FREN
Last updated: 2 November 2026
SARL OxygenStream is committed to ensuring that the collection and processing of your data through the website oxygenstream.fr comply with the General Data Protection Regulation (GDPR) and the French Data Protection Act (“Informatique et Libertés”, Law No. 78-17 of 6 January 1978). This page explains what data is collected, why, how long it is kept and how to exercise your rights.
This English translation is provided for convenience. In the event of any discrepancy, the French version prevails.
Browsing oxygenstream.fr requires no registration and involves no advertising or behavioural profiling. Personal data is mainly collected when you provide it voluntarily, by form, email or phone. Some technical data strictly necessary for the security of the website may also be processed temporarily.
The data you provide voluntarily when you contact us, by form, email or phone, includes:
This data is used in particular to answer your request, prepare a quote and manage the business relationship. Processing is based on steps taken at your request prior to entering into a contract, or on our legitimate interest in responding to the requests we receive. Your data is never sold, rented or transferred to third parties for commercial purposes.
Your data is accessible only to the OxygenStream staff in charge of handling your request. It is hosted by our technical provider Infomaniak Network SA (Rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), Switzerland), which acts as a processor and is not authorised to use it for its own purposes. Switzerland benefits from an adequacy decision of the European Commission: it provides a level of data protection equivalent to that of the European Union.
Messages sent through the contact form are delivered by Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), also a processor. Your contact details and the content of your message pass through Brevo for delivery, and Brevo keeps a technical record of it. No contact database is built from the form: your message is used to handle your request and does not feed any prospecting list. Brevo’s servers are located in the European Union: this data is not transferred outside the EU. The form is also protected against bots by Cloudflare Turnstile (see “Protecting the form against abuse” below).
Data from a contact request is kept for as long as needed to handle your request, then archived for a maximum of three years from our last exchange, in line with the recommendations of the CNIL (the French data protection authority) on prospecting. Data relating to an invoiced service is kept for the legal accounting and tax retention periods.
To prevent automated messages, the contact form is protected by several measures, based on our legitimate interest in keeping the service secure. The number of submissions is limited per visitor and for the whole website, and a message sent only a few seconds after the page was opened is rejected. Your IP address is never stored in clear: only a pseudonymised fingerprint, used solely to limit abusive submissions, is kept for the time needed to check this quota, then deleted automatically.
The form also uses Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States), a service that tells a human visitor from a bot, usually without any action on your part. It is only loaded when you start filling in the form: simply visiting the website does not contact Cloudflare. Cloudflare then receives your IP address and technical information about your browser and device, which it uses only for this check, not for advertising or audience measurement. This data may be processed in the United States; Cloudflare participates in the EU–U.S. Data Privacy Framework. To find out more, see the Turnstile privacy policy.
This website sets no audience measurement or advertising cookies without your consent and loads no Google Maps without your consent or your click. On your first visit, a banner offers you three independent choices: audience measurement, advertising and Google Maps. You can accept one, several or none. The website uses no behavioural tracking tools. The anti-bot check on the contact form (Cloudflare Turnstile) does not depend on this banner: it is used only for the security of the form and is only loaded when you start filling it in.
Audience measurement (Google Analytics). With your consent, we use Google Analytics 4 (Google Ireland Limited and Google LLC) to understand website traffic: pages viewed, where visitors come from (website, search engine…), country and device type. The legal basis is your consent. The cookies set are _ga and _ga_0GRP6C0T6C, valid for 13 months, and measurement data is kept for 14 months. Google signals (cross-referencing with Google accounts) are disabled.
Advertising (Google Ads). With your consent, we use Google Ads to measure the effectiveness of our advertising campaigns (for example a contact request sent after clicking an ad) and, from time to time, to show you our ads on other websites after your visit (remarketing). This sets Google advertising cookies, including _gcl_au, and may send Google information about your browsing. The legal basis is your consent. Without your consent, displaying our ads sets no advertising cookies on this website.
Maps (Google Maps). With your consent, the Google Maps on the Contact page, which show our locations, are displayed directly, without any click from you. Your browser then connects to Google LLC services, which may receive your IP address in particular and use their own trackers. The legal basis is your consent. Without your consent, the maps are not loaded: a button lets you display them on a one-off basis, at your request.
This data may be processed by Google outside the European Union, in particular in the United States, under Google’s privacy policy.
Refusing or withdrawing your consent. Until you accept a category, or if you refuse it, nothing is sent to Google for that purpose. You can change your mind at any time using the “Cookie settings” link at the bottom of every page: refusing is as easy as accepting. Your choice is stored for 6 months in a cookie (oxygenstream_consentement), which the banner needs to work, after which we ask you again.
The fonts used by the website are hosted on our own servers: displaying them triggers no connection to any third-party service, and your IP address is sent to no one. By default, the website’s pages load no fonts, icons or scripts from any third-party service: the resources needed to display the website are hosted locally.
If you refuse the maps, you stay in control: they are not loaded until you click the button provided for this purpose. This click is a one-off choice that is not remembered: no trace of it is kept on your device. If you accept the “Maps” category in the banner, that choice is stored for 6 months in the cookie oxygenstream_consentement, and you can withdraw it at any time via “Cookie settings”. In both cases, when the map is displayed, your browser connects to Google LLC services, under its privacy policy.
Under the conditions set out by law (GDPR), you have in particular the rights of access, rectification, erasure, restriction, objection and, where applicable, data portability. You can exercise these rights at any time:
If, after contacting us, you believe that your rights are not being respected, you can lodge a complaint with the CNIL: www.cnil.fr.
This privacy policy may be updated to reflect changes to the website or to the regulations. The date of the last update is shown at the top of the page. For any question, write to us at live@oxygenstream.fr.
