- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”),
- Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications or “ePrivacy”),
- and Law No. 78-17 of 6 January 1978 on data processing, data files, and individual liberties as amended,
(hereinafter referred to together as the ” Applicable Regulation “).
This policy may be updated to reflect legislative, regulatory or internal changes within FLEXIS, the latest applicable version being available on our website: https://flexis-mobility.com
It should be read in combination with our Cookie Policy, available at https://flexis-mobility.com/cookie-policy/.
- Scope of the policy
This policy is intended for any person visiting our website, as well as for our prospects and customers, whose personal data may be collected and processed in this context by FLEXIS.
If you apply for a job offer offered by FLEXIS, please consult our data protection policy dedicated to recruitment, accessible here: https://www.smartrecruiters.com/fr/legal/general-privacy-policy/.
- Data controller
In the context of the processing of personal data implemented by FLEXIS on the https://flexis-mobility.com/ website, FLEXIS, SAS, whose registered office is at 122-122 bis avenue du Général Leclerc 92100 BOULOGNE-BILLANCOURT, registered with the Nanterre Trade and Companies Register under number 911 040 483 (hereinafter “FLEXIS” or “we”), acts as data controller, i.e. the entity that defines the purposes pursued and the means implemented for the processing of your personal data: it is, in principle, responsible for the processing described in this policy.
- Your point of contact
A team dedicated to the protection of personal data ensures, in complete independence, that all processing of personal data complies with the applicable Regulations.
If you have any questions, requests for information or complaints about the data processing carried out by FLEXIS, you can contact us at the following address: data.privacy@flexis-mobility.com
For any other request relating to our services, we invite you to contact our customer relations department via the form provided for this purpose: dedicated form.
We are committed to processing your requests as quickly as possible and to ensuring that your rights are fully respected. If, after contacting us, you consider that your rights have not been respected, you have the option of filing a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL):
- by postal mail to the following address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07 ;
- or directly online on the CNIL website: cnil.fr.
- Personal data processed, reasons for processing and retention periods
We process your personal data only when we have a valid legal basis and a specific purpose. Only the information that is strictly necessary for the achievement of these purposes, or required by the regulations applicable to our activity, is collected and used.
The type of data concerned depends on the nature of your exchanges with FLEXIS. For some processing, the provision of certain information may be mandatory. Otherwise, we will not be able to provide you with the corresponding service. This obligation is always indicated at the time of collection and has no impact on the possibility of exercising your rights.
Your data may be collected:
- directly from you, in particular when you fill in a contact form on our website, subscribe to our newsletter or participate in professional events (e.g. trade fairs or conferences);
- automatically when you browse our website, by means of cookies or other trackers placed on your device. For more information, please refer to our Cookie Policy.
Retention periods
We only store your personal data for as long as necessary to achieve the purposes for which it was collected. At the end of this period, they are either deleted or archived for evidentiary purposes during the statutory limitation periods, or to meet certain legal obligations, in particular accounting and tax obligations.
During the archiving period, your data will not be used, except in the event of litigation or to meet a legal requirement. Once these periods have expired, they are permanently deleted.
| Purposes | Legal bases | Categories of data | Retention periods |
| Carry out commercial operations (prospecting, service offers, invitations to professional events) | Consent | Identity, professional contact details (surname, first name, e-mail, telephone, company, position), interests, other data provided when participating in a game or event | 3 years from the last contact or withdrawal of consent |
| Communicate our newsletter and news (products, innovations, professional events) | Consent | Identity, business contact information, job title, company | Until the withdrawal of consent or 3 years after the last contact |
| Respond to requests made via our contact forms or at professional events | Legitimate interest | Identity, business contact details, message content, company, job title | 3 years from last contact |
| Organize and lead our professional events (trade shows, vehicle tests, product presentations) | Consent / Legitimate Interest | Identity, business contact details, company, function, logistical data (registrations, preferences, meals, travel) | 2 years after the end of the event |
| Ensuring the security of our information systems, preventing fraud and abuse | Legitimate interest / Legal obligation | Identity, technical data, connection logs, IP address, information on the use of the site or services | 1 year after the last connection |
- Types of Communications You May Receive
Depending on the nature of your relationship with FLEXIS and the applicable legal basis, you may need to receive different types of communications from us.
- Communications based on your consent
Subject to your prior consent, you may receive our newsletter by e-mail as well as prospecting or information messages relating to our services and news. You can withdraw your consent at any time by clicking on the unsubscribe link in each of our messages.
- Communications based on our legitimate interest (objection mechanism)
If you have not objected, we may also send you electronic communications, in particular to respond to your contact requests or to send you information related to our activities.
This processing is based on our legitimate interest in ensuring the follow-up of our exchanges and the proper management of the relationship with our users.
In any case, you retain the possibility of opposing the receipt of these messages at any time, either by using the unsubscribe link integrated into our emails, or by contacting us at the email address indicated on our website.
- Recipients of your data
Access to your personal data is strictly limited to FLEXIS staff members who need it in the course of their duties and in accordance with the need-to-know principle.
Some of your data may also be passed on to third parties, where this is necessary for the purposes pursued. These include:
- Our service providers acting on behalf of FLEXIS in the context of the provision of certain services. These third parties only have access to the information strictly necessary for the performance of their missions and act in accordance with our contractual instructions, in compliance with the Applicable Regulations.
| Provider Name or Categories | Completed activities |
| Salesforce | Customer relationship management (CRM): tracking interactions, managing user requests, saving forms, and marketing campaigns. |
| OVH | Website hosting and content delivery. Temporary storage of certain technical data necessary for the functioning of the site. |
| Cloudflare | Processing of IP addresses and browsing metadata to protect and optimize the site. |
| ADVERIS | Marketing and optimization analyses of the user experience on the site on behalf of FLEXIS.
– Access to data from forms. – Access to data from forms and data from the Matomo audience measurement cookie. For more information on the types of data collected and how they are used, please see our Cookie Policy |
- Any third party, acquirer, assignee, successor or proposed successor, in connection with a restructuring that would acquire or merge with all or part of our organization, including at the negotiation stage.
- Any authority, court or any other third party when such communication is required by law, regulatory provision or judicial decision, or if such communication is necessary to ensure the protection and defense of our rights.
- Our social media partners when you use the relevant application buttons on our website to follow us or to share our content. These networks receive your IP address as well as information about your browser, operating system and language settings. They act as independent data controllers: for more information or for any questions or complaints, please refer to their own policy.
- Our partners use “third-party cookies” when they are enabled on our website. For more information, please refer to our dedicated policy.
- Data transfers outside the European Union
We may use service providers or partners based outside the European Union, or belong to groups headquartered outside the EU, or they may use subcontractors located in third countries.
In such cases, we ensure that any transfer of personal data is carried out in strict compliance with the applicable Regulations. These transfers are regulated:
- either by an adequacy decision by the European Commission recognising a level of protection equivalent to that in force within the European Union;
- or through the establishment of appropriate contractual safeguards, such as the signature of the standard contractual clauses adopted by the European Commission.
- Rights you have and how to exercise them
In accordance with the applicable Data Protection Regulations, you have several rights relating to the use of your personal data.
Right to withdraw consent
If the processing of your data is based on your consent, you can withdraw it at any time, without giving reasons. This withdrawal does not affect the lawfulness of the processing carried out before this revocation.
Right of access
You have the right to obtain confirmation that we are processing your personal data, to access or receive a copy of it, as well as to obtain information about the purposes and methods of such processing.
Right to rectification
You may request that your personal data be corrected or updated if it is found to be inaccurate or incomplete.
Right to erasure
You may, in some cases, request the deletion of your personal data.
This right may be exercised in particular:
- if you withdraw your consent for processing based on it;
- if you object to processing;
- if your data has been processed unlawfully;
- if your data is no longer necessary for the purposes for which it was collected;
Right to Limitation
You can request the restriction of the processing of your data, i.e. its storage without active use, in certain situations.
This right can be exercised, for example, when you contest the accuracy of the data used, when you object to its processing or when you wish to keep it to exercise a right.
However, we may continue to process your data if you have consented to this, or if this is necessary for the establishment, exercise or defence of legal claims, the protection of the rights of others, or for important reasons of public interest.
Right to portability
You can request to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, or to have it transmitted to another controller. This right only applies if the processing is based on your consent or on a contract and is carried out by automated means.
Right to post-mortem directives
You can set directives for the fate of your personal data after your death (retention, erasure, disclosure to a third party). These directives can be general or specific, and a trusted person can be designated to carry them out. Otherwise, your heirs will be able to exercise certain rights, in particular the right of access or opposition, under the conditions provided for by law.
Right to object
You have the option of objecting:
- at any time, to the use of your data for commercial prospecting purposes;
- or, for reasons relating to your particular situation, any processing based on our legitimate interest.
In the latter case, we will terminate the processing in question, unless we can demonstrate compelling legitimate grounds to continue it or it is necessary for the defence of our legal rights.
How to exercise your rights?
To exercise your rights, you can send a request by e-mail to: data.privacy@flexis-mobility.com
For an easier treatment, it is recommended to indicate:
- Your full name
- The type of right concerned,
- The scope of the request and the personal data to which it relates
Requests are handled jointly by the team in charge of the protection of personal data and the operational teams concerned.
We have one month to respond to your request. This period may be extended by two months given the complexity and number of applications we receive. If necessary, we will inform you, within one month, of this postponement and the reasons for it. If there is reasonable doubt about your identity, we may ask you for additional information or proof of identity.