Privacy policy
Last update : 29 December 2025
On this page...
This privacy policy applies to the website: Hexosim.
The purpose of this privacy policy is to inform users of the :
- How their personal data is collected and processed. Personal data is any data that can be used to identify a user. This includes first and last names, age, postal address, e-mail address, user location and IP address.
- What rights do users have regarding this data?
- Who is responsible for processing the personal data collected and processed.
- To whom this data is transmitted.
- The website’s cookie policy.
This privacy policy supplements the Terms and Conditions of Use, which users can consult at the address below:
Article 1: General principles of data collection and processing
In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of site users’ data complies with the following principles:
- Legality, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that his or her data is being collected, and for what purpose the data is being collected.
- Limited purposes: data is collected and processed for one or more of the purposes set out in these general conditions of use.
- Minimization of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site are collected.
- Data storage limited in time: data is stored for a limited period, of which the user is informed. When this information cannot be provided, the user is informed of the criteria used to determine the retention period.
- Integrity and confidentiality of data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below:
- The user has expressly consented to the processing.
- The processing is necessary for the proper performance of a contract.
- The processing is required by law.
- The processing is necessary to safeguard the vital interests of the data subject or another natural person.
- Processing may be necessary for the performance of a task in the public interest or in the exercise of official authority.
- The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.
Article 2: Personal data collected and processed when browsing the site
2.1. Data collected and processed and method of collection
The personal data collected on the Hexosim website are the following:
- First name and last name
- E-mail address
- Phone number
- Postal address
- Bank details
This data is collected when the user carries out one of the following operations on the site:
- When the user buys a product on the site.
- When the user uses the contact form to send a request.
- When the user subscribes to the Newsletter.
- When the user creates an account.
Moreover, when a payment is made on the site, the site editor’s computer systems will retain proof of the transaction, including the order form and the invoice.
The data controller will keep all data collected on the site’s computer systems under reasonable security conditions for a period of : 36 months.
Data is collected and processed for the following purposes:
- Contact
- Account registration
- Newsletter
- Delivery
- Payment
The data processing carried out is based on the following legal grounds:
- Contract execution
- User consent
2.2. Transmission of data to third parties
Personal data collected by the site may be transmitted to third parties: please refer to the appendix.
2.3. Data hosting
The Hexosim website is hosted by: o2switch
whose head office is located at the following address: Chemin des Pardiaux, 63000 Clermont-Ferrand, France
Contact: contact@o2switch.fr, Telephone: +33 4 44 44 60 40
Data collected and processed by the site is transferred to the following country(ies): France.
Article 3: Data controller
3.1. The data controller
The person responsible for processing personal data is: Gabriel Serrure.
Il peut être contacté via la page de contact.
The data controller is responsible for determining the purposes and means of processing personal data.
3.2. Obligations of the data controller
The data controller undertakes to protect the personal data collected, not to pass it on to third parties without the user’s knowledge, and to respect the purposes for which the data was collected.
The site has an SSL certificate to guarantee that information and data transfer via the site is secure.
An SSL certificate (“Secure Socket Layer” Certificate) secures the data exchanged between the user and the site.
In addition, the data controller undertakes to notify the user of any rectification or deletion of data, unless this would entail disproportionate formalities, costs or steps.
In the event that the integrity, confidentiality or security of the user’s personal data is compromised, the data controller undertakes to inform the user by any means necessary.
Article 4: User rights
In accordance with the regulations governing the processing of personal data, the user has the rights listed below.
In order for the data controller to comply with your request, you must provide us with your first and last name, as well as your e-mail address.
The data controller is obliged to respond to the user within a maximum of 30 (thirty) days.
4.1. Overview of user rights regarding data collection and processing
4.1.1. Right of access, rectification and deletion
L’utilisateur peut prendre connaissance, mettre à jour, modifier ou demander la suppression des données le concernant, en prenant contact avec l’éditeur via la page de contact.
If he/she has one, the user has the right to request the deletion of his/her personal space by going to the dedicated page in his/her Personal Space. Any unsubscription from the site will be effective immediately after the user has confirmed his/her choice.
4.1.2. Right to data portability
L’utilisateur a le droit de demander la portabilité de ses données personnelles, détenues par le site, vers un autre site, en prenant contact avec l’éditeur via la page de contact.
4.1.3. Right to limit and object to data processing
The user has the right to request the limitation of or to object to the processing of his/her data by the site, without the site being able to refuse, unless it can demonstrate the existence of legitimate and overriding reasons, which may prevail over the interests and rights and freedoms of the user.
Afin de demander la limitation du traitement de ses données ou de formuler une opposition au traitement de ses données, l’utilisateur doit prendre contact avec l’éditeur via la page de contact.
4.1.4. Right not to be subject to a decision based exclusively on an automated process
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on an automated process if the decision produces legal effects concerning him, or significantly affects him in a similar way.
4.1.5. Right to determine the fate of data after death
Users are reminded that they can organize what is to become of their collected and processed data if they die, in accordance with law no. 2016-1321 of October 7, 2016.
4.1.6. Right to appeal to the competent supervisory authority
In the event that the data controller decides not to respond to the user’s request, and the user wishes to contest this decision, or if he believes that one of the rights listed above has been infringed, he is entitled to refer the matter to the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr) or to any competent court.
Article 5. Use of “cookie” files
The site may eventually use “cookie” technology.
A “cookie” is a small file (less than 4 KB) stored by the website on the user’s hard drive, containing information about the user’s browsing habits.
These files allow it to process statistics and traffic information, facilitate navigation, and improve the service for user convenience.
For the use of “cookies” involving the storage and analysis of personal data, the user’s consent must necessarily be requested.
This user consent is considered valid for a maximum period of 6 (six) months. After this period, the site will request the user’s authorization again to save “cookie” files on their hard drive.
You can view your consent history here:
5.1. User’s opposition to the site’s use of “cookies”
Non-essential cookies for the website’s operation are only placed on the user’s device after obtaining their consent. The user can withdraw their consent at any time in the following manner:
More generally, the user is informed that they can refuse the recording of these “cookies” by configuring their browser software.
For your information, users can find instructions on how to configure their browser software to prevent “cookie” files from being stored at the following addresses:
- Chrome : https://support.google.com/accounts/answer/61416?hl=fr
- Firefox : https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences
- Safari : http://www.apple.com/legal/privacy/fr-ww/
- Internet Explorer : https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
- Opera : http://www.opera.com/help/tutorials/security/cookies/
If the user chooses to disable “cookies”, they may continue browsing the site. However, any malfunction of the site caused by this action cannot be attributed to the site publisher.
5.2. Description of the “cookies” used by the website
The website editor informs the user that the following cookies are used during navigation:
While browsing the site, the user is informed that third-party “cookies” may be stored.
Additionally, the site incorporates social media buttons, allowing users to share their activity on the site. As a result, social media “cookies” may be stored on the user’s computer when using these features.
The user’s attention is drawn to the fact that these sites have their own privacy policies and terms of use that may differ from this site. The site publisher encourages users to review the privacy policies and terms of use of these sites.
5.3. Cookie Management Tool
To manage cookies and similar technologies used (tracking pixels, web beacons, etc.) and the corresponding consents, we use the consent tool “Real Cookie Banner.” Details about how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for processing personal data in this context is Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of cookies and similar technologies used and corresponding consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide the personal data, we will not be able to manage your consents.
Article 6: Conditions for modifying the privacy policy
The site editor reserves the right to modify it in order to ensure its conformity with current law.
Consequently, the user is invited to consult this privacy policy regularly in order to keep abreast of the latest changes.
Article 7: Acceptance by the user of the privacy policy
By browsing the site, the user certifies that he/she has read and understood the present privacy policy and accepts its conditions, particularly with regard to the collection and processing of his/her personal data, as well as the use of “cookies”.
Enjoy your visit to the Hexosim website!