Privacy Policy

1. Controller and scope

For processing it determines itself, Exadvize acts as controller. Pro XY – Legal, a French simplified joint-stock company (SAS) with share capital of €500, registered with the Nîmes Trade and Companies Register under number 984 534 339, with registered office at 143 rue des Seinches, 30240 Le Grau-du-Roi, France.

For business data processed in the platform on behalf of a client organization, that organization is generally the controller and Exadvize acts under the applicable data-processing agreement.

2. Data and purposes

We process contact details and communications needed for demo requests, commercial relations, contracting, billing, support, security, and the establishment, exercise or defense of legal claims.

Data entrusted by a client organization is processed to provide the agreed service, under its instructions and applicable contractual scope.

• Browsing: technical data strictly necessary for website operation and security.
• Demo: information provided while booking or corresponding with us.
• Client relationship: professional identity, access, administrative communications and billing information needed.
• Platform: data processed on the client’s behalf, under the DPA where applicable.

3. Legal bases, recipients and transfers

Depending on the purpose, processing is based on pre-contractual steps or contract performance, legal obligations, or Exadvize’s legitimate interests in security, commercial relationship management and defense of rights.

Access is limited to authorized personnel and, where needed, categories of hosting, operations, booking, payment, invoicing or advisory providers. Data is limited to what their mission requires.

Any transfer of personal data outside the EEA is governed by the applicable legal mechanism. Required information is provided for the relevant service.

4. Retention and security

Prospect contact details and communications are retained while handled and for no more than three years from collection or the prospect’s last contact. Invoices and accounting records are retained for the applicable legal period, including ten years from the close of the relevant financial year.

Security logs are retained only as necessary, for no more than twelve months except in the event of an incident, legal obligation or dispute. Data processed for a client follows the contract, applicable instructions and return or deletion rules.

Exadvize implements risk-appropriate technical and organizational measures, including access controls, protection of data in transit and at rest, proportionate logging and incident management.

5. Your rights

You may request access, correction, deletion, restriction, objection or, where applicable, portability. Write to contact@exadvize.com. Additional information may be requested where there is reasonable doubt about identity.

For data processed on behalf of a client organization, please contact that organization first. You may lodge a complaint with the CNIL or another competent supervisory authority.