This privacy policy aims to inform users of the website and the services offered by SAS Hélie Solution about how their personal data is collected, processed, and protected, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and the Data Protection Act of January 6, 1978 as amended.
1. Data Controller
The data controller for the personal data collected via the website and services of Hélie Solution is:
Company name: SAS Hélie Solution
Legal form: Simplified Joint Stock Company (SAS)
Head office: 11 rue du Chêne Vert, 49124 Saint-Barthélemy-d'Anjou, France
SIRET / RCS: 985 215 037 00013
General contact: contact@heliesolution.fr
Publication manager: Julien Raimbault
Data Protection Officer (DPO): maxime@heliesolution.fr
2. Personal Data Collected
Hélie Solution only collects data necessary for providing its services and for the business relationship with its clients and prospects. No patient health data is collected by the website.
2.1 Data Collected via Forms
When submitting a form (request for demonstration, activity scheduling, assistance request):
Title, first name and last name
Position and place of work
Professional email address
Phone number
City and postal code
Free text content of the message
2.2 Data Collected via the Client Portal (Customer Service)
When creating and tracking support tickets :
Login credentials (email, encrypted password)
History of tickets and exchanges with the support team
Attachments sent by the client
Contract data and equipped material
3. Purposes and legal bases of processing
Purpose | Legal basis | Retention period |
Processing of demonstration and contact requests | Pre-contractual measures (art. 6.1.b GDPR) | 3 years from the last contact |
Execution of the commercial contract and invoicing | Execution of the contract (art. 6.1.b GDPR) | 10 years (accounting obligation) |
Management of after-sales service tickets and technical support | Execution of the contract (art. 6.1.b GDPR) | Duration of the contract + 3 years |
Sending commercial information (newsletter) | Consent (art. 6.1.a GDPR) | 3 years from the last contact or until unsubscribe |
Website traffic statistics | Legitimate interest (art. 6.1.f GDPR) | Maximum 13 months |
Compliance with legal and accounting obligations | Legal obligation (art. 6.1.c GDPR) | According to applicable legal durations |
4. Recipients of the data
The personal data collected is strictly intended for the authorized internal services of Hélie Solution :
Sales team (processing of demonstration requests)
Technical and support team (processing of after-sales service tickets)
Administrative and accounting team (billing, contractual follow-up)
Data may also be transmitted to subcontractors strictly necessary for the operation of the services:
Host of the Odoo solution (Odoo SA, cloud infrastructure) — located in the European Union
Provider of transactional email and notification services
All subcontractors are contractually committed to comply with the GDPR and to implement appropriate security measures.
No data is transferred outside the European Union without appropriate safeguards (standard contractual clauses of the European Commission).
No data is sold, rented, or transferred to third parties for commercial purposes.
5. Rights of data subjects
In accordance with Articles 15 to 22 of the GDPR, any person whose data is processed has the following rights:
Right of access: to obtain confirmation that data concerning you is being processed and to receive a copy.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure: to request the deletion of your data, except where there is a legal obligation to retain it.
Right to restriction of processing: to request the temporary suspension of the processing of your data.
Right to data portability: to receive your data in a structured, commonly used, and machine-readable format.
Right to object: to object to the processing of your data on grounds relating to your particular situation.
Right to withdraw your consent at any time when the processing is based on that consent.
Right to define directives regarding the fate of your data after your death.
To exercise these rights, you can send your request to the Data Protection Officer (DPO):
By email: maxime@heliesolution.fr
By mail: SAS Hélie Solution — DPO, 11 rue du Chêne Vert, 49124 Saint-Barthélemy-d'Anjou, France
A response will be provided to you within one month from the receipt of your request. A proof of identity may be requested to verify your identity.
If you believe, after contacting us, that your rights are not being respected, you can file a complaint with the CNIL:
Website: www.cnil.fr
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
6. Data Security
Hélie Solution implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data:
Encryption of exchanges via the HTTPS / TLS protocol (valid SSL certificate across the entire site)
Enhanced authentication for access to the client portal (complex password, protection against repeated login attempts via CAPTCHA)
Storage of passwords in encrypted form (hashing)
Automatic and daily backups of databases
Hosting on a secure cloud infrastructure (Odoo Cloud) with a 99.9% SLA
Access to data restricted to authorized personnel and logged
Regular staff awareness of good security practices
7. Cookies and trackers
The Hélie Solution website uses cookies to ensure its proper functioning, measure its audience, and improve the user experience. In accordance with Article 82 of the Data Protection Act, a consent banner is displayed during the first visit and allows the user to accept or refuse cookies in a granular manner. Learn more.
8. Data concerning minors
The services of Hélie Solution are exclusively aimed at healthcare professionals and medical-social establishments. No data concerning minors is collected directly via the website.
The Hélie and Hôsea devices used in establishments can be employed by beneficiaries of all ages, but the processing of data resulting from this use is the responsibility of the healthcare establishment and not Hélie Solution.
9. Modification of the privacy policy
Hélie Solution reserves the right to modify this privacy policy at any time, particularly to comply with any legislative, regulatory, or technical developments. Users are encouraged to regularly consult the current version on the site.
10. Contact
For any questions regarding this privacy policy or the processing of your personal data, you can contact Hélie Solution:
By email (general): contact@heliesolution.fr
By email (DPO): maxime@heliesolution.fr
By mail: SAS Hélie Solution, 11 rue du Chêne Vert, 49124 Saint-Barthélemy-d'Anjou, France