Last updated: 16 February 2026
1. Data Controller
The website www.lexmagis.com (the “Site”) is operated by:
Maria Flaux
Trade name: LexMagis Compliance & Risk
Status: Sole trader (micro-entrepreneur – EI)
SIREN: 101107415
Address: 1235 Avenue du Jura, 01630 Sergy, France
Email: info@lexmagis.com
Maria Flaux, trading as LexMagis Compliance & Risk, acts as the data controller within the meaning of the General Data Protection Regulation (GDPR).
2. Personal Data Collected
Personal data may be collected when users browse the Site or voluntarily submit information through the contact form or by contacting us via email.
The categories of personal data collected may include:
- contact details (such as name, email address, telephone number)
- information contained in communications (messages sent via the contact form or by email)
- technical data (such as IP address or information related to the use of the Site)
- billing or payment information necessary for invoicing and payment of services
Certain data, in particular contact details and the content of the request, are necessary for handling inquiries and, where applicable, for providing services. Failure to provide such data may prevent us from responding or from providing the requested services.
3. Purpose of Processing
Personal data is processed solely for the following purposes:
- responding to inquiries and requests
- providing and managing our services
- managing communications
- to ensure the security of the Site, prevent misuse, and protect our rights
- maintaining the proper functioning of the Site
- to comply with applicable legal obligations or respond to requests from competent authorities.
- to process requests related to data protection and the exercise of users’ rights.
- administrative, accounting, and invoicing management of our services, including payment management
4. Legal Basis
Processing is based on:
- performance of a contract or steps taken at the user’s request prior to entering into a contract
- compliance with applicable legal obligations
- the legitimate interests of LexMagis, in particular to ensure Site security and proper technical operation
- the user’s consent, where personal data is submitted voluntarily through the contact form or otherwise where required
5. Data Retention
Contact data is retained for the time necessary to process requests and for a maximum of 12 months after the last contact.
Technical data related to the operation and security of the Site is retained only for as long as necessary for those purposes.
Billing, payment and accounting records are retained for the period required by applicable law, in principle 10 years.
6. Data Recipients
Personal data is not sold or transferred to third parties.
Data may be processed, strictly for technical and hosting purposes, by service providers located within the European Union, including the hosting provider.
Certain technical resources used by the Site (such as web fonts or similar technical services) may be provided by third-party providers, which may involve limited technical data exchanges such as IP addresses necessary for the delivery of website content.
Where necessary for invoicing and payment of services, payment-related information may also be processed by banking institutions.
7. Data Security
LexMagis implements appropriate technical and organizational measures to ensure the security and confidentiality of personal data.
In the event of a personal data breach presenting a risk to users’ rights and freedoms, the competent supervisory authority will be notified in accordance with GDPR requirements.
8. User Rights
In accordance with the GDPR, users have the right to:
- access their personal data
- rectify inaccurate personal data
- request erasure of their personal data
- request restriction of processing
- object to processing where applicable
- withdraw consent at any time, where processing is based on consent
- lodge a complaint with a supervisory authority, including the CNIL
- receive their personal data in a structured, commonly used and machine-readable format and request portability where applicable
Requests may be sent to: info@lexmagis.com
9. Cookies
The Site uses only technical cookies strictly necessary for its operation.
These cookies do not require user consent under applicable data protection rules.
Users may configure their browser settings to limit or block cookies; however, doing so may affect the proper functioning of the Site.
10. Data relating to Children
This Site and the services offered are not intended for children. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that personal data relating to a child has been collected without appropriate consent, we will take steps to delete such information.
11. Changes to This Policy
This policy may be updated to reflect legal, technical, or operational changes. Users are encouraged to consult it regularly.
English 
French