Contents
1. Data controller
The controller of your personal data is Avagam SAS (trademark Cezanne Partners), 45 Avenue de la Coriandre, 13600 La Ciotat, France. Contact: via our contact form (select « Contact DPO / legal representative ») — DPO: Mathieu DESTRIAN.
2. What we collect
We only collect the data you actively provide through our contact form: first and last name, e-mail address, and — optionally — company, LinkedIn profile, plus the information in your message (enquiry type, vertical, location, message body). We do not collect special-category data, and we ask you not to include sensitive information in your message.
We also measure aggregate, anonymous website traffic (see §6). This does not identify you.
3. Purposes & legal bases
- Responding to your enquiry — legal basis: your consent, given by submitting the form, and our legitimate interest in answering prospective counterparts.
- Anti-spam & site security (Turnstile) — legal basis: our legitimate interest in protecting the site.
- Anonymous audience measurement — no personal data, no consent required.
4. Retention
Contact-form data is kept for as long as needed to handle your enquiry and any ensuing relationship, and at most 3 years from the last contact, unless a longer legal obligation applies.
5. Service providers
We share data only with processors acting on our instructions:
- Cloudflare — hosting, security and anonymous analytics.
- Resend (Resend, Inc.) — technical relay of contact-form messages. Because messages are end-to-end encrypted (see §6), Resend only ever relays encrypted content and cannot read your data.
- Cloudflare Turnstile — bot protection on the form.
Where a provider processes data outside the EU/EEA, appropriate safeguards (e.g. Standard Contractual Clauses) apply.
6. Confidentiality & encryption
We treat the confidentiality of enquiries as essential, particularly for buy-side and sell-side counterparts. The contact form is protected by end-to-end encryption:
- The fields you enter are encrypted directly in your browser (OpenPGP standard) before anything is transmitted, using our public key.
- Only encrypted content travels through our infrastructure and our e-mail relay (Resend). At no point can our hosting, our relay or any other third party read your data in clear text.
- Messages are decrypted only in our secured mailbox (Proton Mail), using a private key that we alone hold and that never leaves it.
The contact form is intended for an initial approach only; we ask you not to include highly sensitive deal information in it. Confidential specifics are handled subsequently under a non-disclosure agreement and within a secure data room.
7. Cookies & analytics
This site uses no advertising or tracking cookies. Audience measurement is performed with a privacy-friendly, cookieless analytics tool that does not identify visitors. Cloudflare Turnstile may set a strictly necessary technical token to distinguish humans from bots; this is exempt from consent. Because we set no non-essential cookies, no consent banner is displayed.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to its processing. To exercise these rights, use our contact form and select « Contact DPO / legal representative ». You may also lodge a complaint with your supervisory authority (in France, the CNIL).
9. Contact
Questions about this policy: please use our contact form.