Effective date: 2022-10-13

Updated on: 2024-12-18
 
1. Introduction
Welcome to FractalMax Agency! This Privacy Policy explains how Laurence Zimmermann EI, FractalMax collects, uses, and protects your personal data when you access or use our services, including our website (https://fractalmax.agency), client portals, and other related platforms (collectively, the "Services").

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and French data protection laws, including the amended French Data Protection Act of January 6, 1978 ("Loi Informatique et Libertés").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and processing of your personal data as outlined here. If you do not agree, please refrain from using our Services.

This Privacy Policy applies to:

• Visitors and users of our website and Services.

• Clients and their representatives.

• Prospective clients who interact with us via our platforms.
   

Modifications to This Policy
We may update this Privacy Policy from time to time to reflect changes in our Services or legal obligations. Updated versions will be posted on our website, and where applicable, we will notify you of significant changes.

2. Data Controller Information
The entity responsible for the processing of your personal data (the “Data Controller”) is:
Laurence Zimmermann EI, FractalMax Agency
66 Avenue des Champs-Élysées - 75008 Paris, France
Email: info@fractalmax.agency

If you have any questions, concerns, or requests regarding the processing of your personal data or this Privacy Policy, please contact us per email using the details above.

3. Data Collected
FractalMax Agency collects the following categories of personal data from individuals who access or use our services:

3.1 Data You Provide Directly

• Identity Information: First name, last name, title, company name.

• Contact Information: Email address, phone number, work address, and home address (if applicable).

• Payment Information: Billing details and payment method (processed securely through third-party providers).

• Testimonial Data: Information provided in testimonials, including name, photo, and company logo.

• Account Information: Login credentials, if applicable.
   

3.2 Data Collected Automatically

• Usage Data:

  • IP address.

  • Browser type and version.

  • Operating system.

  • Referring URLs and exit pages.

  • Date, time, and duration of visits.

  • Device type and geographical location (if enabled).
    
    Cookies and Tracking Technologies: Data collected via cookies, web beacons, and similar technologies.
     

3.3 Data from Third Parties
We may collect publicly available information or data from third parties to supplement our records, such as:

• Public social media profiles (e.g., LinkedIn).

• Data from analytics tools (e.g., Google Analytics).
   

Testimonial Consent and Use of Information
When you provide a testimonial to FractalMax Agency, you authorize us to use the following information for marketing and promotional purposes:

• Your portrait picture.

• Your first and last name.

• Your company name and/or logo.
   

This information may be used across various platforms, including but not limited to:

• The FractalMax website (https://fractalmax.agency) and other websites owned by Laurence Zimmermann EI.

• Social media platforms.

• Sales funnels and landing pages (both free and paid ads).

• Videos, blog posts, and other promotional materials.
   

By providing your testimonial, you explicitly agree to the use of your data as described above. If you wish to withdraw your consent at any time, please contact us at info@fractalmax.agency.

Web Push Notifications
FractalMax Agency provides updates and news through web push notifications. This service is operated by our push notification provider, WonderPush (https://www.wonderpush.com/).
To enable this free service, you must subscribe by granting authorization via your browser and device settings when visiting our website.
Data Collected:

• Anonymized navigation data stored on WonderPush servers for up to 90 days.

• No identifiable data (e.g., IP address) or personal information is collected or stored by FractalMax Agency or WonderPush for this service.
   

How to Unsubscribe:
You can stop receiving web push notifications at any time by unsubscribing through your browser settings. Instructions for managing your subscription and deleting associated data are available here:
https://docs.wonderpush.com/docs/manage-your-data-and-unsubscribe-from-web-push-notifications.

Generators and Calculators
Data Collection
Types of Data Collected:
Depending on the tool used, the following inputs may be collected:

Financial data (e.g., initial investment, exit value).
Business information (e.g., industry, company size, challenges, demographics).
Content-related inputs (e.g., keywords, outlines, and topics).
Anonymity:

All data is recorded anonymously, ensuring no personal information, such as names or contact details, is collected.
Inputs cannot be linked back to individual users.
Purpose of Data Collection
The data collected through our tools is used solely for:

Identifying trends and patterns in tool usage.
Analyzing common challenges faced by users.
Providing aggregated insights for research or educational purposes.

Data Security
We take appropriate measures to protect the data collected through our tools and ensure it remains secure and anonymized. Data is retained only for its intended purposes and securely deleted when no longer needed.

Updates for New Tools or Features
When new calculators or generators are introduced, they will adhere to the same principles of data collection and usage described in this policy.

Cookies and Tracking Technologies
Cookies are small text files stored on your device when you visit a website. They are used to ensure the website functions properly, improve your browsing experience, and provide certain features. Some cookies are strictly necessary for the operation of the website, while others require your explicit consent before being activated.

Types of Cookies We Use
We use the following categories of cookies on our website:
Essential Cookies: This type of cookies only enable  core functionality like security, verification of identity and network management. You can’t disable these cookies.
Marketing Cookies: These cookies are used to track advertising effectiveness to provide a more relevant service. It also delivers better ads to suit your interests.
 
Functional Cookies: These cookies collect data about the choices you make, such as your preferences and settings, to enhance your experience and provide a more personalized service.
 
Analytics Cookies: These cookies help us understand how visitors interact with our website, identify errors, and improve overall functionality through analytics.

Managing Cookies
You have the right to control and manage cookies on our website. Upon your first visit, you will see a cookie banner allowing you to accept or reject non-essential cookies.
You can also manage or delete cookies through your browser settings. 

Third-Party Cookies
Some cookies on our website are set by third parties to enhance functionality, track website performance, or deliver personalized advertisements. These third-party cookies may include:

Google Analytics: We use Google Analytics to track website performance and understand visitor behavior. Your IP address is anonymized before processing to protect your privacy. For more information about how Google Analytics processes data, visit Google Privacy Policy.

Cookie Banner and Management
Our website uses a cookie banner to manage user consent for cookies in compliance with GDPR and French laws. This banner is operated by Wix.

You can manage your cookie preferences or withdraw consent at any time through the cookie banner. 
Browser Settings: Most browsers allow you to block or delete cookies. For instructions on how to do this, visit:

• Chrome

• Firefox

• Safari

• Edge
   

4. Purpose of Data Processing
FractalMax Agency collects and processes personal data for the following purposes:

• Fulfilling Contracts

  • To deliver products or services you have requested.

  • To manage and process your orders, payments, and transactions.

  • To provide access to client portals or other tools necessary for service delivery.

• Marketing Communications

  • To send you newsletters, promotions, and updates about our services (only with your explicit consent).

  • To personalize marketing content based on your preferences or past interactions.

• Analytics and Service Improvement

  • To analyze website performance and usage patterns for improving the user experience.

  • To identify trends and measure the effectiveness of marketing campaigns.

• Legal and Compliance Obligations

  • To comply with French and European regulations, such as accounting and tax laws.

  • To respond to legal requests, such as court orders or investigations.

• Fraud Prevention and Security

  • To detect and prevent unauthorized access, fraud, or abuse of our services.

  • To ensure the safety and security of our platforms and users.

• Live Chat and Video Calls

  • To provide real-time assistance through live chat services.

  • To facilitate consultations, meetings, or support sessions via video calls.

• Testimonials and Reviews

  • To showcase user experiences on our website and marketing materials (with explicit consent).

• Customer Support

  • To respond to inquiries, troubleshoot issues, and provide assistance as needed.

• Publishing Platforms

  • To manage the publication of content, such as press releases, articles, or promotional materials on external platforms.

• Branding and Press Kit Platforms

  • To store and share branding materials, such as logos, press kits, and other promotional assets, as part of your service or collaboration.
     

5. Legal Basis for Processing
FractalMax Agency processes personal data based on the following legal grounds, as defined by the General Data Protection Regulation (GDPR):

1. Consent

   • For sending marketing communications, newsletters, and promotional materials.

   • For processing testimonials, including the use of names, photos, and company logos.

   • For storing and analyzing cookies that are not strictly necessary.

   • For enabling web push notifications.

2. Contractual Necessity

   • To fulfill contracts for products or services requested by you.

   • To process payments and transactions related to your orders.

   • To provide access to client portals or other tools needed to deliver services.

3. Legal Obligation

   • To comply with accounting, tax, or regulatory requirements under French and European law.

   • To respond to lawful requests, court orders, or legal processes.

4. Legitimate Interest

   • To ensure the security and functionality of our platforms, including fraud prevention.

   • To improve our services through performance analytics and user feedback.

   • To facilitate live chat and video call interactions for customer support or consultations.
      

6. Data Retention
Laurence Zimmermann EI, FractalMax Agency retains personal data only for as long as necessary to fulfill the purposes for which it was collected, to meet legal obligations, or to address potential disputes. After the applicable retention period, personal data will be securely deleted or anonymized, unless it is archived for specific legal or compliance purposes.

Retention Periods by Purpose

1. Website Design Services:
   Personal data collected for website design projects will be retained for up to one year after the project has been completed.

2. Public Relation Services:
   Personal data collected for public relation projects will be retained for up to one year after the project has been completed.

3. Private Portal:
   Access to the Portal After Service Completion: Once the service is complete, the client’s portal will remain accessible for 3 months to allow the client to download and save shared documents and information.
   Retention for Ongoing or Returning Clients: If the nature of the service is ongoing or if there is a reasonable expectation that the client may return, FractalMax Agency may retain portal-related data for up to one year to facilitate continued collaboration or ease the reactivation process. After this period, the client’s portal and any retained data will be securely deleted unless required by law or with the client’s explicit consent.
   New Portal Creation: If a client returns after the three months access period and the portal has been deleted, a new portal will be created for the continuation of services.

4. Email Marketing:
   Personal data used for email marketing campaigns will be retained for three years from the date of the last interaction or until consent is withdrawn, whichever comes first.

5. We retain invoices containing personal data for a period of at least ten years to comply with accounting and tax regulations. After this period, personal data will be securely stored and restricted from active use. The data will not be used for any purpose other than meeting legal or compliance obligations.

6. Consent Form Transfer of data outside the European Economic Area (EEA): Consent related to the transfer of personal data will be retained for a period of five years from the publication of the press release. However, if the press release remains publicly accessible beyond this period, or in cases of legal obligations or disputes, the data may be retained for as long as necessary. This data will not be actively used but only archived to meet these specific requirements.

7. Third-Party authorization Form: Consent provided through this Third-Party Authorization Form will be retained for a period of five years from the publication of the press release.If the press release remains publicly accessible beyond this period, or in cases of legal obligations or disputes, the personal data associated with this consent may be retained for as long as necessary. During this time, the data will not be actively used but will be archived solely to meet these specific requirements.

Deletion or Anonymization
At the end of the retention period, all personal data will be securely deleted or anonymized to prevent further identification. Exceptions apply to data, such as invoices, that must be retained to meet legal or compliance obligations. In such cases, personal data will be securely stored and restricted from active processing, ensuring it is not used for any other purpose.

7. Sharing Personal Data
FractalMax Agency shares personal data with third parties only when necessary to provide our services, comply with legal obligations, or improve our offerings.

Categories of Recipients
We may share personal data with the following third parties:

1. Hosting Providers: For secure hosting of our website, portals, and client data.

2. Payment Processors: To securely process payments and refunds.

3. Email Marketing Services: To send newsletters, promotions, and updates (only with your consent).

4. Analytics Providers: To track website performance and improve functionality (e.g., Google Analytics, with anonymized IP addresses).

5. Live Chat and Communication Tools: To facilitate communication and provide customer support.

6. Advertising Partners: To display personalized ads based on your preferences (only with your consent for marketing cookies).

7. Other Marketing Tools: To manage and automate marketing campaigns, analyze engagement, and deliver tailored content across various platforms (e.g., CRM systems, ad scheduling tools, or social media management platforms).
    

International Data Transfers
Some personal data may be transferred outside the European Economic Area (EEA), including to the United States. We take steps to protect your data, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.

• Verifying adequacy decisions for countries that meet EU data protection standards.

• Additional measures, such as encryption.
   

When a Data Processing Agreement (DPA) Is Not in Place
While we strive to work with third-party providers that have Data Processing Agreements (DPAs) in compliance with GDPR, this is not always possible.

• In cases where no DPA is in place, we will obtain your explicit consent before sharing your data with these providers.

• You will be informed about potential risks, as the provider may not offer the same level of data protection required under GDPR.

• Consent will be collected via a checkbox or signed agreement, and your data will only be shared for the specific purpose outlined.
   

The personal data that may be transferred includes, but is not limited to:

• Name

• First Name

• Phone Number

• Email Address

• Website URL

Other information necessary for press release distribution or media outreach.

Purpose of Transfers:

• These transfers are conducted to fulfill specific purposes, such as facilitating press releases, media outreach, or other relevant campaigns. It can also be for other marketing tools or website hosting.
  
  Associated Risks:

• We take data protection seriously; however, we acknowledge that:

• The laws in some countries may not guarantee the same level of protection as those within the EEA.

Third-party recipients, such as journalists or media outlets, may not have a Data Processing Agreement (DPA) in place.

Consent and Retention:
Data transfers outside the EEA are conducted only with explicit consent, which is documented and retained for 5 years or as long as required for legal obligations. After this period, the data is archived and not actively used.

Validity Period of Consent: This consent is valid for a period of 12 months from the date of signature. Beyond this period, new consent will be required for any further data transfers.

Here you can download the document: 

GDPR - Explicit Consent for Data Transfer Outside the European Economic Area (EEA): https://docs.google.com/document/d/1cHI9BRKadFyzbpNaMgQYK-QnHqGqsREj7FWcjOavSKw/edit?usp=sharing

Data Minimization Policy:
We encourage our clients to provide only the data strictly necessary to achieve the intended purpose of press release distribution.

Withdrawal of Consent 
In accordance with the French Data Protection Act of January 6, 1978 ("Loi Informatique et Libertés") and the General Data Protection Regulation (GDPR), individuals have the right to withdraw consent for the processing or transfer of their personal data at any time.

However, specific exceptions apply to press releases due to their unique nature and irreversible dissemination. These exceptions are outlined below.

Press Releases
Due to the nature of press releases—shared with journalists, media outlets, and external platforms—the withdrawal of consent is subject to the following limitations, as provided by Recital 65 and Article 17(3) of the GDPR:
 

1. Retroactivity:
   The withdrawal of consent does not apply retroactively to press releases that have already been published or shared. Personal data contained in such press releases cannot be removed, altered, or deleted once they have been disseminated to third parties (e.g., journalists, media outlets, external platforms) or made publicly accessible. This complies with Recital 65 and Article 17(3) of the GDPR, which recognize exceptions to the right to erasure to protect the freedom of expression and information.

2. Archived Copies:
   The withdrawal of consent does not result in the deletion of press release copies that are publicly accessible or stored in third-party archives. This complies with Recital 65 and Article 17(3) of the GDPR, which recognize exceptions to the right to erasure in cases where the freedom of expression and information must be preserved.
    

Future Processing and Transfers
Following the withdrawal of consent, personal data will no longer be processed for new activities, included in new press releases, or shared with third parties.
​
Web Design Services and Others:
For services such as web design, personal data may be transferred for the following purposes:

• Website hosting: Personal data may be transferred outside the EEA as part of hosting your website on servers located abroad.

• Use of third-party tools: Certain third-party tools or solutions essential to the completion of your project may involve the transfer of personal data outside the EEA.

The Company has the right to withdraw its consent at any time for the processing or transfer of its personal data outside the European Economic Area (EEA), in accordance with GDPR.
 
The withdrawal of consent will be processed within 7 business days from the date of the request. This withdrawal does not result in the termination of the service contract and does not entitle the Company to a refund.
 
Essential personal data necessary for fulfilling our contractual obligations or complying with legal requirements will continue to be processed. Non-essential personal data will be deleted or anonymized upon request, unless its retention is required by law or necessary to resolve disputes.

Contact Us Regarding Data Transfers Outside the European Economic Area (EEA)
For any questions regarding the data transfer consent form you signed, or to obtain further information about how your personal data is processed, please contact us at the following address: info@fractalMax.agency.
For more details, we invite you to consult our privacy policy, accessible at the following address:
https://www.fractalmax.agency/privacy-policy

8. Security Measures
Laurence Zimmermann EI, FractalMax is committed to protecting the personal data we collect and process. We implement reasonable safeguards to ensure the confidentiality, integrity, and security of your data.
Steps We Take to Protect Your Data

1. Encryption:
   All data transmitted between your browser and our website is encrypted using HTTPS to protect it from unauthorized access.

2. Secure Third-Party Providers:
   We use trusted service providers for payment processing like Stripe or Paypal.

3. Access Control:
   Access to personal data is restricted to authorized personnel and managed through secure login credentials.

4. Data Minimization:
   We collect and store only the data necessary to deliver our services, limiting the risk of exposure.
    

Limitations of Security
While we strive to implement strong security measures, no system can guarantee absolute protection. By using our services, you acknowledge that the transmission and storage of data may carry inherent risks.
If you have any concerns about the security of your data or suspect a potential breach, please contact us at info@fractalmax.com

9. User Rights
Under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data. FractalMax Agency is committed to ensuring that you can exercise these rights:
 

1. Access
   You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.

2. Rectification
   You can request that we correct or update any inaccurate or incomplete personal data we hold about you.

3. Deletion (Right to Be Forgotten)
   You have the right to request the deletion of your personal data, provided there are no overriding legal obligations requiring its retention (e.g., invoices retained for 10 years under French law).

4. Restriction of Processing
   You can ask us to limit the processing of your personal data in specific circumstances, such as if you contest the accuracy of the data or object to its processing.

5. Data Portability
   You have the right to receive your personal data in a portable format and, where technically feasible, request that we transfer it to another organization.

6. Objection to Processing
   You can object to the processing of your personal data for certain purposes, such as direct marketing or profiling.

7. Withdraw Consent
   If processing is based on your consent, you can withdraw your consent at any time without affecting the legality of processing conducted before withdrawal.
    

How to Exercise Your Rights
To exercise your rights or make a request regarding your personal data, please contact us at:
Email: info@fractalmax.agency

Mail: Laurence Zimmermann EI, FractalMax. 66 Avenue des Champs-Élysées, 75008 Paris.

We will respond to your request within 30 days, as required under GDPR, unless a longer period is necessary due to the complexity of the request. In such cases, we will inform you of the delay.
 
10. Third-Party Services
FractalMax Agency collaborates with trusted third-party service providers to deliver, support, and improve our services. These providers may process personal data on our behalf, and we ensure that they adhere to GDPR and applicable data protection laws.

Categories of Third Parties We Work With

1. Hosting Providers

   • To securely host our website, client portals, and store data.

2. Payment Processors

   • To process payments and refunds securely, in compliance with PCI-DSS standards.

3. Email Marketing Platforms

   • To manage and send newsletters, promotions, and service updates.

4. Analytics Providers

   • To track website performance, user behavior, and engagement metrics. We anonymize IP addresses whenever possible to protect your privacy.

5. Communication Tools

   • To facilitate live chat, video calls, and other client interactions.

6. Marketing and Advertising Services

   • To deliver personalized advertising and manage marketing campaigns (with your consent).

7. Publishing Platforms

   • To manage the publication of content, such as press releases, articles, or promotional materials on external platforms.

8. Branding and Press Kit Platforms

   • To store and share branding materials, such as logos, press kits, and other promotional assets, as part of your service or collaboration.
      

International Data Transfers
Some personal data may be transferred to and processed by service providers located outside the European Economic Area (EEA), including in countries like the United States. To protect your data, we implement:

• Standard Contractual Clauses (SCCs): Legally binding agreements approved by the European Commission to ensure your data is protected.

• Additional Safeguards: Measures like encryption, secure storage, and restricted access to personal data.
   

When Explicit Consent is Required
In certain cases where third parties do not have a Data Processing Agreement (DPA) in place, we will obtain your explicit consent before sharing your data. This consent ensures you are informed of the potential risks, including the fact that the provider may not meet GDPR-equivalent data protection standards.

Commitment to Data Protection
We work closely with third parties to ensure that:

• Personal data is processed solely for the purposes outlined in this Privacy Policy.

• Data security and confidentiality are maintained through robust contractual agreements.

• Data sharing is limited to the minimum necessary to provide the required services.

 
11. Updates to the Policy
FractalMax Agency reserves the right to update this Privacy Policy to reflect changes in our practices, services, or legal requirements.

Notification of Changes
If any significant updates are made to this policy, we will inform users through:

1. Website Updates: The revised Privacy Policy will be posted on our website at info@fractalmax.agency, along with a notice of the update.

2. Additional Notification (if required): For significant changes affecting how your data is processed, we may provide a banner notification on our website or send an email if you have provided your address and consented to receive such communications.
    

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of our services after any updates constitutes your acknowledgment of the revised terms.

12. Dispute Resolution
This Privacy Policy is governed by French law. Any disputes arising out of or related to the processing of personal data will be subject to the exclusive jurisdiction of the courts located in Paris, France.

13. Severability Clause
If any provision of this Privacy Policy is found to be invalid or unenforceable under applicable law, the remaining provisions shall remain effective and enforceable. Such invalidity or unenforceability will not affect the validity or enforceability of any other part of this Privacy Policy.

14. Acceptance of This Privacy Policy
By accessing or using our platform or services, you acknowledge that you have read and understood this Privacy Policy. Your continued use of our website, platform, or services constitutes your acceptance of the terms outlined in this Privacy Policy.

If you do not agree with any part of this Privacy Policy, you must discontinue use of our platform and services immediately.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you can contact FractalMax Agency using the details below:

 
CONTACT US

For any questions, please contact us through the following methods:
Name: Laurence Zimmermann, FractalMax
Address: 66 Avenue des Champs-Elysées, 75008 PARIS.
Email: info@fractalmax.agency
Website: https://fractalmax.agency
For any queries or concerns you have related to the processing of your information, you may contact Laurence Zimmermann.