Privacy policy
How SENDIX collects, uses, retains and protects data relating to Wisikard.
1. Data controller
The controller for the processing described in this policy is Maxime Wuillaume, sole trader trading as SENDIX, 2 bis place de la République, 55500 Ligny-en-Barrois, France, SIREN 801 868 431.
For any questions or requests concerning personal data: support@wisikard.fr.
2. Data processed
Depending on your use, SENDIX may process:
- contact: last name, first name, company, email, optional telephone number, subject, message, date, IP address and browser information;
- professional account: company, SIRET or equivalent foreign identifier, email, encrypted password, settings and administration history;
- order: Stripe reference, billing identity and contact details, status, amount, currency and invoice; SENDIX does not receive the full bank card number;
- Kard content: professional information, contact details, job title, images, logo, links, media, employee information and content selected by the customer;
- usage and security: views, scans, dates, technical identifiers, logs, IP address, device and browser;
- cookies: consent choices, Google Analytics audience measurement and data necessary to display YouTube videos when these features are used and accepted.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to contact requests and preparing a commercial relationship | SENDIX's legitimate interest in responding to enquiries and requested pre-contractual steps |
| Creating the account, providing the service and support, processing ordered options and managing the customer relationship | Performance of the contract |
| Collecting payment, invoicing and keeping accounts | Performance of the contract and legal obligations |
| Measuring views and providing analytics requested by the customer | Performance of the contract; legitimate interest for measurements strictly necessary to the service |
| Securing the website, preventing abuse, retaining logs and moderating unlawful content | Legitimate interest in protecting the service, users and third parties; legal obligations where applicable |
| Setting Google Analytics cookies and loading non-essential YouTube content | Consent |
| Retaining evidence of cookie choices | Legal obligation and legitimate interest in demonstrating compliance |
4. Mandatory information
Fields marked as mandatory are required to respond to a request, conclude an order or provide the service. Without them, SENDIX may be unable to process the request or perform the contract. Other fields are optional.
5. Recipients and service providers
Data is accessible only to authorised SENDIX personnel and, as needed, to the following providers:
- OVHcloud, for hosting and infrastructure;
- Stripe, for payment and invoicing;
- Google Analytics, for audience measurement subject to consent;
- YouTube/Google, when an embedded video is displayed after consent;
- Trustpilot, for managing reviews and invitations to leave a review;
- CookieYes, for collecting and remembering cookie choices.
Data may also be disclosed to an authority, court or adviser where required by law or to establish, exercise or defend a right.
6. Transfers outside the European Economic Area
Certain international providers, including Stripe, Google, Trustpilot and CookieYes, may process data from countries outside the European Economic Area. Depending on the provider and country concerned, these transfers are governed by an adequacy decision, the applicable protection framework or the European Commission's standard contractual clauses, supplemented where necessary by additional safeguards. Detailed information is available in these providers' policies.
7. Retention periods
| Data | Period |
|---|---|
| Contact requests | Until the request has been fully processed, then deleted when no longer needed |
| Account and Kard content | For the lifetime of the account; active data is deleted when the customer requests closure |
| Residual backup copies | Until replaced in the monthly backup cycle, with access restricted to restoration and security needs |
| Analytics and technical logs | One year |
| Invoices and accounting information | Ten years from the end of the relevant financial year |
| Cookie choices and consent records | For the period necessary to provide evidence and periodically renew the choice |
Data may be retained longer where a legal obligation requires it or for the period necessary to defend a legal claim, with restricted access.
8. Cookies and third-party services
Strictly necessary cookies enable operation, security, authentication and storage of your choices. They do not require consent where they meet the legal conditions.
Google Analytics and YouTube content may set or read non-essential trackers. They are blocked until you agree where consent is required. CookieYes displays the choice banner and records your preferences.
The Trustpilot script is used for review and invitation features. Loading it may transmit technical connection data to Trustpilot, such as IP address, browser used and page viewed.
You may accept, refuse or change your choices at any time using the cookie manager available on the website. Withdrawing consent does not affect the lawfulness of processing already carried out. Refusing YouTube videos only prevents their embedded display; other essential features remain accessible.
9. Public Kards and employee data
A Kard is intended to be publicly accessible by URL or QR Code. The customer chooses the data they publish and must inform the people concerned, particularly their employees, and have an appropriate legal basis. They must not publish private or sensitive data without necessity and permission.
For employee and other individuals' data entrusted to Wisikard by the customer, the customer generally acts as controller and SENDIX as technical provider, within the scope of the requested features. Anyone may report content or exercise their rights with the customer concerned and, if necessary, contact SENDIX.
10. Your rights
Under the conditions set out in the General Data Protection Regulation and the French Data Protection Act, you may request:
- access to and rectification of your data;
- erasure or restriction of processing;
- portability of data you have provided where processing is based on contract or consent and is automated;
- to object to processing based on legitimate interest, for reasons relating to your particular situation;
- to withdraw your consent at any time for the relevant processing;
- to set instructions for your data after your death, where French law permits.
Send your request to support@wisikard.fr , specifying its purpose. Proof of identity may be requested only where there is reasonable doubt. SENDIX normally responds within one month, which may be extended in cases provided for by law.
Some rights are subject to limitations, particularly where SENDIX must retain invoices or defend a right. If you believe your rights have not been respected after contacting SENDIX, you may lodge a complaint with the CNIL.
11. Security
SENDIX implements technical and organisational measures appropriate to the risks, including access controls, password encryption, secure communications, technical logs and backups. As no system offers absolute security, customers must protect their login credentials and promptly report any incident.
12. Policy updates
This policy may change to reflect changes to the service, providers or regulations. The update date appears at the top of the page. Customers are informed of any significant change by email or in the dashboard.
13. Contact
SENDIX – 2 bis place de la République, 55500 Ligny-en-Barrois, France
Email: support@wisikard.fr