Artixium
Contact
Legal information

Privacy policy

How Artixium collects, uses, stores and protects personal data, and the rights you can exercise over it.

Contents

Last updated: 22 September 2026

Artixium (“we”, “us”, “our”) is committed to protecting the privacy of visitors to our website and users of our services. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and applicable French data-protection law.

1. Data Controller

The data controller responsible for your personal data is Artixium France, 112 avenue Franklin Roosevelt, 69120 Vaulx-en-Velin, France (RCS Lyon 804 669 919). For any privacy request you can contact us at contact@artixium.com.

2. Data We Collect

  • Contact details you provide through our forms (name, company, email, phone, message).
  • Account data for users of our Customer Portal or QMaker configurator (login identifiers, order and quotation history).
  • Technical data collected automatically when you browse the site (IP address, browser type, pages visited) — see our Cookie Policy.

3. How We Use Your Data

  • To respond to enquiries and provide quotations, products and support.
  • To operate, secure and improve your account and our services.
  • To send service communications and, with your consent, marketing information.
  • To comply with our legal and accounting obligations.

4. Legal Basis

We process personal data on the basis of your consent, the performance of a contract with you, our legitimate interest in operating our business, and compliance with legal obligations.

5. Service Providers & International Transfers

We do not sell your personal data. We share it only with the service providers (processors) who operate our services on our behalf, under data-processing agreements:

  • Elementor (website hosting) — Elementor EU Ltd., on Google Cloud Platform infrastructure.
  • Supabase (Customer Portal and application database & file storage) — hosted on AWS within the European Union (eu-west-1, Ireland).
  • Railway (application hosting) — on Google Cloud within the European Union.
  • SendGrid / Twilio (transactional and marketing email) — based in the United States. This involves a transfer of personal data outside the EU, carried out under the European Commission’s Standard Contractual Clauses (SCCs).
  • Google reCAPTCHA (spam protection for our forms) — Google Ireland Ltd. / Google LLC. On pages that contain a form, reCAPTCHA v3 analyses your interaction with the page (IP address, browser and device information, browsing behaviour) to tell human visitors from bots. This processing is based on our legitimate interest in protecting our forms against spam and abuse. Data may be transferred to the United States under the EU–US Data Privacy Framework and standard contractual clauses. See Google’s Privacy Policy and Terms of Service.

We may also disclose data to public authorities where required by law.

6. Job Applications

When you apply through our Careers page or send us a speculative application, we process the information you provide: first and last name, contact details, area of interest, message and CV.

  • Purposes: reviewing your application, contacting you and arranging interviews, and, if no position is immediately suitable, contacting you about another opportunity during the retention period.
  • Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and, for later contact, our legitimate interest in building a pool of candidates.
  • Recipients: only the people in charge of recruitment at Artixium (management and the head of the relevant department). Your data is hosted by our technical providers (Elementor for the website, SendGrid for email delivery) and is never shared with third parties or used for marketing purposes.
  • Retention period: 1 year from our last exchange, after which it is deleted. If your application leads to employment, it is added to your personnel file.

You may at any time request access to, correction or deletion of your data, or withdraw your application, by writing to contact@artixium.com.

7. Retention

We keep personal data only as long as necessary for the purposes described above or as required by law:

  • Contact, quotation and estimate requests: 3 years from our last exchange.
  • Showroom visit bookings: 3 years from our last exchange.
  • Customer data: for the duration of the business relationship, then 3 years after it ends.
  • Customer portal accounts: deleted after 2 years without login or activity.
  • Invoices and accounting records: 10 years, in restricted-access archives, as required by the French Commercial Code.
  • Objections to marketing: 3 years.
  • Job applications (CVs and related information): 1 year from our last exchange, as described in section 6.

At the end of these periods, data is deleted or anonymised. It may be kept longer in restricted-access archives where required by law or in the event of a dispute, for the applicable limitation period.

8. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to data portability. You may withdraw consent at any time and lodge a complaint with the French supervisory authority (CNIL, www.cnil.fr). To exercise your rights, contact contact@artixium.com.

9. Changes

We may update this Privacy Policy from time to time. The latest version will always be available on this page.