Privacy Policy – XITECH-Engineering (B2B)

1) Data controller

The XITECH-Engineering website is published by XITECH SARL, which acts as the data controller for personal data.

• Registered office: 762 chemin de la Vallée, 13390 AURIOL, France

• Factory: 6, ZA la Roque Forcade, 13720 BELCODENE, France

• SIRET: 527 614 879 00015

• Privacy / GDPR contact: contact@xitech-engineering.com

This website is intended for business customers (B2B).

2) Data collected

a) Contact form / quotation request (B2B)

We collect the information you enter: last name, first name, business email address, phone number, company, job title (if provided), and the content of your message.

b) Order / payment (PayPal)

If you place an order, we process the data necessary to manage the order and the contractual relationship (e.g., professional identity/contact details, company, order information, billing).
Payment is processed by PayPal: we do not store your bank card details. PayPal applies its own privacy policy.

c) Technical data (logs)

Technical data may be recorded during browsing (e.g., IP address, date/time, browser, pages visited) for security purposes, abuse prevention, and proper operation of the website.

3) Purposes and legal bases

We process your data in order to:

• Respond to your requests (contact/quotation): pre-contractual measures and/or legitimate interest

• Manage orders and perform the contract: performance of a contract

• Billing/accounting: legal obligation

• Secure the website (anti-abuse, logs): legitimate interest

4) Recipients

Your data is accessible only to:

• authorised persons within XITECH SARL

• our necessary service providers (hosting/security/email)

• PayPal for payment processing

We do not sell your data.

5) Retention periods

• B2B prospects (contact/quotation): up to 3 years from the last contact initiated by the prospect (e.g., email, request, interaction), in line with CNIL recommendations.

• Customers (contractual relationship): for the time necessary to perform and manage the relationship, then archived as required (legal obligations/disputes).

• Accounting records and supporting documents (invoices, etc.): minimum 10 years from the end of the financial year (general rule for a company).

• Technical logs: limited period proportionate to security objectives (depending on hosting settings).

6) Cookies and trackers

The website may use strictly necessary cookies (operation, security, preferences).
We do not use advertising/marketing tools unless stated otherwise.
During payment, PayPal may place cookies/trackers in accordance with its own policy.

7) Your rights (GDPR)

You have the rights of access, rectification, erasure, restriction, objection, and portability (as applicable).
You may also lodge a complaint with the CNIL.

To exercise your rights: contact@xitech-engineering.com

8) Transfers outside the EU

Some service providers (notably PayPal) may process data outside the EU under their compliance mechanisms and contractual clauses.

9) Updates

Last updated: 10/02/2026