1. Data controller
The data controller is:
AXELYUM MEDTECH has not identified a separate DPO contact on this website. Privacy and data-rights requests may be sent directly to the address above.
2. Scope
This policy applies to personal data processed when a visitor consults the website, prepares or sends a professional enquiry, exchanges with AXELYUM MEDTECH by email, or enters into preliminary industrial, licensing, institutional, NDA or partnership discussions.
It does not govern third-party websites linked from this website. Those services apply their own privacy policies.
3. Important point about the contact form
The current contact form is implemented as a client-side “Prepare email” function. Data entered in the fields are used in the visitor's browser to compose an email addressed to AXELYUM MEDTECH.
The website itself does not intentionally transmit or store the content of those form fields on an AXELYUM MEDTECH web database. Personal data are transmitted to AXELYUM MEDTECH only if the visitor then sends the prepared email using their email application or provider.
The visitor's email provider and AXELYUM MEDTECH's email service may process message metadata and content in accordance with their respective service arrangements and privacy obligations.
4. Categories of personal data
Depending on the interaction, AXELYUM MEDTECH may process:
- name and professional identity;
- company, organisation or institutional affiliation;
- professional email address and other contact details voluntarily supplied;
- professional profile, role or area of interest;
- subject and content of correspondence;
- information required for NDA, pre-contractual, industrial or licensing discussions;
- technical connection and security data generated as part of website hosting, such as IP address, date/time, requested resource and technical browser/server information, where processed by the hosting provider.
Visitors are asked not to transmit medical patient data, special-category personal data, confidential engineering data or proprietary technical information through the public contact route.
5. Purposes and legal bases
| Purpose | Typical data | Legal basis |
|---|---|---|
| Respond to professional or institutional enquiries | Identity, organisation, email, message | Legitimate interests (GDPR Art. 6(1)(f)) and, where applicable, steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b)) |
| Assess industrial, licensing, investment, strategic or technology-transfer opportunities | Professional identity, organisation, correspondence, meeting records | Legitimate interests and/or pre-contractual measures |
| Manage NDA and contractual discussions | Identity, contact details, negotiation records | Pre-contractual measures, contract performance and legitimate interests |
| Website security, availability and fraud/abuse prevention | Technical logs and connection information | Legitimate interests in securing the website and services |
| Compliance with legal, accounting or regulatory obligations | Relevant records and correspondence | Legal obligation (Art. 6(1)(c)) |
| Optional non-essential cookies or tracking, if introduced later | Cookie identifiers / usage data | Consent where required (Art. 6(1)(a) and applicable ePrivacy rules) |
6. Mandatory or optional nature of the data
Fields marked as required on the contact page are necessary to prepare a sufficiently identifiable professional enquiry. Because the current form works through the visitor's email application, AXELYUM MEDTECH does not receive those data unless the visitor chooses to send the email.
Other information is optional unless it becomes necessary for a later contractual, regulatory, confidentiality or legal process.
7. Retention periods
- Professional enquiries / prospects: generally up to 3 years from collection or the last meaningful contact initiated by the prospect, unless a shorter period is sufficient.
- Pre-contractual and contractual exchanges: for the duration necessary to manage the relationship and, where justified, for applicable legal limitation periods or evidentiary needs.
- Legal/accounting records: for the periods imposed by applicable law.
- Technical hosting/security logs: for the period necessary for security, service operation and applicable legal obligations, according to the hosting service configuration and provider arrangements. AXELYUM MEDTECH does not use such logs for behavioural advertising.
Data may be placed in restricted intermediate archives where retention is justified for legal claims or compliance, and deleted or anonymised when no longer required.
8. Recipients
Personal data are accessible only to persons who need them for the purposes described above, including AXELYUM MEDTECH management and, where necessary, authorised professional advisers, legal/regulatory advisers, IT/email providers and hosting/security providers.
AXELYUM MEDTECH does not sell personal data.
9. Hosting and processors
The website is hosted by HOSTINGER INTERNATIONAL LIMITED, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The hosting provider may process technical information needed to provide, secure and maintain the hosting service under its contractual and data-protection arrangements.
Other service providers may be used for email, document exchange, professional advice or secure collaboration where necessary. They are selected according to the needs of the activity and applicable confidentiality and data-protection requirements.
10. International data transfers
AXELYUM MEDTECH is established in France and the identified website hosting contracting entity is established in Cyprus, within the European Economic Area.
Where another service provider processes personal data outside the European Economic Area, AXELYUM MEDTECH will rely on an applicable lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another mechanism recognised by data-protection law, where required.
11. Cookies and trackers
The current AXELYUM MEDTECH website is designed as a lightweight corporate website and does not intentionally include advertising cookies, behavioural marketing trackers, third-party analytics, embedded social-media widgets or embedded third-party video players.
No consent banner is therefore intentionally required for non-essential tracking in the current configuration. Strictly technical mechanisms necessary to hosting, security or requested functionality may remain outside consent requirements where permitted by law.
If analytics, advertising tools, embedded video, social-media plugins or other non-essential trackers are added later, this policy and the website consent mechanism must be reviewed before those tools are activated.
12. Your rights
Subject to the conditions of the GDPR and applicable French law, you may have the right to:
- obtain information about the processing of your personal data;
- request access to and a copy of your data;
- request rectification of inaccurate or incomplete data;
- request erasure where the applicable conditions are met;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive or transmit certain data under the right to portability where applicable;
- withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
To exercise a right, contact luc.pichotte@axelyumhealth.com. AXELYUM MEDTECH may request information reasonably necessary to verify identity before acting on a request.
13. Right to lodge a complaint
If you believe that the processing of your personal data infringes applicable data-protection law, you may lodge a complaint with the French supervisory authority:
Commission nationale de l'informatique et des libertés (CNIL)
3 Place de Fontenoy
75007 Paris — France
www.cnil.fr
14. Security and confidential information
AXELYUM MEDTECH takes proportionate organisational and technical measures to protect information under its control. No internet or email transmission can nevertheless be guaranteed to be completely secure.
Do not send confidential technical documentation, unpublished intellectual property, patient data, health data or other sensitive information through the public contact route. Where required, technical disclosure should take place only after appropriate confidentiality arrangements, including an NDA where relevant.
15. Automated decision-making
The current website does not use personal data to make decisions producing legal or similarly significant effects through solely automated processing.
16. Changes to this policy
This policy may be updated to reflect changes in the website, services, providers, regulatory requirements or AXELYUM MEDTECH's processing activities. The current version and update date are published on this page.
Last updated: 17 August 2026.