Privacy Policy

Last updated: 5 November 2026

Milexia is committed to the protection of your personal information. This Policy explains how the Milexia group companies listed below (“Milexia”, “we”, “us”) process personal data in compliance with the personal data protection laws currently in force, in particular the EU General Data Protection Regulation (EU GDPR), the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018, together referred to as the “GDPR”.

The principle behind our Privacy Policy is to maintain a transparent relationship with you regarding your personal data. Milexia will only process personal data where there is a valid legal basis to do so (contract, legal obligation, legitimate interest or your consent); we shall only retain it for as long as necessary and we shall only permit those individuals in our organisation, or those of our suppliers, to access personal data where there is a contractual or legitimate reason.

This Policy applies to all personal data processing carried out by Milexia group companies and may be supplemented by local regulations and policies where required by the country of one of our companies.

Who we are

Milexia is a group of companies. Depending on the context, the controller of your personal data is Milexia Group SAS and/or the Milexia company listed below, including the Ultimate Renaissance (“UR”) companies, with which you have, or are entering into, a relationship.

Country Company Registered address and registration number
France Milexia Group SAS Espace Technologique de Saint-Aubin, Bâtiment Mercury 2, 91190 Saint-Aubin – SIRET 951 569 748 00027
France Milexia Developpement 2 SAS Espace Technologique de Saint-Aubin, Bâtiment Mercury 2, 91190 Saint-Aubin – SIRET 840 990 899 00022
France Milexia France SAS Espace Technologique de Saint-Aubin, Bâtiment Mercury 2, 91190 Saint-Aubin – SIRET 719 804 817 00034
France Ultimate Renaissance S.a.r.l. 23 rue Étienne Marcel, 75001 Paris – SIRET 432 757 102 00053
Germany Milexia Deutschland GmbH Berliner Platz 12, 74072 Heilbronn – HRB 106087 (Stuttgart)
Denmark Milexia Nordics A/S Park Allé 350C, 2605 Brøndby – CVR 27466126
Denmark Milexia Scandinavia ApS Park Allé 350C, 2605 Brøndby – CVR 44888165
Italy Milexia Italy S.p.A. Via Giorgio Washington 2, 20146 Milano (MI) – Reg. no. 08311240157
Italy UR Italia S.r.l. Viale Tommaso Edison 44, 20090 Trezzano sul Naviglio (MI) – Reg. no. 14032350960
Norway Milexia Norway AS Trollåsveien 4, 1414 Trollåsen – Company no. 914517575
Poland Milexia Poland Sp. z.o.o ul. Grzybowska 87, 00-844 Warsaw – Company no. 1027298
Spain Milexia Iberica SAU Calle de Nanclares de Oca 5, Planta Jardín, C1, 28022 Madrid – NIF A81884231
Spain Ultimate Renaissance S.A.U. Calle Tuset 27, planta 7, puerta 1, 08006 Barcelona – NIF A61158804
Sweden Ultimate Renaissance AB Ranhammarsvägen 4, 168 67 Bromma, Stockholm – Reg. no. 556606-0876
United Kingdom Milexia UK Ltd. 3 Hazelwood, Lime Tree Way, Chineham Park, Basingstoke, Hampshire, RG24 8WZ – Company no. 02473216
United Kingdom APC Technology Group Ltd 6 Stirling Park, Laker Road, Rochester, Kent, ME1 3QR – Company no. 01635609
United Kingdom Whistler Technology Ltd Matlock Mill, Hamilton Way, Mansfield, NG18 5BU – Company no. 04303494
United Kingdom Microtek Components Ltd 3 Hazelwood, Lime Tree Way, Chineham Park, Basingstoke, Hampshire, RG24 8WZ – Company no. 03089499
United Kingdom Ultimate Renaissance Limited 23 Watermoor Point, Watermoor Road, Cirencester, GL7 1LF – Company no. 03707009

Data protection contact: privacy@milexia.com. You can contact our data protection team for any question about this Policy or to exercise your rights (see section 10).

Key definitions

“Personal data”: all the information collected from you that can be used to identify an individual (telephone number, name, address, etc.).

“User” or “Data subject”: this is, basically, you. The regulation uses this expression to identify a person whose data is processed.

“Controller”: a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Processor”: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

“Third party”: any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

“Recipient”: a person or entity to whom personal data is disclosed.

“Consent”: a freely given, specific, informed and unambiguous indication of your wishes by which you, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to you.

“Processing”: any operation performed on personal data, such as collection, recording, storage, use, disclosure or erasure.

“Transfer”: disclosure of data to a natural or legal person, public authority, agency or other body, whether or not they are a third party.

1. Which personal data do we collect?

This Policy applies to automated personal data and manual filing systems. The following is a non-exhaustive list of the data we process:

  • Any data provided by you, collected from the access and use of our services or your relationship with Milexia, such as, but not limited to: name, salutation, job title, company, email address, telephone number, address or location, interests (products and services);
  • Any other personal information submitted through registration forms or questionnaires, such as social security number and financial information like IBAN;
  • Data resulting from contact forms and subsequent communications;
  • Data collected at trade shows and events (see our Trade Shows and Events notice);
  • Information collected directly, through forms or data entry fields on our website, or through passive collection by cookies, browsing history and other data collection technologies (you can find more detail in our Cookie Policy);
  • Data from public sources, displayed at accessible sources or that is part of your profile on a social network and that you have made available to us;
  • Data related to financial solvency and creditworthiness, which may be checked at public creditworthiness registers with outstanding obligations, prior to or during a contract with us;
  • Information received from third parties, based on either your consent or another legal basis.

2. How will we use your personal data?

We hold your information to manage our relationship with you as a customer, prospect, supplier, employee or data subject in any way linked to Milexia. For example, to process quotations, orders, contracts, invoices, sales support, creditworthiness and financial obligations, provision of services, employee benefits, training and job offers; to manage our communications about our products and services; to perform accounting, auditing and other internal functions; to identify, prevent and protect against cybersecurity and other security events, espionage, fraud and other unlawful activity, claims and other liabilities; and to comply with and enforce applicable legal requirements, relevant industry standards and our policies.

Each of these uses relies on one of the legal bases described in section 3.

In the case of sensitive data, processing will only take place with the explicit consent of the data subject, unless another exception provided for by the GDPR applies (for example, data manifestly made public by the data subject).

3. What is the legal basis for processing your data?

We process your personal data on the following legal bases:

  • Performance of a contract or steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR): processing quotations, orders, contracts, invoices, provision of products and services, after-sales support.
  • Compliance with a legal obligation (Article 6(1)(c) GDPR): accounting and tax obligations, responses to competent authorities, and other obligations under applicable law.
  • Our legitimate interests (Article 6(1)(f) GDPR), except where such interests are overridden by your interests, rights or freedoms, in:
    • promoting our business and assessing the success of our promotional activities, subject to section 4 for email marketing;
    • managing our relationships with customers, prospects, suppliers and other business contacts;
    • supporting our customers in their use of products and services;
    • encouraging the sharing of ideas, experiences and accomplishments of customers and employees;
    • identifying, preventing and protecting against cybersecurity and other security events, espionage, fraud and other unlawful activity, claims and other liabilities;
    • monitoring and improving our websites.
  • Your consent (Article 6(1)(a) GDPR), where required by law, in particular for email marketing where national law requires prior consent (section 4) and, where indicated, for email marketing to contacts collected at trade shows and events (see our Trade Shows and Events notice), for non-essential cookies (see our Cookie Policy) and, where applicable, for sensitive data. You may withdraw your consent at any time (section 10).

4. Email marketing

We may send you business-related emails about our products, services and events:

  • Existing customers: we may send you emails about products and services similar to those you have purchased from us. You are informed of this when your data is collected and you may object at any time, including in every email we send.
  • Other business contacts: depending on the law applicable to you, we send such emails either on the basis of our legitimate interest, where the message relates to your professional activity, or with your prior consent where national law requires it. You may object or withdraw your consent at any time, free of charge.
  • Contacts collected at trade shows and events: we send you marketing emails only on the basis indicated to you when your data was collected (your consent or, where permitted by applicable law, our legitimate interest, with the right to object), as described in our Trade Shows and Events notice. Following up on the specific enquiry you made at our stand is not marketing and does not depend on this choice.

Every marketing email contains a link allowing you to unsubscribe.

5. How do we store and secure your information?

We commit to processing your data in accordance with the applicable regulations, using the appropriate organisational and technical measures to guarantee an appropriate level of security to ensure confidentiality, integrity and availability.

6. With whom will we share your personal data?

Milexia will never sell personal data to third parties. Where we lawfully transfer or share your personal data, it will be with the following recipients, on the legal bases described in section 3:

  • Third parties to which we are legally bound to provide your data, for example social security, administrative and tax authorities;
  • Entities that subsidise training activities;
  • Third parties which need to process your data for the fulfilment of the relationship you have with us;
  • Financial solvency and creditworthiness registries for the compliance of financial obligations;
  • Third parties, in all cases where we believe disclosure is necessary or appropriate to prevent harm or financial loss, or in connection with an investigation of suspected or actual espionage, cybersecurity or security events or other fraudulent or illegal activity;
  • Other Milexia group companies listed in the section “Who we are”, where necessary for the purposes described in this Policy;
  • Service providers acting on our behalf (processors), such as IT, CRM, emailing and lead capture providers, under contracts complying with Article 28 GDPR;
  • Other third parties, where you have given your consent.

We also reserve the right to transfer personal information we hold about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganisation, acquisition, dissolution or liquidation).

7. Data transfers

Given that we are an international business, we may store, process and/or transfer the personal information we collect about individuals to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which the individual initially provided the information. When we transfer an individual’s information to recipients in other countries (e.g. U.K.), we will protect that information as described in this Policy. If an individual is located in the European Economic Area (“EEA”), we will comply with applicable legal requirements providing adequate protection for the transfer of personal information to recipients in countries outside of the EEA.

8. How long do we retain your information?

We keep your personal data only for as long as necessary for the purposes for which it was collected. The periods below are general principles; where local law requires different periods, the Milexia company concerned applies them.

8.1 Retention periods

  • Managing our business relationship: for as long as the relationship lasts. If you work for one of our business customers or suppliers, this means the relationship with your company, for as long as you remain our contact there.
  • Marketing to customers: during the business relationship and for up to 3 years after its end.
  • Marketing to prospects (non-customers), including contacts collected at trade shows and events: for up to 3 years from collection or from the last contact initiated by you (for example, a request for information or a click on a link in one of our emails; merely opening an email does not count).
  • Contracts, orders and invoices: for as long as required by our legal obligations (for example, accounting and tax obligations) and for the applicable limitation periods, as evidence in case of a dispute.
  • Evidence of your consent and of our responses to your requests: for the applicable limitation periods, to demonstrate our compliance with data protection law.
  • Identity documents provided to exercise your rights: deleted once your identity has been verified, unless exceptionally required as evidence.

8.2 How these periods apply

  • When the relationship ends, your data is not deleted straight away: your contact details may still be used for marketing for the period set out above, and the documents we need as evidence are moved to a separate archive with restricted access, where they are never used for marketing.
  • If you object to marketing or withdraw your consent, we stop using your data for marketing at once, even before the end of the periods above, and keep only the minimum data necessary, in a suppression list, to respect your choice.
  • If you have had no interaction with us for a prolonged period (for example, an order, a quotation request, an exchange with our sales team or a click in one of our emails), we may ask you to confirm that you still wish to receive our emails; without your confirmation, we will stop sending them.
  • If we learn that you have left your company or that your details have changed, we update or delete your data.
  • At the end of these periods, your data is deleted or anonymised.

9. How do we protect your data?

We take all reasonable precautions to keep your personal information secure and require any third parties that handle or process your personal information for us to do the same. Access to your personal information is restricted to prevent unauthorised access, modification or misuse and is only permitted among our employees and agents on a need-to-know basis. Milexia uses industry-standard encryption technologies when transferring and receiving data exchanged with our site. We have appropriate security measures in place in our physical facilities to protect against the loss, misuse or alteration of information that we have collected from you. In case of a personal data breach, we will inform and cooperate with the competent data protection authority, and with you where required by law.

10. What are your rights?

At any time, you may exercise the following rights concerning the processing of your personal data:

  • Right to be informed about the processing of your personal data, as set out in this Policy;
  • Right of access: you can obtain confirmation of whether we process your personal data and a copy of it;
  • Right to rectification: you may correct or complete your data if it is inaccurate or incomplete;
  • Right to erasure: you may request that your data be deleted, in the cases provided for by the applicable regulation;
  • Right to restriction of processing: you may request that we restrict the processing of your personal data, in the cases provided for by the applicable regulation;
  • Right to object: you may object, on grounds relating to your particular situation, to processing based on our legitimate interests, unless we demonstrate compelling legitimate grounds or the processing is necessary for legal claims;
  • Right to data portability: you can request to receive your data, or to have it transmitted to another organisation, in the cases provided for by the applicable regulation;
  • Right to withdraw your consent at any time, free of charge, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before it;
  • Right to lodge a complaint with a supervisory authority, in particular the French Commission Nationale de l’Informatique et des Libertés (CNIL, www.cnil.fr) or the authority of the country where you live or work.

Your right to object to direct marketing

You may object at any time, free of charge and without having to give reasons, to the use of your personal data for direct marketing purposes, including any related profiling. To do so, use the unsubscribe link included in each of our marketing emails or write to privacy@milexia.com. Your objection will be taken into account without delay.

To exercise your rights, you can contact Milexia’s data protection team at privacy@milexia.com, indicating the processing concerned. We may ask you for proof of identity only where we have reasonable doubts about your identity.

11. What happens if you provide us with the data of a third party?

If, as a result of your relationship with us, you provide us with a third party’s personal data, we remind you that you are solely responsible for (i) having a legal basis, where applicable their prior consent, to communicate their personal data to Milexia for the purposes described in this Policy, and (ii) having informed that third party of the terms of this Policy.

You are responsible for holding Milexia harmless from any liability arising from a lack of information and/or consent to or from that third party.

12. How do we process your data on social networks?

We recommend that you do not provide your personal data or that of third parties when interacting with our social networks. Should you decide to include personal information, it will be processed in accordance with this Policy.

Personal data provided through any of our social network profiles is collected for the purpose of engaging and interacting with you on our social network profiles, with the sole aim of communicating and sharing our values, business and activities. This is not the proper channel to send us complaints, suggestions or claims related to any of our companies; should you decide to do so, we will share the strictly minimum data needed to process your request and enable our customer service department to contact you.

The legal basis for this processing is our legitimate interest in interacting with users who follow our social network profiles, or in responding to you should you mention us in comments, even if you are not a follower. In such cases, the minimum personal data will be used to provide you with a response.

Please be aware that each social network has its own terms of use, which are beyond our control and are not covered by this Policy.

13. Can we change the terms of this Policy?

This Policy may be updated periodically to reflect changes in our personal information practices. Whenever we make changes, we will indicate the date of the update at the beginning of this Policy and post the updated version on our websites and intranet. Where changes significantly affect the processing of your data, we will inform you by appropriate means before they take effect.

14. What are your responsibilities?

You are responsible for the data you provide to us, as well as for its accuracy, updating, validity and authenticity. You are likewise responsible for any third-party data that you provide to us (see section 11).

15. How can you contact us about data protection?

If you have any questions or concerns about our use of your personal information, you can contact our data protection team at privacy@milexia.com.

Milexia Group SAS

5 November 2026