Xantimaristicon
XANTIMARISTICON

Privacy Policy

Last updated: January 15, 2026

1. Data controller

Xantimaristicon SAS, registered with the Paris Trade and Companies Register under number B 912 345 678, with its registered office at 45 Avenue des Champs-Elysees, 75008 Paris, France, is the data controller for personal data collected on the website xantimaristicon.com.

Data Protection Officer (DPO): Mr. Julien Moreau Contact: dpo@xantimaristicon.com Phone: +33 1 42 89 67 35

2. Data collected

As part of our financial and administrative support services, we collect the following data:

Identification data: surname, first name, email address Browsing data: IP address, browser type, pages visited, visit duration Data submitted via the contact form: name, email address, message content

We do not collect any sensitive financial data (bank account numbers, credit card information) through this website. Such information is exclusively processed during secure consultations with our advisors.

3. Purposes of processing

Your personal data is processed for the following purposes:

Responding to your inquiries and appointment requests Assessing your eligibility for social benefits, tax credits, and European funds Improving the quality of our services and website user experience Complying with our legal and regulatory obligations regarding financial advice Producing anonymized website usage statistics

4. Legal basis for processing

In accordance with the General Data Protection Regulation (GDPR) and French Law No. 78-17 of January 6, 1978 on Information Technology, Data Files and Civil Liberties, the processing of your data is based on:

Your explicit consent (Article 6.1.a GDPR) for sending communications Performance of pre-contractual measures (Article 6.1.b GDPR) for analyzing your situation Our legitimate interest (Article 6.1.f GDPR) for improving our services Compliance with legal obligations (Article 6.1.c GDPR) for retaining certain data

5. Data retention period

Your personal data is retained for a period not exceeding what is necessary for the purposes for which it is processed:

Contact data: 3 years from your last interaction with our services Browsing data: 13 months in accordance with CNIL recommendations Contractual data: 5 years from the end of the business relationship, in accordance with French accounting and tax obligations Cookies: according to the duration specified in our cookie policy

6. Data recipients

Your personal data is processed internally by authorized Xantimaristicon SAS teams. It may be shared with:

Our technical subcontractors (hosting, website maintenance) located within the European Union Competent authorities in case of legal obligation (CNIL, tax administration)

We never sell, rent, or transfer your personal data to third parties for commercial purposes. Any transfer of data outside the European Union is subject to appropriate safeguards in accordance with Articles 46 and 49 of the GDPR.

7. Your rights

Under the GDPR and French law, you have the following rights:

Right of access: obtain confirmation of data processing and receive a copy Right of rectification: have inaccurate or incomplete data corrected Right to erasure: request deletion of your data under certain conditions Right to restriction: restrict the processing of your data Right to portability: receive your data in a structured, readable format Right to object: object to the processing of your data on legitimate grounds

To exercise these rights, contact our DPO at dpo@xantimaristicon.com or by mail to: Xantimaristicon SAS, DPO, 45 Avenue des Champs-Elysees, 75008 Paris.

You may also file a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

8. Data security

Xantimaristicon SAS implements appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, including:

Encryption of communications via HTTPS/TLS protocol Strict access control to information systems Regular staff training on data protection Periodic security audits conducted by independent providers Data breach notification procedures in accordance with Article 33 of the GDPR

9. Policy changes

Xantimaristicon SAS reserves the right to modify this privacy policy at any time. Any changes will be published on this page with the update date indicated. We encourage you to check this page regularly for any updates.

For any questions regarding this policy, please contact us at: dpo@xantimaristicon.com.

Cookie management

We use cookies to improve your browsing experience, analyze site traffic, and personalize content. By clicking Accept, you consent to the use of all cookies. Learn more