Information notice on the protection of your personal data | live and replay conference broadcasts

Who is the data controller of your personnal data?

Acts as an independent data controller in the context of the processing of your personal data (i.e., it determines the purposes and means of the processing of your information): GIE AXA, a European Economic Interest Grouping, organized under French law, with its registered office at 23 Avenue Matignon, 75008 Paris, registered with the Registry of Commerce and Companies of Paris under the number 333 491 066..

The data controller is referred to in this notice as « AXA » or « le Responsable de traitement » or « nous ».

Update of the present notice on the protection od your personal data

The Data Controller may update this Privacy Notice from time to time in response to changing legal, technical, or business developments. When the Data Controller updates this privacy notice, the Data Controller will take appropriate measures to inform you, consistent with the significance of the changes the Data Controller makes. The Data Controller will obtain your consent to any material privacy notice changes if and where this is required by applicable data protection laws.

This Privacy Notice was last updated on January 31, 2026.

For more information on the processing of your personal data

For more information about the processing of your personal data, please refer to the Privacy Policy available by clicking here.

What are your rights to your data?

In accordance with the French "Informatique et Libertés" law n° 78-17 of 6 January 1978 and the GDPR, you have the right to:

  • Access to your personal data: you have the right to request access to the personal data we process about you, and to obtain a copy of that data,
  • Rectify your personal data: you have the right to ask us to rectify or complete the personal data that we process about you that are inaccurate, incomplete, or not up to date,
  • Request the limitation of the processing of your personal data: you have the right to ask us to limit the processing of your personal data. This means that the Data Controller may simply keep your data but may not process or use it in any other way,
  • Decide what happens to your personal data after your death: you have the right to give us instructions as to how your personal data should be used after your death.

Based on the legal basis for the processing of your personal data, you have also the right to:

  • Request the deletion of your personal data: you have the right to ask us to delete your personal data,

    • Where the processing of your data is based on our legitimate interest:

    • You also have the right to object at any time,but only where the processing of your data is based on the Data Controller's legitimate interest(s), to the processing of your personal data, unless the Data Controller can demonstrate the need for further processing or where such data is necessary for the establishment, exercise, or defense of legal claims.
    • Furthermore, information on the balancing test can be obtained on request by contacting the following address: privacy@axa.com.

    In any case, you have the right to object to the marketing of your personal data.  Please note that AXA Group does not market your personal data.

    How to contact the DPO or exercise your rights?

    If you have any questions, complaints, or comments regarding this information notice or to exercise your rights listed above, please contact the DPO. The contact details are as follows: (i) 23 avenue Matignon, 75008, Paris for GIE AXA and / or (ii) privacy@axa.com

    The Data Controller may ask you for additional information to confirm your identity and/or to assist AXA to locate the data you are seeking.

    How to make a complaint to a supervisory authority?

    You have the right to raise concerns about how your personal data is being processed with a competent supervisory authority, in particular in the Member State of your habitual residence, place of work or place where you think an alleged infringement to your rights occurred.

    In France, the data protection authority is the Commission Nationale de l'Informatique et des Libertés, or “CNIL” whose postal address is 3 place de Fontenoy - TSA 80715 – 75334 Paris CEDEX 07. Its website is accessible here: https://www.cnil.fr/

    For what purpose and in what way is your personal data processed?

    The processing of your personal data has the following purpose: management of broadcast live during conferences by:

    a. Delivering live streaming through a platform,
    b. Allowing you, as an internet user, to ask a question during a live event,

    None of your personal data is processed when you benefit from the replay of the broadcast conferences.

    What is the legal basis for the processing of your personal data?

    The legal basis for the processing of your personal data is the pursuit of the legitimate interests of the Data Controller, by virtue of article 6.1.(f) of the European Regulation no. 2016/679 on data protection – referred to as "GDPR". The legitimate interests pursued by the Data Controller shall consist of proposing you a live stream of conferences and allow you to ask questions. Information on the balancing test can be obtained on request by contacting the following address: privacy@axa.com.

    What personal data do we process about you?

    The categories of data processed for the purpose described above include:

    a. When you watch the live:
    o Your connection personal data: your IP address,

    b. When you ask questions while watching the live:
    o Your identification personal data: last name, first name,
    o Your professional personal data: job title and company/company to which they belong,
    o Your other personal data: your question,
    o Your connection personal data: IP address..

    Is the provision of your personal data mandatory?

    Provision of the information is mandatory to enable us to manage and propose you broadcast live during conferences. If you do not provide this information, you will not be able to benefit from broadcast live during conferences.

    Is an automated decision made in the context of this processing?

    No automated decision-making is performed for this processing.

    Where do your personal data come from?

    Your processed personal data comes directly from you when:

    a. When you watch the live,
    b. When you ask questions while watching the live..

    How do we ensure the security of your personal data?

    The Data Controller uses appropriate technical and organizational measures designed to protect the personal information about you. The measures the Data Controller uses are designed to provide a level of security appropriate to the risk of the processing activity of your personal information, in line with AXA standards.

    How long do we retain your personal data?

    a. When you watch the live:
    o Your connection personal data: your IP address is deleted at the expiry of a “ninety (90) days” delay after the end of the broadcast event,

    b. When you ask questions while watching the live:
    o Your identification and your professional personal data are deleted at the expiry of twenty-four (24) hours delay after the end of the broadcast event,
    o Your question is available in replay for one (1) year,
    o Your connection personal data: IP address is deleted at the expiry of a “ninety (90) days” delay after the end of the broadcast event.

    To whom do we disclose your personal data?

    The Data Controller communicates your personal data only to identified and authorized recipients:

    Internal

    • GIE AXA GROUP COMMUNICATIONS DEPARTEMENT, for the purpose(s) of managing broadcast live during conferences.

    External

    • WEB STYLE PRODUCTIONS, as processor of GIE AXA, for the purpose(s) of providing a website to manage broadcast live during conferences,
    • CELEONET, as sub-processor of WEB STYLE PRODUCTIONS, for the purpose of providing a replay hosting solution,
    • AKAMAI, as sub-processor of WEB STYLE PRODUCTIONS, for the purpose of providing a live stream hosting solution.

    Other

    • Any potential buyer or partner, in the case that the Data Controller takes part in a merger, acquisition or other form of asset transfer, it undertakes to ensure an adequate level of protection if your personal data is transferred to potential buyers or selected partners in the context of this transaction.

    Is your personal data transferred outside the European Union?

    These recipients are located within the European Union (EU).

    Nevertheless, please note that your personal data is processed in the country from which you are accessing the live broadcast or the nearest country, to ensure the quality of the service.

    Finally, in case of service issues, your connection personal data can also be transferred to the following countries which do not provide an adequate level of protection: UNITED-STATES and INDIA.

    The Data Controller provides safeguards to ensure the security and the confidentiality of your personal data and frames its transfer with the Standard Contractual Clauses adopted by the European Commission, of which a copy is available upon request to the following address privacy@axa.com.