Privacy
Policy
How Sonaxis Studio collects, uses and protects your personal data and audio files — in compliance with GDPR (EU 2016/679) and French data protection law.
Data Controller
Legal entity: SARL VFP (trading as Sonaxis Studio)
Address: 70 rue de la Fraternité, 93170 Bagnolet, France
Company reg.: SIREN 313 413 486 — RCS Bobigny
GDPR contact email: contact@sonaxis.fr
Phone: +33 6 10 02 74 69
Publication Director: Franck Pasquotti
SARL VFP, operating under the brand name Sonaxis Studio, is the data controller for personal data collected via sonaxis.fr and in the course of its professional audio services (mixing, mastering, recording, archiving). This policy applies as of 23 April 2026.
Data Collected
In the course of its activities, SARL VFP collects and processes the following categories of data:
| Category | Data | Source |
|---|---|---|
| Identity | First name, last name, artist name | Contact / order form |
| Contact details | Email address, phone number (optional) | Contact / order form |
| Billing information | Postal address (optional), invoicing details | Order / quote |
| Payment data | Processed exclusively by Stripe (PCI-DSS certified). SARL VFP never sees or stores card numbers. | Stripe payment platform |
| Audio files | Audio and music files submitted for services (mixing, mastering, restoration) | Secure transfer by Client |
| Browsing data | IP address, browser, pages visited (OVH server logs only — no third-party analytics tracking) | OVH server logs |
| Written exchanges | Content of emails and messages relating to quotes and project follow-up | Email correspondence |
Providing the mandatory fields (name, email) is required to perform the service. Optional fields improve project management but do not condition access to the service.
Purposes & Legal Bases
Each processing activity is based on a legal ground defined by the GDPR (Article 6). The table below lists all processing operations carried out by SARL VFP:
| Purpose | Legal basis (GDPR art. 6) | Duration |
|---|---|---|
| Execution of audio services | Performance of a contract (art. 6.1.b) | Duration of service + 5 years |
| Invoicing and bookkeeping | Legal obligation (art. 6.1.c) — Commercial Code | 10 years |
| Responding to enquiries and quotes | Legitimate interest (art. 6.1.f) | 3 years from last contact |
| Sending news about services (opt-in only) | Consent (art. 6.1.a) | Until consent is withdrawn |
| Dispute management and legal defence | Legitimate interest (art. 6.1.f) | Applicable limitation period (5 years) |
| Fraud prevention and security | Legitimate interest (art. 6.1.f) | 1 year |
| Commercial reference (artist credit, unless objected to) | Legitimate interest (art. 6.1.f) | Until the person objects |
Client Audio Files & Artificial Intelligence
Audio, music and multimedia files transmitted by the Client to Sonaxis Studio for any service (mixing, mastering, recording, restoration, archiving) are copyright-protected works and data entrusted on a strictly professional basis.
SARL VFP formally commits to never using audio files, stems, mixes, masters or any musical production entrusted by a Client:
— to train, fine-tune, feed or improve any artificial intelligence, machine learning or automated learning model, of any kind;
— as training data (dataset) for any generative, imitative or analytical algorithmic system;
— in connection with any transfer, sale or sharing of data to third parties for AI training purposes.
This commitment applies without time limit, including after the end of the commercial relationship.
No third-party generative AI tool is used to process or analyse files entrusted by the Client. All work is carried out exclusively by a human sound engineer using conventional professional audio equipment.
File management after delivery: source files provided by the Client are retained on Sonaxis Studio's secure servers for a maximum of 12 months from the final delivery date, as a backup in case of revision requests or re-exports. After this period, they are permanently deleted, unless otherwise agreed in writing with the Client.
The Client may at any time request early deletion of their files by sending an email to contact@sonaxis.fr with the subject line "File deletion — [Project name]". Deletion will be completed within 30 business days.
In short: your work stays your work. It is used solely to carry out the service you commissioned from Sonaxis Studio. It never leaves our infrastructure for any purpose other than agreed delivery.
Retention Periods
Data is retained for no longer than strictly necessary for the purposes for which it was collected, in compliance with applicable legal obligations.
| Data type | Retention period | Basis |
|---|---|---|
| Client data (identity, contact) | 5 years from end of commercial relationship | Commercial limitation period |
| Invoices and accounting records | 10 years | Article L.123-22 of the French Commercial Code |
| Client source audio files | 12 months after final delivery | Sonaxis internal policy |
| Delivered files (final masters, mixes) | 12 months after delivery (unless otherwise agreed) | Sonaxis internal policy |
| Email exchanges (enquiries) | 3 years from last contact | CNIL recommendation |
| Server logs (IP, browsing) | Maximum 13 months | CNIL recommendation |
| Payment data (tokenised) | Managed by Stripe under their own T&Cs (not retained by Sonaxis) | PCI-DSS / Stripe |
Data Recipients
Personal data collected by SARL VFP is never sold, rented or transferred to third parties for commercial or marketing purposes. It may be shared with technical sub-processors strictly necessary for service delivery:
| Recipient | Role | Data shared | Location |
|---|---|---|---|
| OVH SAS | Website and email hosting | Server logs, emails | France / EU |
| Stripe Inc. | Payment processing (PCI-DSS certified) | Transaction data (no card numbers) | USA — EU standard contractual clauses |
| WeTransfer / file transfer service | Secure audio file transfer | Audio files (transit only) | Variable — encrypted in transit |
Each sub-processor is bound to SARL VFP by contractual confidentiality obligations meeting GDPR requirements (Article 28). Data may also be disclosed to competent authorities if required by law or court order.
Transfers Outside the European Union
Some sub-processors (notably Stripe) are established outside the European Union. In such cases, SARL VFP ensures that data transfers are governed by appropriate safeguards in accordance with Chapter V of the GDPR: Standard Contractual Clauses (SCCs) adopted by the European Commission, or an applicable adequacy decision.
Stripe's data protection policy is available at stripe.com/en/privacy. WeTransfer is certified GDPR-compliant. Files transmitted via these services are encrypted in transit (TLS 1.2+).
Your Rights
Under the GDPR (Articles 15 to 22) and French data protection law, you have the following rights regarding your personal data:
- Right of access (art. 15): obtain confirmation that your data is being processed and receive a copy.
- Right to rectification (art. 16): have inaccurate or incomplete data about you corrected.
- Right to erasure (art. 17): request deletion of your data, within the limits of statutory retention obligations.
- Right to restriction of processing (art. 18): request that your data be stored but no longer used in certain circumstances.
- Right to data portability (art. 20): receive your data in a structured, machine-readable format, or have it transmitted to another controller.
- Right to object (art. 21): object to processing based on legitimate interest, in particular for direct marketing purposes.
- Right to withdraw consent: withdraw your consent at any time for processing that relies on it, without affecting the lawfulness of prior processing.
- Right to post-mortem instructions: define instructions regarding the fate of your data after death.
To exercise your rights, send your request by email to contact@sonaxis.fr with the subject line "GDPR Rights Request", including proof of identity. We will respond within a maximum of 30 days.
If your request is not satisfactorily addressed, you may lodge a complaint with the French data protection authority: CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr. EU residents may also contact their local supervisory authority.
Cookies & Trackers
A cookie is a small text file stored on your device when you visit a website. Sonaxis.fr follows a minimal cookie policy, consistent with CNIL (French data protection authority) guidelines.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| PHPSESSID | Strictly necessary | PHP session — contact form security (CSRF token) | Session (deleted on browser close) |
| snx_lang | Functional | Stores your chosen language (FR/EN) | 1 year |
| snx_consent | Technical | Stores your cookie consent choice | 13 months |
Strictly necessary cookies (PHPSESSID) are exempt from consent requirements. Functional cookies (snx_lang) and any audience analytics tools are subject to your prior consent, collected via the cookie banner.
The site does not load any advertising or third-party tracking cookies without prior consent. No social media pixels are loaded without your knowledge.
You may change your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies may affect the contact form.
Contact & DPO
SARL VFP is not required to appoint a Data Protection Officer (DPO) under GDPR Article 37 (small organisation not processing data at scale or special categories). However, any data protection queries can be addressed to:
Franck Pasquotti — SARL VFP / Sonaxis Studio
70 rue de la Fraternité, 93170 Bagnolet, France
Email: contact@sonaxis.fr
Phone: +33 6 10 02 74 69
Last updated: 23 April 2026.
SARL VFP reserves the right to update this policy at any time to reflect changes in practices or legal obligations. The current version is always available at sonaxis.fr/privacy-policy.html. See also our Legal Notice & T&Cs.