Privacy Policy
Last updated: August 2026
This Privacy Policy explains how personal data is collected and used when you visit xavierrossey.com and subscribe to receive news and updates.
1. Data Controller
The data controller responsible for the processing of personal data through this website is:
SASU FLAG
608 rue Camille Delacroix
62155 Merlimont
France
Email: contact@xavierrossey.com
2. Personal Data We Collect
The website currently collects personal data only when you voluntarily subscribe to the mailing list.
The information collected is:
your email address;
information relating to your subscription and consent, where necessary for managing the mailing list.
You are not required to subscribe to use or browse the website.
3. How We Use Your Data
Your personal data is used solely to send you news and updates about Xavier Rossey, his books, investigations, publications and projects.
Your email address will not be used for unrelated marketing purposes.
4. Legal Basis
The processing of your email address for the mailing list is based on your consent.
By subscribing, you consent to receiving these communications by email.
You may withdraw your consent at any time by clicking the unsubscribe link included in every email or by contacting contact@xavierrossey.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before your withdrawal.
5. Mailing List Provider — Brevo
The mailing list and email communications are managed using Brevo, which acts as a service provider processing personal data on our behalf.
Your email address and information relating to your subscription may therefore be processed by Brevo for the purpose of managing subscriptions and delivering email communications.
Brevo states that the servers on which it processes and stores its databases are located within the European Union.
6. How Long We Keep Your Data
Your email address is retained for as long as you remain subscribed to the mailing list.
If you unsubscribe, your address will no longer be used to send you newsletters. Certain information may be retained where necessary to record your unsubscribe request and ensure that you are not inadvertently contacted again.
7. Sharing of Personal Data
We do not sell or rent your personal data.
Personal data may be accessible to service providers strictly where necessary to operate the mailing list and website, including Brevo.
8. Your Rights
Under applicable data protection law, including the General Data Protection Regulation (GDPR), you may have the right to:
access your personal data;
correct inaccurate personal data;
request deletion of your personal data;
request restriction of processing;
withdraw your consent at any time;
object to certain processing where applicable;
request portability of your data where applicable;
lodge a complaint with a competent data protection authority.
To exercise your rights,
9. Cookies and Analytics
The website currently does not use advertising or marketing analytics tools.
If analytics, advertising technologies or other services involving additional processing of personal data are introduced in the future, this Privacy Policy will be updated accordingly and any consent mechanisms required by applicable law will be implemented.
10. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the website, its services or applicable legal requirements.
The date of the latest revision will appear at the top of this page.