Oxysign Group attaches the greatest importance to protecting your personal data. This policy sets out transparently what data we collect, why, how long we keep it, who it is shared with, and the rights available to you. It applies to Oxysign Group website and to the processing carried out by the Group and its five brands: Oxysign, Semios, Interimages, C2K XXL and Toit de Paris.
Data controller
The controller of the personal data processed through this site is Oxysign Group. For any question regarding your personal data:
Data we collect
We only collect data that is strictly necessary for the purposes described below, in accordance with the data minimization principle.
- Identification and contact data: company, first name, email address and telephone number, submitted through our contact form.
- Content of your enquiry: the subject and message you send us.
- Technical data: strictly necessary for the operation and security of the site (see the Cookies section).
Fields marked with an asterisk in our forms are mandatory; all others are optional. We do not collect any "sensitive" data (health, opinions and the like).
Purposes & legal bases
Each processing operation rests on a specific legal basis within the meaning of Article 6 of the GDPR:
Data recipients
Your data is processed by authorized teams within Groupe Oxysign and, where relevant, within the brand concerned by your enquiry. It is never disclosed or sold to third parties for commercial purposes.
Our only technical sub-processor is Microsoft, which hosts our email and collaboration tools. Your data remains inside the Group's own Microsoft tenant and is not passed on to any third-party service.
Hosting & location
Your data is hosted within the European Union, on infrastructure located in France. No transfer of your data outside the European Union takes place. Should such a transfer become necessary, it would be covered by the safeguards set out in the GDPR (European Commission standard contractual clauses).
Retention periods
At the end of these periods, your data is securely deleted or anonymized.
Your rights
Under the GDPR, you have the following rights over your personal data at any time:
To exercise these rights, write to us at contact@oxysign-group.com stating the purpose of your request. We may ask for proof of identity in the event of reasonable doubt. We reply within one month of receiving your request.
Data security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure or destruction: encryption in transit, access control, hosting in France and restricted authorization for the staff who handle your data.
Complaint to the CNIL
If, having contacted us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at www.cnil.fr.
Changes to this policy
This policy may change to reflect regulatory developments or changes in our practices. Any substantial change will be flagged on this page, which shows the date it was last updated at the top.