COOKIE POLICY

Website: https://invexa.fr/
Data Controller: Invexa
Last Update: 07/08/2025

1. GENERAL INFORMATION

1.1 Definition of Cookies

Cookies are small text files stored on your device (computer, tablet, smartphone) during your navigation on our website. They notably allow you to remember your preferences and enhance your user experience.

1.2 Regulatory Framework

This cookie policy adheres to:

• The amended Directive 2002/58/EC (ePrivacy Directive)

• The General Data Protection Regulation (GDPR) 2016/679

• The amended French Law n°78-17 of January 6, 1978 (Data Protection Act)

• CNIL Deliberation n°2019-093 of July 4, 2019, on cookies and other trackers

1.3 Consent Principle

According to Article 82 of the Data Protection Act, the use of cookies and other trackers requires your prior, free, specific, informed and unambiguous consent, except for cookies strictly necessary for the functioning of the service.

Important: Merely continuing to browse our website (scrolling, clicking on a link, etc.) does not constitute valid consent under French regulations.

2. CATEGORIES OF COOKIES USED

2.1 Strictly Necessary Cookies

These cookies are essential for the functioning of the website and cannot be disabled. They do not require consent in accordance with CNIL Deliberation n°2019-093.

2.2 Analytical Cookies

These cookies allow us to analyze the use of the site and improve our services. They require your prior consent.

Google Analytics 4 (GA4)

Detailed Purpose: Audience measurement, visitor behavior analysis, traffic statistics, content and ergonomics optimization.

Legal Basis: Consent (Article 6.1.a of GDPR)

Google Tag Manager

2.3 Advertising and Marketing Cookies

These cookies enable personalized advertising and measure campaign effectiveness. They require your prior consent.

Google Ads

Facebook Ads / Meta Pixel

Detailed Purpose: Measuring advertising effectiveness, remarketing, creation of similar audiences, and optimization of advertising campaigns.

Legal Basis: Consent (Article 6.1.a of GDPR)

3. TRANSFERS TO THE UNITED STATES

3.1 Legal Guarantees

The data collected by Google Analytics, Google Ads, and Meta Pixel is transferred to the United States. These transfers rely on:

• European Commission adequacy decisions

• Standard contractual clauses approved by the European Commission

• Data Privacy Framework (DPF) certifications

3.2 Retention Periods

Data is retained for the following durations:

• Google Analytics: Up to 26 months (configured setting)

• Google Ads: 18 months for conversion data

• Meta Pixel: 180 days for custom events

4. MANAGING YOUR CONSENT

4.1 Consent Methods

Upon your first visit, a consent banner allows you to:

• Accept all cookies

• Deny all non-essential cookies

• Customize your choices by category

• Access this detailed policy

4.2 Withdrawing Consent

You can withdraw your consent at any time by the following means:

1. Via cookie settings: [Link to consent manager]

2. Via your browser settings: Delete existing cookies

3. Via third-party publisher tools:

   • Google: https://adssettings.google.com/

   • Meta: https://www.facebook.com/settings/?tab=ads

4.3 Consequences of Refusal

Refusing non-essential cookies does not affect your ability to use our website. However, some features may be limited:

• Lack of personalized audience measurement

• Less relevant advertisements

• Inability to remember certain preferences

5. CONFIGURING YOUR BROWSER

You can configure your browser to accept or refuse cookies:

Chrome

Settings > Privacy and security > Cookies and other site data

Firefox

Settings > Privacy & Security > Cookies and Site Data

Safari

Preferences > Privacy > Cookies and website data

Edge

Settings > Cookies and site permissions > Cookies and site data

6. SUPABASE AND TECHNICAL DATA

6.1 Database

Supabase is used for secure storage of application data. The technical cookies related to this infrastructure are strictly necessary for the functioning of the service.

6.2 Google Workspace

The use of Google Workspace for our internal services may generate cookies when integrating certain features (calendar, shared documents).

7. POLICY UPDATE

This policy may be modified to reflect regulatory or technical developments. Any substantial modification will be notified to you via a dedicated banner during your next visit.

8. SANCTIONS AND CONTROLS

8.1 Supervisory Authority

The French Data Protection Authority (CNIL) is the competent authority for matters related to cookies in France.

Contact CNIL:

• Website: https://www.cnil.fr/

• Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

8.2 Potential Sanctions

Non-compliance with cookie regulations can result in administrative penalties of up to 20 million euros or 4% of annual global turnover (Article 83 of GDPR).

9. EXERCISING YOUR RIGHTS

According to the GDPR, you have the following rights concerning your personal data:

• Right of access and rectification

• Right to erasure

• Right to restriction of processing

• Right to data portability

• Right to object

To exercise these rights, contact us at: [contact email address]

10. CONTACT

For any questions regarding this cookie policy, you may contact us:

Invexa
sara@invexa.fr

This cookie policy has been established in compliance with current French regulations and CNIL recommendations. It constitutes a contractual document between Invexa and its users.