Privacy and personal data

Hexagone Manufacture SASU, 1-5 rue Michel Carré, 95100 Argenteuil, France. For anything concerning your data: rgpd.hexagone@gmail.com.

The site has a quote basket and a demonstration form. Both send the same message to our sales team.

What is sent: organisation, name, role, e-mail, telephone, town, country, type of facility, the product or service concerned, timeline, your message, and the references you put in the basket.

Purpose: answering your enquiry, preparing a quote and following it up. Legal basis: your consent, given through the tick-box on the form, and Hexagone's legitimate interest in replying to a commercial approach.

Recipients: the Hexagone Manufacture sales team. A confirmation copy is sent to the address you gave. This data is never sold, rented or passed on for advertising.

Retention: three years from the last contact, in line with the French data protection authority's guidance on business-to-business prospecting.

The site creates no account and stores no form data in a database: the message leaves by e-mail and then lives in the team's mailbox.

Two items are stored on your device so the site can work, and are therefore exempt from consent under the ePrivacy directive. To these is added, and only if you accept it, Google Analytics audience measurement: it is loaded only after you say yes, and your refusal is remembered just as long as your agreement would be.

HEXA_LOCALE — cookie, twelve months. Remembers the language you chose so the site does not send you somewhere else on your next visit.

Quote basket — browser local storage. Keeps your selection between pages. It never leaves your browser until you send the form, and you can empty it from the basket at any time.

Google Analytics, through Google Tag Manager — audience measurement. No script is downloaded and no cookie is set until you have accepted. Your choice is kept in your browser’s local storage, under the key HEXA_MESURE, and never leaves your device.

On your first visit the site picks a language from the country our host includes in the request headers, then from your browser's language preferences. Your IP address is not read by the site, not logged and not kept: only the country code is used, for as long as it takes to decide which version to show you.

Three outside services may be involved. None of them loads until you trigger it.

• Zendesk — the after-sales chat, on the service page only. The script is not downloaded, and its cookies are not set, until you click "Open the support chat". Zendesk is then responsible for whatever you tell it in the conversation.
• YouTube — the product films. The preview image is served from our own domain; no request reaches YouTube until you press play. The player used is youtube-nocookie.com.
• Our host — processes the requests technically and keeps connection logs for security and billing, on its own account.

Typefaces are served from our own domain. No request is made to Google Fonts.

Form data stays within the European Union. If you open the chat or play a video, the providers of those services may transfer data outside the EU under their own policies, to which we refer you.

The site is served over HTTPS. Form messages reach our mail server over an encrypted connection. Incoming fields are validated and truncated before sending, and only references that genuinely exist in the catalogue are carried into the message.

You have the right to access, correct, erase, restrict, object to and port your data. You can withdraw your consent at any time.

To exercise them, write to rgpd.hexagone@gmail.com. We answer within one month. If our answer does not satisfy you, you may complain to the CNIL, the French data protection authority (cnil.fr), or to your own national authority.