§Legal
Privacy policy
This policy explains what data we collect on movx.io, why, how long we keep it, and what you can ask of us.
Last updated: 26 September 2026
Who processes your data
The controller of the data collected on movx.io is DADYCAR, a simplified joint-stock company (SAS) with share capital of 1,000.00 euros, whose registered office is at 36 rue Raspail, 92300 Levallois-Perret, France, registered with the Nanterre Trade and Companies Register no. 920 955 366.
For any question about how your personal data is handled, write to dpo@dadycar.fr or by post to the registered office.
What we collect
When you write to us through the contact form, it collects the topic of your message, your company, first name, last name, email and your message. Everything except the message is required.
Job applications go by email, not through the form: we receive your message, your CV and whatever you choose to send us.
The address of the page you sent the form from and the language of that page are attached to your request. Your IP address is read when you send a form, to limit the number of requests per minute. It is not stored.
That is all. The site does not measure its audience, does not carry advertising or social-media trackers, and does not load any third-party script: even its fonts are served by our own server.
Why, on what basis, and for how long
| What we do | Legal basis | Retention |
|---|---|---|
| Answer your message | Our legitimate interest in answering the people who write to us, and steps taken at your request before a contract when your message concerns our services (Art. 6(1)(f) and 6(1)(b) GDPR) | Three years from our last contact |
| Review your job application, received by email | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) | Two years from our last contact, unless you ask us to delete it sooner |
| Limit abusive sending (IP address) | Our legitimate interest in protecting the site (Art. 6(1)(f) GDPR) | Not stored |
We make no automated decision that produces legal effects concerning you, and we do not profile you based on your use of this site.
Who else has access
We do not sell or rent your data. It is available to the members of our team concerned by your message, as far as their work requires, and to the following providers:
- OVH SAS: hosting of the site, in data centres located in France.
- Our customer relationship software, which receives the contact form, runs on our own infrastructure hosted in the European Union.
To prepare or follow up an exchange, our team may, case by case, use the following services, which process data outside the European Union:
- Google Ireland Limited (Google Workspace): our team's email, with possible transfers to the United States.
- Anthropic PBC (United States): the AI assistant in our customer relationship software, which only receives what a given question requires.
- FullEnrich (United States): finding professional contact details, on a manual decision; only your first name, last name, company and LinkedIn profile are sent.
- Instantly (United States): sending prospecting emails, only if you are added to a campaign; your first name, last name, work email, company and job title are sent.
These transfers rely on the safeguards provided by Chapter V of the GDPR: the European Commission's standard contractual clauses or the EU–US Data Privacy Framework, depending on the provider.
Cookies
The site sets no audience-measurement, advertising or social-media cookie, and loads no third-party script. That is why there is no consent banner. The only cookie it can set is this one:
| Name | Purpose | Duration | Consent |
|---|---|---|---|
| NEXT_LOCALE | Remembers the language you chose, when it differs from your browser's language. | Until you close the browser | Not required: it only serves the display you asked for |
It is set only if you switch to a language other than your browser's, and contains the language code (en or fr), nothing else. You can block or delete it in your browser settings: the site will simply show the language of the address you open.
Your rights
You have the following rights over the data concerning you:
- Access: know whether we process data about you, and get a copy.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: have your data deleted, when the law does not require us to keep it.
- Restriction: ask us to stop using it without deleting it, while something is checked.
- Portability: receive the data you gave us in a machine-readable format.
- Objection: object to processing based on our legitimate interest, and at any time, without giving a reason, to direct marketing.
- Instructions after death: decide what happens to your data after your death.
To exercise them, write to dpo@dadycar.fr, or by post to Dadycar, 36 rue Raspail, 92300 Levallois-Perret, France. We answer within one month, which may be extended to three months if the request is complex, in which case we tell you within the first month.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.
Security, minors and changes
Exchanges with the site are encrypted. Form data goes through our own server, which alone holds the access key to our systems: that key is never exposed in a page.
This site is intended for professionals. We do not knowingly collect data about people under sixteen.
We may update this policy, for example if we change host or provider. The date of the last update is shown at the top.