1. Introduction

AXIANTIS (“AXIANTIS”, “we”, “us” or “our”) respects the privacy of individuals and is committed to handling personal data responsibly and in accordance with applicable data protection laws.

This Policy applies to personal data collected through axiantis.com, through communications with us, and in connection with our business relationships and professional activities, subject to any more specific notice or contractual terms that may apply.

AXIANTIS provides strategic intelligence, risk management, investigations, due diligence and decision-support services. Where we process personal data in the course of a client engagement, the applicable engagement terms and the role of each party may determine how that processing is governed.

2. Who is responsible for personal data?

The controller responsible for personal data processed in connection with this website and our own business activities is:

Legal entity: Axiantis
Registered address: 87 QUAI DE LA GARE, 75013 PARIS
Website: https://axiantis.com

For some client engagements, AXIANTIS may process personal data on behalf of a client and in accordance with that client’s documented instructions. In those circumstances, the client may be the data controller responsible for responding to requests concerning that data.

3. Personal data we may collect

Depending on how you interact with us and the services involved, the categories of personal data may include:

• Contact and professional information: name, professional title, employer, business email address, telephone number and other information you choose to provide.
• Correspondence and enquiries: the contents of messages, meeting requests, documents and information provided when you contact AXIANTIS.
• Business relationship information: information needed to manage client, supplier, partner or prospective-client relationships and related administrative records.
• Website and technical information: information such as IP address, device and browser information, pages visited, access times and website interaction data, where collected by the website or its technologies.
• Engagement-related information: information processed as necessary for a specific mandate, subject to applicable law, confidentiality obligations, contractual terms and any relevant privacy notice.
• Compliance and request information: information necessary to manage legal or regulatory obligations, information-security matters, or requests relating to personal data.

Please do not send AXIANTIS sensitive personal data or confidential information unless it is necessary for a legitimate purpose and appropriate arrangements for its secure transmission and handling have been agreed.

Where personal data relates to other individuals, you should ensure that you are entitled to provide it to us and that any required information or notices have been provided to those individuals.

4. Why and how we use personal data

Subject to applicable law and the circumstances of the processing, AXIANTIS may use personal data to:

• respond to enquiries and communicate with clients, prospective clients, partners and professional contacts;
• prepare proposals, manage engagements and provide agreed services;
• conduct due diligence, research, investigations, risk assessments and other mandate-related work where authorised and lawful;
• manage business operations, billing, records and contractual relationships;
• maintain the security, functionality and performance of our website and information systems;
• meet applicable legal, regulatory, professional and compliance obligations;
• protect our rights, manage disputes, prevent misuse and respond to lawful requests from competent authorities; and
• send relevant professional updates or business communications where permitted by law and, where required, with your consent.

We seek to collect and use only personal data that is relevant and proportionate to the purpose for which it is processed.

5. Legal bases for processing

Where the General Data Protection Regulation (GDPR) or similar laws apply, AXIANTIS will rely on an appropriate legal basis for processing personal data. Depending on the circumstances, this may include:

• performance of a contract or steps taken at your request before entering into a contract;
• compliance with a legal obligation;
• legitimate interests, where those interests are not overridden by your rights and interests; or
• your consent, where consent is required by law.

The applicable legal basis depends on the specific processing activity and the relevant jurisdiction. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

6. Security and confidentiality

AXIANTIS aims to apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. Access should be limited to persons who need the information for an authorised business purpose and who are subject to appropriate confidentiality obligations.

No method of transmission or storage can be guaranteed to be completely secure. If you believe that information sent to us has been compromised, please contact us using the details in the Contact section.

7. Data retention

Personal data is retained only for as long as reasonably necessary for the purposes described in this Policy, including to fulfil contractual obligations, meet legal or regulatory requirements, resolve disputes and establish or defend legal claims.

Retention periods vary according to the type of information, the purpose of processing, applicable legal requirements and the terms of the relevant client engagement. When data is no longer required, it will be deleted, anonymised or securely archived, as appropriate and permitted by law.

8. Disclosure and sharing of personal data

AXIANTIS does not sell personal data. Where necessary and lawful, personal data may be shared with:

• AXIANTIS entities and authorised personnel involved in the relevant business activity or engagement;
• professional advisers, auditors, insurers and other persons subject to appropriate confidentiality obligations;
• IT, hosting, communications and other service providers acting under appropriate contractual arrangements;
• clients, where disclosure is necessary and authorised for the relevant engagement;
• courts, regulators, law enforcement bodies or other authorities where required or permitted by law; and
• a successor or relevant transaction party in connection with a corporate reorganisation or transaction, subject to applicable legal requirements.

Any sharing should be limited to what is necessary for the relevant purpose and carried out in accordance with applicable confidentiality, contractual and data protection requirements.

9. International transfers

AXIANTIS operates in an international professional environment. Depending on the engagement, relevant recipients, systems or service providers may be located in countries other than the country where personal data was collected.

Where applicable data protection law restricts international transfers, AXIANTIS will take steps required by that law before transferring personal data, which may include relying on an adequacy decision, appropriate contractual safeguards or another legally recognised transfer mechanism.

10. Your rights

Depending on your location and the applicable law, you may have the right to:

• request access to personal data concerning you;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests or to direct marketing, as applicable;
• receive certain personal data in a portable format, where the legal conditions are met;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent data protection supervisory authority.

These rights are subject to legal conditions and exceptions. If AXIANTIS processes your data on behalf of a client, you may need to direct your request to that client. We may need to verify your identity before responding.

11. Cookies and website analytics

This website may use cookies or similar technologies to support essential website functionality, remember preferences, protect the website, or understand how visitors use it. The technologies actually used depend on the website configuration.

Where required by law, non-essential cookies or similar technologies will be used only after the required consent has been obtained. You may be able to manage cookie preferences through the website’s cookie banner or settings, if available, and through your browser settings. Disabling certain cookies may affect website functionality.

12. Automated decision-making

AXIANTIS will comply with applicable legal requirements concerning decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals. If such processing is used in a particular context, the relevant information and safeguards will be provided as required by law.

This section does not make a blanket statement that no automated processing is used. AXIANTIS should review its actual tools and processes and amend this section if necessary.

13. Third-party websites and services

Our website may contain links to third-party websites, platforms or services. Those third parties operate under their own privacy notices and practices. AXIANTIS is not responsible for the privacy or security practices of websites or services that it does not operate. We encourage you to review their privacy information before providing personal data.

14. Changes to this Policy

AXIANTIS may update this Policy from time to time to reflect changes in our practices, website, services or applicable law. The revised version will be published on this page with an updated “Last updated” date. Where required by law, we will provide additional notice of material changes.

Last updated: 19 October 2026

15. Contact AXIANTIS

For questions about this Policy or to submit a request relating to your personal data, please contact:

Where applicable, you may also lodge a complaint with the data protection supervisory authority competent for your place of residence, place of work or the location of the alleged infringement.