Privacy policy.

1. Overview of the privacy policy for the XXII GROUP website

XXII GROUP strives to offer you the best possible service. We therefore wish to maintain your trust by informing you of our policy regarding the use of your personal data and the storage of cookies from our website on your device (computer, smartphone, tablet, interactive television, etc.).

The term “personal data” refers to information that allows you to be identified directly as a natural person, such as your surname, first name, email address, and telephone number, or indirectly (a telephone number, order number, etc.).

European Union regulations, in particular the General Data Protection Regulation (GDPR), govern the use of your personal data by third parties.

The purpose of this Privacy Policy is to explain what personal data about you is used by XXII GROUP when you browse our website, how it is used, and what rights you have.

2. What personal data do we process about you?

As part of our activities, we collect and record personal data about you.

When you contact us via the contact form, we collect data relating to your contact request (last name, first name, company, phone number, and email address).

When you subscribe to the XXII GROUP newsletter, we collect data relating to this subscription (email address).

In addition to the personal data you provide us with, we may also collect your browsing data through cookies.

3. Why is your data used?

This data is used to manage your contact requests on our website, send you our newsletter, assess the suitability of our services to your needs, and identify potential prospects.

Exercise your rights under the rules relating to the protection of your personal data.

4. What are the legal grounds for processing your information?

The processing of your personal data by XXII GROUP is mainly based on the legal basis of consent. This consent is collected using a cookie banner, which allows you to express your choices, or a checkbox on the Contact Form and Newsletter.

5. Who are the recipients of your personal data?

Your personal data (last name, first name, company, email address, and phone number) is only shared with the XXII GROUP sales and marketing team, as well as our website hosting subcontractor, namely: Hubspot, 91 Boulevard Haussmann, 75008 Paris (EU) (see the Hubspot's DPA) .

6. Storage of your personal data.

Your personal data collected for contact requests is deleted within three years of the last contact between the individuals and XXII GROUP.

7. Transfer of data outside the European Union.

XXII GROUP does not transfer your personal data outside the European Union. 

Certain data may occasionally be transferred to servers outside the EU, but this does not concern your personal data as this data is anonymous.

8. Your rights

You have the right to access, obtain information about, rectify, erase, restrict, and object to the processing of your personal data, as well as the right to data portability, by sending an email to the following address: dpo@xxii.fr

Any person whose personal data is collected may define general or specific guidelines regarding the storage, erasure, and communication of their personal data after their death, and withdraw their consent at any time.

You also have the right to lodge a complaint regarding our processing of your personal data with the CNIL (Commission Nationale Informatique et Libertés) on its website: https://www.cnil.fr.

9. Cookie policy

9.1 Cookies we use

A cookie is a small text file containing fragments of information, consisting of letters or numbers stored in your browser or on your computer's hard drive.
When you visit websites, the information collected by various cookies is stored on your device (e.g., your preferred language for a website).
When you visit these websites again, they will search your device for the information they have stored there (e.g., website configuration based on your preferred language).

There are different types of cookies:

• On the one hand, there are “first-party cookies,” which are set by us.
• On the other hand, there are “third-party cookies,” which are set by companies other than us (e.g., third-party cookies are often used by advertising companies to target your preferences and send you advertisements that may be of interest to you).

Details of cookies set by our host Hubspot: Cookies placed in the visitor's browser.

9.2 Legal basis

As with all other processing of personal data on our website, our cookies are based on your consent, which you give by taking positive action after being informed via an explanatory window that allows you to accept, refuse, or withdraw your consent at your discretion. 

9.3 Tools

We use the following tools for our cookies:

• Hubspot, 91 Boulevard Haussmann, 75008 Paris (EU): our website host (see the Hubspot's DPA) ;
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, (EU): we carry out our commercial analyses (mentioned below) using the Google Analytics 4 tool, and we issue our advertisements (mentioned below) using the Google Ads tool (see the Google Ads DPA). It should be noted that according to Google's recent policy, no personal data is stored for these cookies (European URLs are immediately deleted). Only anonymous data is stored.

9.4 Purposes of cookies used

• Cookies and similar technologies used for operational purposes, considered essential, allow you to access the essential features of a service. This includes cookies set by HubSpot's CDN provider due to its rate limiting policies, basic cookies that remember imperative choices such as the language displayed, acceptance of the privacy policy, accepted category choices, or the activation of features or completion of tasks you have requested.
• We also use cookies and similar technologies for security purposes to protect you when you interact with a service by authenticating users, tracking service outages, and protecting against spam, fraud, and abuse, but also necessary for protection against bots.
• Some cookies and similar technologies are used for analytics purposes to better understand your interactions with our services, provide you with a better experience by optimizing our website, evaluate the relevance of its content, measure audience engagement, site statistics and performance, and, as a result, improve our services, their functionality, and innovate. 
• Cookies may also be used for advertising purposes, including to deliver and display ads. These cookies are also used to limit the number of times an ad is displayed to the same user, block ads that you do not want to see, and evaluate the effectiveness of an ad for the same purpose.
• Finally, cookies and similar technologies are used to display personalized content/features, to manage and improve your user experience during a specific browsing session, in particular by distinguishing your usage preferences from those of other users of our website. 

However, cookies and similar technologies do not allow us to systematically collect data that could identify you. 

9.5. Managing cookies

You have several options for deleting cookies.

Although most browsers are set by default to accept cookies, you can choose to accept all cookies, reject non-essential cookies, or choose which cookies to accept based on the issuer.

You can also set your browser to accept or reject cookies on a case-by-case basis prior to their installation. You can also regularly delete cookies from your device via your browser.

The configuration of each browser is different for managing cookies and your choices. It is described in your browser's help menu, which will allow you to find out how to change your cookie preferences.

How to delete cookies?

Important: If you delete cookies, you may be logged out of sites that remember you, and your saved preferences may be deleted. This applies every time a cookie is deleted.

From our consent banner

1. Click on “Cookie settings” (or “Manage my preferences”) at the bottom of the page to reopen the banner.
2. Disable unnecessary categories or click “Decline non-essential” to withdraw your consent; this will prevent non-essential cookies from being stored in the future.
3. Save your choices.

(To delete cookies already stored by your browser, also follow the browser instructions below.) 

Google Chrome (computer)

1. Delete all cookies
   - Open Chrome → Menu ⋮ → Settings.
   - Menu ≡ → Privacy and security → Third-party cookies → See all site data and permissions → Clear all data → Clear.
   
   
2. Delete cookies for a specific time period
   - Menu ≡ → Clear browsing data.
   - Select the Time range → check Cookies and other site data → Clear data.
   
   
3. Delete cookies for a specific site
   - Settings → Privacy and security → Third-party cookies → See all site data and permissions.
   - Search for the site → Remove → Remove.

Google Chrome (Android)

1. Open Chrome → Menu ≡ → Settings → Privacy and security → Clear browsing data.
   
2. Select the Time range → check Cookies and site data → Clear data.

Mozilla Firefox (computer)

1. Delete cookies from the current site
   Click on the padlock to the left of the address bar → Clear cookies and site data.
   
   
2. Delete cookies from a specific site
   - Menu ≡ → Settings → Privacy and security → Cookies and site data section → Manage data….
   - Search for the site → Delete selection (or Delete all shown) → Save changes.
   
   
3. Delete all cookies
   Menu ≡ → Settings → Privacy and security → Cookies and site data → Clear data... → check Cookies and site data → Clear. 

Safari (Mac)

1. Open Safari → Safari ▸ Settings (or Preferences depending on the version) → Privacy.
2. Manage website data → select one or more sites → Remove (or Remove All). 
   

Safari (iPhone / iPad)

1. Clear history + cookies
   Settings → APP → Safari → Clear History, Website Data → Confirm.
   
   
2. Clear only cookies / site data
   Settings → Safari → Advanced → Site Data → Remove Site Data → Remove. 

Microsoft Edge (computer)

1. Delete all cookies
   - Menu → Settings → Privacy, search, and services.
   - Clear browsing data section → Choose what to clear → Time range → Check Cookies and other site data → Clear now.
   
   
2. Delete cookies from a specific site
   - Settings → Cookies and site permissions → Manage and delete cookies and site data → View all cookies and site data.
   - Search for the site → open the line → Delete.

10. Incident management

If an incident is identified, anyone is invited to notify XXII GROUP immediately via the email address of its DPO: dpo@xxii.fr.