Privacy.

Data controller

NAEXYS, a French SASU with share capital of €1,000, registered under number 995 037 512 RCS Paris, with its registered office at 66 avenue des Champs-Élysées, 75008 Paris, is the controller for the enquiries addressed to it.

For any questions or requests about your personal data: contact@naexys.fr.

Form data and purposes

The form collects your name, company, work email address, selected requirement and project description. Estimated quantity and delivery date are optional. Fields marked with an asterisk are required so that we can review your enquiry and respond.

We use this information to prepare a response, discuss your project and, if you wish, provide a commercial proposal. Submitting the form does not subscribe you to a newsletter. Please avoid including sensitive information or third-party data that is not needed for the project.

Professional enquiries are processed on the basis of NAEXYS’s legitimate interest in responding to requests addressed to it (Article 6(1)(f) of the GDPR). Depending on the enquiry and the intended relationship with the person making it, steps taken at that person’s request before entering into a contract may also fall under Article 6(1)(b) of the GDPR.

Portfolio access requests

On acces.naexys.fr, the form collects your name, company, job title, email address, telephone number and project outline. NAEXYS uses this information to review your request and contact you. The request cannot be submitted without the required fields and project outline. Submitting it does not grant access to the portfolio.

The request is sent to contact@naexys.fr through Resend and then received in NAEXYS’s OVH email service. Cloudflare provides hosting and invisible Turnstile spam protection. For information about that service, see the Cloudflare Turnstile privacy addendum. Once NAEXYS approves access, Cloudflare Access verifies your email address with a one-time code to protect the portfolio.

Transmission and recipients

When the form is submitted, the information is saved in NAEXYS’s private management tool through the website infrastructure. A notification is also sent to contact@naexys.fr through FormSubmit (Devro Labs). NAEXYS and the service providers needed for this transmission and email delivery receive the data for that purpose.

FormSubmit states that it retains submissions for 30 days. Details are available in its privacy policy and documentation. Copying or downloading the brief takes place in your browser; the downloaded file remains under your control.

Retention

Correspondence is kept for as long as needed to review and follow up the enquiry. Enquiries that do not lead to an order are kept for no more than one year after the last relevant exchange, so that any further developments can be addressed. Data that is no longer needed must be deleted or anonymised.

Where a project leads to a contractual relationship, certain documents may be retained separately for the periods required by accounting or tax obligations, or to establish or defend legal claims. How long you keep your own downloaded copy is your decision.

Browsing and technical services

Visiting this website involves technical exchanges with the OpenAI Sites publishing platform and Cloudflare infrastructure, including those needed to deliver and secure its pages. The DM Sans font is hosted directly with the website.

A temporary flag stored in your browser session prevents the opening animation from replaying when you return to the home page. It contains no personal information and disappears when the tab is closed.

The website does not add advertising cookies. Cloudflare Web Analytics measures visits and performance on public pages, including pages viewed, referral sources, device types and load times. According to Cloudflare, this service does not set cookies, read browser storage or retain IP addresses in its databases or RUM logs. Information entered in forms is not sent to this tool. Analytics is not loaded when your browser sends a “Do Not Track” signal. Technical mechanisms specific to hosting or signing in to the platform may apply. External services follow their own policies: OpenAI, Cloudflare, Cloudflare Web Analytics documentation.

Some providers may process data outside the European Economic Area. Their policies explain how they process it; you can contact us for more information about how your enquiry is handled.

Google Analytics and your cookie choices

Google Analytics 4 is an optional service provided by Google Ireland Limited. With your consent (Article 6(1)(a) GDPR), it measures visits to public pages, referral sources, device types and project or access requests that have been successfully submitted. It is not installed in the private portfolio. Contact details, messages and other form values are not sent to Google Analytics. Query strings and fragments are removed from page addresses sent to the service.

No Google Analytics tag loads before you agree. Choosing “Continue without accepting” lets you continue browsing and submit an enquiry. Your choice is stored for six months in a necessary cookie called naexys_consent, shared by the main website and the access-request page. Use “Cookie settings” in the footer to change your choice at any time. Withdrawing consent blocks further measurement and deletes Analytics cookies set by the site; it does not automatically erase data already collected.

Analytics cookies with the nxga prefix expire after a maximum of six months and are not automatically renewed on every visit. Event-level and user-level data are retained in Analytics for two months; this setting does not apply to aggregated reports. Google Signals, advertising personalisation and automatic form tracking are disabled. Data may be processed outside the European Economic Area under Google’s contractual safeguards.

Learn more in Google’s privacy policy and data processing terms.

Your rights

Subject to the conditions set out in applicable law, you may request access to your data, rectification, erasure or restriction of processing. You may object to processing based on legitimate interests and, where the relevant conditions apply, request data portability.

Send your request to contact@naexys.fr, stating which right you wish to exercise and including the information needed to find your correspondence. We may ask you to verify your identity where necessary.

If you believe your rights have not been respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority.