Privacy policy
Your privacy and the security of your data matter to us. This document describes the types of information collected, used and shared when you visit the NORMAXIS website or contact us through the form.
Data controller
The controller of the data collected through this website is NORMAXIS, a French limited liability company registered with the Aix-en-Provence Trade and Companies Register under No. 823 618 582, registered office at 10 rue du Lieutenant Parayre, Espace Wagner Building A2, 13290 Aix-en-Provence, France (referred to as "We"). As a website user, you are referred to as "User" or "You".
Functional address for any question about personal data and for exercising your rights: contact@normaxis.com.
Requests addressed to the other websites of the group fall under separate controllers: processing carried out on irice-certification.com is controlled by IRICE, the certification body, not by NORMAXIS.
Legal bases for processing
| Processing | Legal basis |
|---|---|
| Responding to enquiries submitted through the contact form | Legitimate interest of NORMAXIS in responding to enquiries received |
| Handling job applications (Careers section) | Pre-contractual measures taken at the request of the data subject |
| Creation and management of a Sextant / Select account | Performance of the service contract |
| Website audience measurement | Legitimate interest, under a consent-exempt configuration (anonymised measurement, no cross-site matching) |
| Anti-spam protection of public forms | Legitimate interest of NORMAXIS in the security and availability of the website |
| Retention of accounting and contractual records | Legal obligation |
Processors
- Infomaniak Network SA (Switzerland), website hosting and email.
- Matomo, on a self-hosted instance operated by NORMAXIS on its own server, audience measurement. No audience data is transmitted to a third-party analytics vendor.
- mosparo, on a self-hosted instance operated by NORMAXIS, anti-spam protection of public forms.
Transfers outside the European Union
Data is hosted in Switzerland, a country recognised as providing an adequate level of protection by a decision of the European Commission. No other transfer outside the European Union takes place.
Data we collect
Log files automatically record: browser, device type, timestamp, pages visited, IP address (anonymised). We may also collect information you voluntarily provide through the contact form: first name, last name, email, phone, company, job title, message.
Sextant client area, Select application (environmental approaches selector)
If you create an account to access the Select application (approaches selector in the Sextant area), we collect:
- Your email address (login identifier) and your name.
- The answers entered in the profiling questionnaire (project typology, phase, location, constraints). These data describe a project, not individuals: they are not considered sensitive personal data.
- The simulations generated in Select and the approaches displayed, as well as PDFs downloaded (generation timestamp only).
Purpose of processing
Processing is strictly limited to: (1) displaying the approaches matching the profile you declared, (2) allowing you to download a PDF summary, (3) contacting you back only if you request a professional framing through the support form.
Internal recipients
Your data may be accessed by the teams of the three operational subsidiaries of the NORMAXIS group: IRICE (certification), ARKENOR (environmental consulting) and ARKEMEP (energy/carbon). No data is transmitted to an external third party, with the exception of the host (Infomaniak, Switzerland, a country recognised as adequate by the European Commission).
Retention period
Data linked to your Sextant account (and to simulations performed in Select) are retained for the entire duration of account activity, then 3 years after the last connection. You may request immediate deletion at any time (see GDPR section below).
No automated processing with legal effect
Select is an educational discovery tool. The results displayed constitute neither personalised advice nor an automated decision producing legal effects within the meaning of article 22 of the GDPR. No commercial profiling is performed.
Sharing of your personal information
We do not share, sell, exchange or rent any personally identifiable information to third parties, except where required by law or in case of breach of our terms of use.
To ensure certain functionalities (hosting, mail), we rely on subcontractors subject to a contract guaranteeing the confidentiality and protection of your data.
Cookies and audience measurement
The website places technical cookies necessary for its operation, together with the trackers of the self-hosted Matomo instance described above, configured in consent-exempt mode (IP anonymisation, no cross-site matching, no transmission to third parties). No advertising or marketing-tracking cookie is placed.
General Data Protection Regulation (GDPR)
In accordance with the GDPR (Regulation EU 2016/679), you have the following rights over your data: right of access, rectification, erasure, restriction of processing, objection and portability.
To exercise these rights (including deletion of your account and associated simulations), contact us at contact@normaxis.com. We reply within a maximum of 30 days. You may also lodge a complaint with the French data-protection authority (CNIL).
Retention periods
- Enquiries submitted through the contact form: the time necessary to process the request and, at most, 3 years after the last exchange.
- Sextant account and Select simulations: for the lifetime of the account, then 3 years after the last login.
- Job applications: as set out on the candidate data (GDPR) page.
- Audience measurement data: 13 months maximum.
- Accounting and contractual records: 10 years, in accordance with the French Commercial Code.
Beyond those periods, data is deleted or anonymised, except where a longer legal retention obligation applies.
Email communication
We may contact you by email in response to your request. No commercial communication is sent without your prior explicit consent.
External links
The website may contain links to third-party sites. NORMAXIS is not responsible for the content or privacy practices of these sites.