Privacy Policy - Galax-IA

Updated on: May 03, 2024

Galax-IA ("Galax-IA," "our," "we," and "us") and our partners respect your privacy.

Please read this privacy policy carefully to understand how your personal data is collected, processed, and stored when you use the Galax-IA website, accessible via the URL https://galax-ia.xyz.

The term “personal data” refers to any information relating to an identified or identifiable natural person that can identify an individual directly or indirectly, through one piece of data or the combination of several data points.

All personal data collected on this website are processed under the responsibility of Galax-IA, a Simplified Joint Stock Company registered in the Paris Commercial and Companies Registry, in accordance with Law No. 78-17 of January 6, 1978 relating to information technology, files, and freedoms, in its current version, as well as Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Under the applicable personal data regulations, Galax-IA is the data controller.

This privacy policy describes:

How Galax-IA uses your personal data
How Galax-IA shares your personal data
How Galax-IA protects your personal data
Content Generation Tools and Artificial Intelligence
Where Galax-IA hosts and transfers your personal data
How you can exercise your rights regarding your personal data
Updates to the privacy policy
Managing cookie consent
How to contact us

1. How Galax-IA Uses Your Personal Data

Galax-IA processes your personal data for the following reasons:

(1) To create and manage your customer account on our website.
(2) To administer product and/or service orders, including ensuring access to and tracking of our services.
(3) To carry out all necessary actions related to contract management, invoicing, and effective customer relationship management.
(4) To publish, moderate, and manage your reviews and/or comments posted on the website.
(5) To send you our newsletter if you have chosen to subscribe.
(6) To respond to your contact requests initiated from our website.
(7) To implement a loyalty program.
(8) To offer you advertisements and personalized content based on your preferences.
(9) To create and manage a file of users, prospects, and clients for our internal needs.
(10) To perform statistics related to sales, site traffic, and the use of our services.
(11) To manage potential unpaid bills and disputes.
(12) To comply with our legal and regulatory obligations.
(13) To process, store, and secure data from participants in our digital services, including registration information and their progress tracking. These data are stored securely on our platform.

The collection of your data is essential for the execution of the contract you enter with Galax-IA when you order products and/or services on our site. If you voluntarily provide data, this is based on our legitimate interest to better respond to your requests. However, sending our newsletter is solely based on your consent, which you may withdraw at any time. Choosing not to receive the newsletter will not affect your ability to create a customer account or place orders on our site.

2. How Galax-IA Shares Your Personal Data

Within Galax-IA, and with respect to each processing purpose, your personal data is collected, processed, and stored by authorized Galax-IA personnel only within the scope of their respective responsibilities. This includes, but is not limited to, customer service, the marketing department, IT department, and the management of our solutions department.

We do not share personal data with other companies, organizations, and individuals unless one of the following circumstances applies:

(1) Sharing with Prior Consent: After obtaining your consent, Galax-IA will share the information you have authorized with specific third parties or categories of third parties identified at the time of collecting your consent.

(2) Sharing with Our Service Providers: Galax-IA may also disclose your information to companies that provide services for us or on our behalf. These service providers include companies that offer IT services, such as our hosting provider, email sending provider, product delivery services, or conduct marketing activities on our behalf. These service providers may use your information only for the purpose of providing services on behalf of Galax-IA. We have data processing agreements in place with third-party providers to ensure the protection and confidentiality of the data we entrust to them.

(3) In Fulfillment of a Legal Obligation: Galax-IA may share your information as stipulated by laws and regulations, to resolve legal disputes, or as stipulated by judicial or administrative authorities under the law.

Galax-IA will ensure the legality of any sharing of personal data through data processing clauses with the companies with which your personal data is shared. These companies are obligated to comply with this privacy policy and to take appropriate security and confidentiality measures when processing personal data.

3. How Galax-IA Protects Your Personal Data

Galax-IA places great importance on the security of your personal data. To ensure the protection of this data, we have adopted industry-standard practices and implemented robust technical and organizational measures.

Technical Measures:

We use encryption protocols and firewalls to protect your personal data against unauthorized access, disclosures, uses, alterations, damages, or losses.
Our hosting providers are chosen for their commitment to security, thus ensuring the protection and confidentiality of data.
The tools we use, such as Notion and Make, are selected for their commitment to security and data protection. We ensure that these tools comply with appropriate security standards and prevailing regulations.

Organizational Measures:

We adopt measures to ensure that the personal data collected is relevant and retained only for the duration necessary for the purposes for which it is processed.
Only authorized personnel, who need to know this information in the course of their duties, can access your personal data.
We deploy access control mechanisms to ensure this restricted access.
We retain your personal data for the duration strictly necessary in light of the purpose of the processing, except where a legal obligation dictates otherwise.

In the event of a personal data breach, Galax-IA commits to complying with the applicable legal and regulatory requirements for notification. This includes notifying personal data breaches to the relevant supervisory authorities and, where appropriate, to the affected individuals.

4. Content Generation Tools and Artificial Intelligence

Nature of AI Collection: The content generation tools of Galax-IA use Notion databases based on artificial intelligence technologies to access information available on the web. These tools are designed to read and temporarily memorize this information for the purpose of generating content. This information is managed and stored by the user on their own Notion database. Galax-IA has no access at any time to user data and does not retain it.

Ownership of Generated Content: Content generated by Galax-IA tools is the exclusive property of the user. Galax-IA claims no rights over this content.

Non-Storage of Generated Content: Galax-IA does not store, share, or use generated content for any purposes other than those explicitly consented to by the user.

Non-Storage of Interactions with Content Generation Tools: Galax-IA specifies that we do not store any interactions or data generated by our content generation tools. Users manage their own databases on their personal Notion spaces and may use various AI tools, such as ChatGPT, Copilot, Gemini, and others. Galax-IA has no access to any of these informations and does not store any data related to these interactions.

5. Where Galax-IA Hosts and Transfers Your Personal Data

Hosting: Your personal data is primarily hosted within the hosting infrastructure of our new provider, o2switch, located in France. This update reflects our ongoing commitment to data security and regulatory compliance within the European Union. Additionally, the wolfeo platform, on which we host our sales funnels, may also store certain data. We ensure that all our hosting providers comply with high security standards and current regulations.

Transfers to Third Countries: Some third parties to whom we transmit your personal data may be located outside the European Union, including in the United States. When the products or services available on our website require the involvement of resources located in third countries outside the European Union, your personal data may be transferred to these countries. Likewise, some providers who access your data on our behalf may be located in third countries outside the European Union.

When such transfers occur, we ensure that they are framed in accordance with applicable regulations, thus ensuring an adequate level of data protection. These safeguards may take the form of an adequacy decision by the European Commission, legal instruments such as data transfer contracts incorporating the European Commission’s Standard Contractual Clauses, or approved certification mechanisms.

Note that the wolfeo platform, used for our sales funnels, may also perform data transfers outside the EU. We ensure that wolfeo takes the necessary measures to guarantee the security of these data during their transfer and storage, in accordance with GDPR requirements.

Specific Requests: For any inquiries regarding the recipients and data transfers that we perform outside the European Union, or to obtain more information about the safeguards in place, please contact us at the addresses indicated in the “How to Contact Us” section of this policy.

6. How You Can Manage Your Rights Related to Your Personal Data

You have the right to access, rectify, erase, limit, and object to the processing of your personal data, as well as the right to define directives concerning the fate of your data after your death and the right to the portability of your personal data.

GDPR Compliance: We are committed to respecting the principles of the General Data Protection Regulation (GDPR). This applies to how we collect, store, and process data. We ensure transparency in processes and provide full control to our users over their personal data.

Data Management upon Registration to Our Services: When you register for our service, certain personal data is collected to ensure smooth operations. These data are handled with utmost care and used strictly within the context of the services provided.

Use of the Wolfeo Platform: We use Wolfeo to host and market our service. Wolfeo has its own privacy policy, which we recommend you review. Our subscribers can access, rectify, or delete their data hosted on Wolfeo by contacting us directly.

Withdrawal of Consent: You have the option to withdraw your consent at any time. This could involve, for example, withdrawing your consent for the storage of your data on Wolfeo. We provide easy means to withdraw your consent, including through unsubscribe links in our communications or by contacting us directly.

Right to Lodge a Complaint: You also have the right to lodge a complaint with the National Commission on Informatics and Liberty (CNIL) in France, or with any other competent regulatory authority in your resident country, if you believe the processing of your personal data does not comply with the regulations in force.

Exercising Your Rights: You can contact us at any time via the addresses provided in the “How to Contact Us” section of this policy to exercise your rights. It is necessary to specify the right you wish to exercise and provide the necessary information to process your request.

Detail of Rights:

Right of Access: You have the right to receive confirmation that your data are being processed by us, along with various details about these processes.
Right to Rectification: You can ask us to correct inaccurate information about you and to complete incomplete information.
Right to Erasure (“right to be forgotten”): You can request the erasure of your personal data for specific reasons such as their no longer being necessary or withdrawal of consent.
Right to Restriction of Processing: You can request the restriction of processing of your data, which means their use will be limited to certain operations.
Right to Object: You can object to the processing of your data when it is based on legitimate interest.
Right to Portability: You can receive the data you have provided to us in a structured, commonly used format, or request their direct transmission to another controller.

Post-Mortem Directives: You have the right to set directives regarding the retention, erasure, and communication of your data after your death.

For any additional information or to exercise your rights, please do not hesitate to contact us directly.

7. Updates to This Privacy Policy

Galax-IA recognizes the importance of transparency and clarity in data processing. Accordingly, we reserve the right to modify or update this privacy policy at any time, especially in response to changes in applicable data protection regulations or our activities.

Notification of Changes: Any significant changes to this privacy policy will be notified via email, provided you have given us a valid email address. Additionally, any major updates will be clearly indicated on our website. We recommend that you regularly review this policy to stay informed of our data protection practices.

Service-Specific Updates: As Galax-IA offers a unique subscription-based service, users of this service will be specifically informed of any significant changes to this policy, especially if these changes affect how their data is processed.

Frequency and Circumstances of Updates: While we update our privacy policy as needed and in line with regulatory changes, we also commit to reviewing it at least once a year or whenever a major development in our activities or in the service we offer necessitates it.

Commitment to Compliance: We are committed to complying with all legal and regulatory obligations regarding personal data protection. In case of changes to applicable regulations, we will take all necessary measures to ensure that this privacy policy complies with new requirements.

8. Managing Cookie Consent

Use of Technologies like Cookies:

A cookie is a small text file stored on the user’s browser when visiting a website. It allows the site to remember relevant information, such as user preferences or browsing history, to enhance the user experience on subsequent visits.

Purpose of Using Cookies:

Our site uses cookies for several reasons:

Improving User Experience: By remembering specific preferences and settings.
Analyzing and Tracking Usage Statistics: To optimize the content and performance of the site.
Displaying Targeted Advertising: Based on the interests and browsing behavior of the user.

Consent to These Technologies:

During your first visit to our site, a cookie banner appears to inform you of the use of these technologies and to ask for your consent. You have the right to consent to or refuse the use of cookies.

Effect of Non-Consent or Withdrawal of Consent:

If you refuse the use of cookies or later withdraw your consent, some features of the site may not function properly, or your user experience may be less optimal.

Different Types of Cookies:

Functional: These cookies are essential for the technical operation of the site and do not collect any personal data.
Preferences: These cookies remember your choices and preferences, such as language or text size, to enhance your experience on future visits.
Statistics: These cookies help us understand how users interact with our site by collecting and reporting information anonymously.
Marketing: These cookies are used to display relevant advertisements to you based on your interests and browsing behavior.

Cookies Specific to WordPress and Other Platforms:

In addition to the cookies mentioned above, our site, built with WordPress, may use WordPress-specific cookies to ensure its proper functioning. Moreover, as our services are hosted on platforms such as wolfeo, cookies specific to these platforms may also be used. For more information about these cookies, we recommend you consult the privacy policy of these platforms.

9. How to Contact Us

If you have any questions, comments, suggestions, or concerns about how Galax-IA processes your personal data, we strongly encourage you to contact us. We are committed to addressing all inquiries with seriousness and diligence.

Direct Contact:

Email: For a quick response, please send us an email at contact@galax-ia.fr.
Postal Address: If you prefer to write to us, you can do so at the following address: 149 avenue du Maine, 75014 Paris, en France.

Complaints: If, after contacting us, you feel that your data protection rights have not been respected or that the processing of your personal data is not compliant with regulations, you have the right to lodge a complaint with the National Commission on Informatics and Liberty (CNIL). You can do this by mail at the following address: CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, or directly on their website at www.cnil.fr. If you reside or work outside of France, you can also lodge a complaint with the data protection authority in your country.

We work closely with our platform partners to ensure the security and confidentiality of your data. For any specific inquiries related to partner platforms like wolfeo, please do not hesitate to contact us via the means mentioned above.