Controller
Hexaconto, 53 boulevard Suchet, 75016 Paris, France. Contact: cabinet@hexaconto.com.
Data we collect
Contact form
Data: name, e-mail, phone (optional), company (optional), profile, headcount, need, timeframe, where you are in your search (optional), status of your books, language and message; where applicable, the result of the compatibility test, the page you came from and your budget estimate answers (which you can choose not to attach).
Purpose: to answer your request and, where relevant, send you an engagement proposal.
Legal basis: pre-contractual steps taken at your request.
Retention: three years after our last contact.
Online booking
How it works: the booking calendar (Calendly) only loads when you click to display it.
Data: what you enter to book (name, e-mail, time slot, any details) and, if you come from the budget estimator, your answers, prefilled in the details field (you can choose not to attach them).
Purpose: to organise the introductory meeting.
Legal basis: pre-contractual steps taken at your request.
Retention: three years from the last contact, unless a contractual relationship begins.
Audience measurement
Data: pages viewed, traffic source, technical device information, cookie identifiers.
Purpose: understanding how the site is used (Google Analytics 4).
Legal basis: your consent via the cookie banner.
Retention: cookies up to 13 months; statistics up to 14 months.
Website security
Data: IP address, browser, requests. The IP address, browser and originating page are also included in the internal copy of messages sent through the site’s forms.
Purpose: protecting the site against attacks and abuse, and keeping a record of messages received and sent.
Legal basis: our legitimate interest.
Retention: as long as strictly necessary.
Recipients
Data is used by the firm only. It may be processed on our behalf by our technical providers (hosting, Google e-mail, Calendly for online booking, Google Analytics if you consent, security software). Transfers outside the EU are covered by GDPR safeguards (adequacy decisions including the EU–US Data Privacy Framework, or standard contractual clauses).
Cookies
No audience measurement cookie is set without your consent. We store your choice for 6 months (hx_consent, browser local storage). Google Analytics cookies (_ga, _ga_*) are set only if you click “Accept”. You can change your choice at any time via “Cookie settings” at the bottom of each page. Session storage (hx_slidein, hx_guide_en, hx_contact) only remembers a closed box, your conversation with the site guide and the contact details you just entered, while the tab is open; nothing is sent to us or to third parties. Third-party tools (Urssaf simulators, Calendly booking) load only when you click to start them and may then set their own cookies.
Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability and the right to withdraw consent. Write to cabinet@hexaconto.com. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
The French version of this policy prevails.