Privacy policy
Article 1: Preamble
The purpose of this privacy policy is to inform users of the website aixh.com about:
- How their personal data is collected. Personal data means any information that makes it possible to identify a user, such as: surname, first name, age, postal or email address, location or IP address;
- The rights they have regarding their data;
- The identity of the controller of the personal data collected;
- The recipients of this data;
- The website's cookie policy.
This policy supplements the legal notice.
Article 2: Principles governing the collection and processing of personal data
In accordance with Article 5 of European Regulation 2016/679 (GDPR), personal data must be:
- Processed lawfully, fairly and in a transparent manner in relation to the data subject;
- Collected for specified, explicit and legitimate purposes (see Article 3.1) and not further processed in a manner that is incompatible with those purposes;
- Adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed;
- Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that inaccurate data is erased or rectified without delay;
- Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of the processing;
- Processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Processing is lawful only if at least one of the following conditions is met:
- The data subject has given consent to the processing of their data for one or more specific purposes;
- Processing is necessary for the performance of a contract or for pre-contractual measures taken at the request of the data subject;
- Processing is necessary for compliance with a legal obligation to which the controller is subject;
- Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental freedoms of the data subject, in particular where the data subject is a child.
Article 3: Personal data collected and processed while browsing the website
Article 3.1: Data collection methods
When the website is used, the following data may be collected automatically: name, email address, telephone number, IP address.
This data is collected for the following purpose: contact form.
The data is stored securely by the controller for a period of three (3) years. The company may keep certain personal data beyond this period in order to meet legal or regulatory obligations.
Article 3.2: Data hosting
The website www.aixh.com is hosted by:
Host: o2switch
Address: 222-224 Boulevard Gustave Flaubert, 63000 Clermont-Ferrand, France
Contact: o2switch.fr/support-hebergeur
Article 3.3: Use of cookies
The website www.aixh.com does not use audience measurement cookies. Across the whole site, a single technical cookie may be set when the contact and newsletter sign-up forms are used. The advertising campaign pages described in point 3.3.2 may also, with your explicit consent, set advertising measurement cookies.
3.3.1 Session cookie (PHPSESSID)
- Purpose: securing the contact and newsletter sign-up forms (protection against forged requests, known as CSRF).
- Legal basis: AIxH's legitimate interest in the security of the website and of its exchanges with users (Article 6.1.f of the GDPR), together with the technical necessity linked to the action initiated by the user when submitting a form.
- Retention period: session cookie, deleted when the browser is closed. The associated security token expires after ten (10) minutes.
- Pages concerned: contact form (home page) and newsletter sign-up form.
- Responsible for setting it: AIxH Sàrl, through the O2Switch hosting.
- Consent: this cookie is strictly necessary for the secure operation of the forms requested by the user; it is therefore not subject to prior consent within the meaning of the applicable regulations (ePrivacy Directive and CNPD guidelines).
3.3.2 Advertising measurement cookies (Google Ads, Meta, ChatGPT Ads), campaign pages only
The campaign pages www.aixh.com/agence/ and www.aixh.com/agence/merci/, to which some of our advertisements point, may use the Google Ads tag (identifier AW-11369775658) of Google Ireland Limited, the Meta pixel (identifier 1018412952769166) of Meta Platforms Ireland Limited, and the ChatGPT Ads measurement pixel (identifier TvmmhBxYaRzT6r6EM7VzUP) of OpenAI. No other page of the website uses them.
- Purposes: measuring the effectiveness of our advertisements (counting visits and form submissions attributable to an advertisement), and building remarketing audiences so that AIxH advertisements can later be shown to visitors of these pages, on Google services, on Facebook and Instagram, and in ChatGPT. When a form is submitted, the email address entered may be transmitted to Google in hashed (irreversible) form to improve conversion attribution (a feature known as “enhanced conversions”).
- Legal basis: your consent (Article 6.1.a of the GDPR), collected through the banner displayed on these pages. No advertising cookie is set and no data is transmitted to Google, Meta or OpenAI until you have clicked “Autoriser les cookies” (Allow cookies). Refusing has no consequence on the operation of the pages or of the form.
- Data concerned: cookie identifiers, pages viewed, IP address, browser characteristics, advertising click identifier, and where applicable the hashed email address mentioned above.
- Retention period: your choice (acceptance or refusal) is stored in your browser for six (6) months. The lifetime of the cookies set by Google is described in its cookie documentation; it does not exceed thirteen (13) months. The Meta pixel cookies (in particular
_fbp) have a lifetime of ninety (90) days, described in Meta's cookie policy. The ChatGPT Ads pixel sets a first-party cookie (__oppref) which stores the advertising click identifier; its lifetime is described in OpenAI's documentation. - Recipients and transfers: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The data may be transferred to Google LLC in the United States, under the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. See Google's privacy policy. Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland) may transfer the data to Meta Platforms, Inc. in the United States under the same framework. See Meta's privacy policy. OpenAI (OpenAI Ireland Ltd for European users) may transfer the data to OpenAI in the United States under the transfer mechanisms provided for by the GDPR. See OpenAI's privacy policy.
- Withdrawing your consent: at any time, through the “Cookies” link in the footer of these pages, which reopens the choice banner. You can also delete cookies from your browser settings.
You can configure your browser to refuse cookies; in that case, submitting the contact and newsletter forms may no longer work correctly.
For any question about cookies or your personal data, you can contact us at: hello@aixh.com.
Article 4: Data controller and Data Protection Officer
Article 4.1: Data controller
The data is collected by AIxH Sàrl, registered under number B279161.
To contact the data controller:
Postal address: 115C, rue Emile Mark, L-4620 Differdange, Luxembourg
Email: hello@aixh.com
Article 4.2: Data Protection Officer (DPO)
The designated Data Protection Officer (DPO) is: Grégory Camus - hello@aixh.com
If you consider that your rights are not being respected after contacting us, you can lodge a complaint with the CNPD (Commission nationale pour la protection des données, Luxembourg's data protection authority).
Article 5: Users' rights regarding the collection and processing of data
In accordance with the GDPR and the French Data Protection Act (Law No. 78-17 of 6 January 1978), every user has the following rights:
- Right of access to, rectification and erasure of data (Articles 15, 16 and 17 of the GDPR);
- Right to data portability (Article 20 of the GDPR);
- Right to restriction of processing (Article 18 of the GDPR) and right to object to processing (Article 21 of the GDPR);
- Right not to be subject to an automated decision;
- Right to decide what happens to their data after death;
- Right to lodge a complaint with the competent authority (Article 77 of the GDPR).
To exercise your rights, you can send a request:
By post: AIxH Sàrl, 115C, rue Emile Mark, L-4620 Differdange, Luxembourg
By email: hello@aixh.com
To ensure the request is processed, the user may be asked to provide information enabling identification (full name, email address, account information).
To find out more about your rights: cnpd.lu
Article 6: Changes to the privacy policy
The publisher of the website www.aixh.com reserves the right to amend this policy at any time in order to keep it compliant with the legislation in force.
Users are invited to consult this policy regularly; no specific notification will be sent in the event of a change.