | Name, email, role, login logs | Performance of the contract, legitimate interest (security) | Life of the account; logs: 6 months |
| Website audience measurement | Pages viewed, browsing data, tracker identifiers | Consent | Trackers: 13 months at most; data: 25 months at most |
| Website security (regular audits, updates, incident detection) | IP address, technical logs | Legitimate interest | 6 months |
Mandatory form fields are indicated: without them, we cannot process your request.
Who receives your data
Your data is stored exclusively on our platform, on a private and secure server hosted in France by OVH SAS. Our audience measurement and appointment booking tools, our APIs and our connectors run in this private environment: your data does not leave it for these uses. Only authorised Walexia by XV DATA staff (sales, support and administration teams) have access to it.
Only one third-party service is involved, and only if you chat with us on WhatsApp: Meta Platforms Ireland, under its own security and privacy commitments. The website's font is hosted on our server: displaying it sends no data to Google. We do not sell your data.
Transfers outside the European Union
Meta may process data in the United States, in particular for WhatsApp exchanges. These transfers rely on the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) for certified companies, or on the European Commission's standard contractual clauses.
Your rights
You have the following rights over your data:
- access, rectification and erasure;
- restriction of processing;
- objection, in particular to commercial prospecting, at any time and without giving reasons;
- portability, for the data you have provided to us;
- withdrawal of your consent, at any time, when the processing is based on it;
- setting instructions for what happens to your data after your death.
To exercise them, write to contact@walexia.fr. We respond within one month, which may be extended for complex requests; if in doubt, we may ask you to prove your identity.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Cookies and trackers
The website uses:
- trackers that are necessary for it to work and to remember your choices, which do not require consent; the Pricing page configurator thus keeps your answers in your browser (local storage, without your contact details) so that you can resume your configuration, until you send your request or choose "Start again";
- audience measurement trackers and, where applicable, marketing trackers, placed only with your consent.
On your first visit, a banner lets you accept, reject or choose, as easily one way as the other. You can change your choices at any time with the "Manage cookies" link at the bottom of each page. Your choice is kept for 6 months, after which we ask you again. Rejecting does not prevent you from using the website; if you withdraw your consent, the trackers concerned are deleted from your browser.
Security
We protect your data with appropriate technical and organisational measures: storage on a private and secure server, access limited to authorised staff, encrypted connections, backups, regular security audits, frequent updates and supervision of our service providers.
Minors
Our services are intended for professionals and are not aimed at minors.
Updates to this policy
This policy may change, in particular to take account of new services or regulatory changes. The date of the version in force is shown at the top of the page.