Privacy Policy
Last updated: 1 April 2026
1. Identity of the Data Controller
The data controller responsible for processing your personal data is:
The natural or legal person who determines the purposes and means of processing personal data, as defined by Article 4(7) of the GDPR.
Dextrivora (SASU — Société par Actions Simplifiée Unipersonnelle)
23 Rue Galilée, Paris, France
SIRET: 494 173 658 81798
Email: info@dextrivora.com
Phone: +33 1 42 61 42 49
2. Scope of This Policy
This Privacy Policy describes how Dextrivora collects, uses, stores, and protects personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, or GDPR), as well as French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties (Loi Informatique et Libertés), as amended.
Any information relating to an identified or identifiable natural person, including name, email address, IP address, or any combination of data that allows a person to be identified directly or indirectly.
This policy applies to all personal data collected through the website dextrivora.com, through our contact form, and in the context of our educational training services.
3. Data We Collect and How
Dextrivora collects personal data through the following channels:
3.1 Contact form
When you submit a message via our contact form, we collect your full name and email address (Step 1), and the content of your message (Step 2). This data is collected on the basis of your consent, given by completing and submitting the form and ticking the privacy checkbox.
3.2 Direct communication
If you contact us by email or phone, we may retain the content of that communication and any personal data it contains, for the purpose of responding to your enquiry and managing our relationship with you.
3.3 Session registration
When you register for a workshop or individual session, we collect the information necessary to organise and deliver the session: name, email address, and a description of your administrative situation. This data is processed on the basis of the performance of a contract (or pre-contractual steps at your request).
3.4 Website analytics
With your consent, we may collect anonymised browsing data (pages visited, session duration, device type) for the purpose of improving our website. This data does not identify you individually. See our Cookie Policy for full details.
4. Legal Bases for Processing
Each processing activity carried out by Dextrivora rests on one of the following legal bases provided for by Article 6 of the GDPR:
The lawful ground that permits a data controller to process personal data. The GDPR provides six possible legal bases: consent, contract, legal obligation, vital interests, public task, and legitimate interests.
| Processing activity | Legal basis |
|---|---|
| Responding to contact form enquiries | Consent (Article 6(1)(a)) |
| Session registration and delivery | Contract performance (Article 6(1)(b)) |
| Accounting and invoicing obligations | Legal obligation (Article 6(1)(c)) |
| Website analytics (with consent) | Consent (Article 6(1)(a)) |
| Improving our services | Legitimate interests (Article 6(1)(f)) |
5. Retention Periods
Dextrivora retains personal data only for as long as necessary for the purposes for which it was collected, and in compliance with applicable legal obligations:
- Contact form data: retained for a maximum of 3 years from the date of last contact, unless a commercial relationship is established.
- Session registration data: retained for the duration of the service and for 5 years thereafter for accounting purposes.
- Accounting documents: retained for 10 years in accordance with French commercial law (Article L.123-22 of the Code de commerce).
- Website analytics data: retained in anonymised form for up to 13 months from collection, in accordance with CNIL guidance.
6. Data Sharing and Third Parties
Dextrivora does not sell, rent, or trade your personal data. We may share data with the following categories of processors strictly for the purposes described in this policy:
A natural or legal person who processes personal data on behalf of the data controller, under a written data processing agreement, as defined by Article 4(8) of the GDPR.
- Hosting provider: our website is hosted on servers located within the European Economic Area. The hosting provider processes server logs containing IP addresses solely for security and operational purposes.
- Email service provider: used to receive and respond to contact form submissions. Bound by a data processing agreement.
- Accounting software: used to process invoicing data where applicable.
All processors are contractually bound to process data only on our documented instructions and in accordance with GDPR requirements.
We may disclose personal data if required to do so by applicable law, court order, or competent public authority.
7. International Transfers
Dextrivora does not intentionally transfer personal data outside the European Economic Area. Should any transfer occur, it will be subject to appropriate safeguards as required by Chapter V of the GDPR, including Standard Contractual Clauses approved by the European Commission.
8. Your Rights
Under the GDPR and the Loi Informatique et Libertés, you have the following rights regarding your personal data:
- Right of access (Article 15 GDPR): you may request a copy of the personal data we hold about you.
- Right to rectification (Article 16 GDPR): you may request correction of inaccurate or incomplete data.
- Right to erasure (Article 17 GDPR): you may request deletion of your data where it is no longer necessary or where consent is withdrawn.
- Right to restriction (Article 18 GDPR): you may request that we limit the processing of your data in certain circumstances.
- Right to data portability (Article 20 GDPR): you may request your data in a structured, machine-readable format.
- Right to object (Article 21 GDPR): you may object to processing based on legitimate interests.
- Right to withdraw consent (Article 7(3) GDPR): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at: info@dextrivora.com or by post at 23 Rue Galilée, Paris, France. We will respond within one month of receipt of your request, as required by Article 12 of the GDPR.
9. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French supervisory authority:
CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr
10. Security
Dextrivora implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, in accordance with Article 32 of the GDPR. These measures include HTTPS encryption for all data transmitted via the website, access controls on internal systems, and regular review of security practices.
11. Cookies
Our website uses cookies. For full information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.
12. Changes to This Policy
Dextrivora may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is indicated at the top of this page. We encourage you to review this policy periodically.