Privacy Policy
Hiphen SAS (“Hiphen”, “we”, “us”) is committed to protecting your personal data. This policy explains what data we collect through this website, why, and your rights under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Data controller
Hiphen SAS, 120 rue Jean Dausset, 84140 Avignon, France, RCS Avignon, SIREN 807 603 618.
Data protection contact: contact@hiphen-plant.com. Hiphen has not appointed a Data Protection Officer (DPO); requests sent to this address are handled by our team in charge of personal data.
2. What data we collect and why
All data is collected directly from you through the forms and services of this website. Fields marked with an asterisk (*) are mandatory: without them, we cannot process your request.
| Purpose | Data collected | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Contact form (responding to your request) | Title, first and last name, email, company, role, message, page from which the form was sent, date of submission | Steps taken at your request prior to entering into a contract (Art. 6(1)(b)) | 3 years from our last contact with you. If you become a customer: for the duration of our business relationship, then for the applicable legal limitation periods |
| Demo request (organising a demonstration) | First and last name, email, company, message, page from which the form was sent, date of submission | Steps taken at your request prior to entering into a contract (Art. 6(1)(b)) | 3 years from our last contact with you (same rule as above if you become a customer) |
| Lead management and B2B prospecting (contacts from the contact and demo forms are added to our prospect list to receive information on our products and services related to your profession) | Title, first and last name, email, company, role (when provided) | Legitimate interest in developing our business with professionals (Art. 6(1)(f)). You can object at any time, free of charge (see section 5) | 3 years from our last contact with you |
| Newsletter (marketing emails) | Email, date of subscription | Consent (Art. 6(1)(a)) | Until you unsubscribe |
| Meeting booking (Calendly) | Name, email, scheduling data and any information you enter when booking | Booking: steps taken at your request prior to entering into a contract (Art. 6(1)(b)). Loading the embedded booking widget: consent (see our Cookie Policy) | On our side: 3 years from our last contact with you. Calendly applies its own retention policy |
| Audience measurement (Google Analytics 4, only if you accept statistics cookies) | Cookie identifiers, pages viewed, approximate device and browser information | Consent (Art. 6(1)(a)) | Cookies: 13 months maximum. Analytics data: 25 months maximum |
| Site operation and security | Server technical logs (IP address, date and time, page requested, browser) | Legitimate interest in operating and securing the website (Art. 6(1)(f)) | 12 months maximum |
We do not carry out any automated decision-making or profiling within the meaning of Article 22 GDPR. We do not knowingly collect data from minors, and we do not sell your personal data.
3. Recipients and processors
Within Hiphen, your data is accessible only to the staff who need it, mainly our sales and marketing teams. Form submissions are stored in our website database and sent by email to our sales team.
Your data is also processed by service providers acting on our instructions (“processors”), under data processing agreements:
- DigitalOcean, LLC (United States), website hosting;
- GetResponse S.A. (Gdańsk, Poland), email marketing service used for the newsletter and for managing our prospect list. It is called from our servers only: no GetResponse form, script or cookie is loaded in your browser;
- Calendly LLC (United States), meeting scheduling;
- Google Ireland Limited (Ireland), with Google LLC (United States) as sub-processor, audience measurement (Google Analytics 4), only if you consent;
- Microsoft Ireland Operations Limited (Ireland), business email (Microsoft 365), through which form submissions are delivered to our team.
4. International transfers
Some of these providers are established in, or use sub-processors located in, the United States. Each transfer outside the EU/EEA relies on the mechanism below:
| Provider | Country | Transfer safeguard |
|---|---|---|
| DigitalOcean, LLC | United States | EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023) and EU Standard Contractual Clauses |
| GetResponse S.A. | Poland (EU) | No transfer by GetResponse itself; any sub-processor outside the EU is bound by EU Standard Contractual Clauses under GetResponse’s data processing agreement |
| Calendly LLC | United States | EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses |
| Google Ireland Limited / Google LLC | Ireland / United States | EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses |
| Microsoft Ireland Operations Limited / Microsoft Corporation | Ireland / United States | EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses |
You can obtain a copy of these safeguards by contacting us at contact@hiphen-plant.com.
5. Your rights
Under the GDPR, you have the right to access, rectify and erase your data, to restrict its processing, to data portability, and to withdraw your consent at any time (without affecting processing carried out before the withdrawal).
You can object at any time, without having to give a reason, to receiving our commercial communications: use the unsubscribe link included in each email, or write to us. You can also object to other processing based on our legitimate interest, on grounds relating to your particular situation.
Under Article 85 of the French Data Protection Act, you may also define instructions regarding the storage, erasure and communication of your personal data after your death.
To exercise your rights, contact: contact@hiphen-plant.com. We may ask you to verify your identity. We will reply within one month of receiving your request; this period may be extended by two months for complex or numerous requests, in which case we will inform you.
You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
6. Cookies
Our use of cookies and similar technologies is described in our Cookie Policy. Non-essential cookies are only set with your consent.
7. Data security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration. Our forms are protected by anti-spam measures; submissions are stored in our website database and transmitted by email to our sales team.
8. Changes to this policy
We may update this policy to reflect legal or operational changes. The current version is the one published here, dated above.
9. Contact
Questions about this policy or your data: contact@hiphen-plant.com, Hiphen SAS, 120 rue Jean Dausset, 84140 Avignon, France. See also our Legal Notice & Terms of Service and our Cookie Policy.
