Available in 7 languages
Global scope
At Calculax (https://calculax.net), we take the protection of your personal data very seriously. This policy explains which data is collected, why, and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) as well as local regulations (CCPA, LGPD, etc.).
Our site is accessible in 7 languages (French, English, Spanish, German, Italian, Portuguese, Chinese). In case of any discrepancy between language versions, the English version shall prevail.
1. Identity of the data controller
Business name: Calculax (website)
Contact email (dedicated DPO): [email protected]
2. What data do we collect and why?
Calculax is built on the principles of data minimization and privacy by design. No health data (weight, height, BMI, calculator results, medical history) is stored on our servers. All calculations are performed locally in your browser (client-side JavaScript).
| Data category | Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| IP address (anonymized, last octet removed) | Security, protection against attacks, anonymous traffic statistics | Legitimate interest (Art. 6(1)(f)) | 6 months |
| Preferred language (via cookie or URL parameter) | Display of the site in the chosen language among 7 languages | Performance of a contract (Art. 6(1)(b)) | 1 year (cookie) |
| Email (if you contact us via [email protected]) | Responding to your inquiries, exercising GDPR rights | Consent (Art. 6(1)(a)) | Duration of the correspondence + 1 year (archiving) |
| Technical cookies (cookie_lang, cookie_consent) | Site functionality, remembering cookie acceptance | Legitimate interest (Art. 6(1)(f)) | 1 year maximum |
3. Cookie management
On your first visit, a banner informs you about the use of essential technical cookies. You can configure your browser to refuse them, but this may affect language selection.
- cookie_lang: saves your language choice among the 7 offered (retention 1 year).
- cookie_consent: remembers that you have accepted the policy (retention 6 months).
- No advertising, social media, or retargeting cookies.
4. Data transfers outside the European Union
Since Calculax is globally accessible, our technical services (hosting, CDN, email) may involve transfers to third countries. We ensure that any transfer is governed by:
- Standard Contractual Clauses (SCC) issued by the European Commission, or
- An adequacy decision (e.g., United Kingdom, Japan, Switzerland).
List of relevant processors:
To obtain a copy of the safeguards, contact [email protected].
5. Your rights (GDPR and local rights)
In accordance with the GDPR, the French “Informatique et Libertés” (Data Protection Act), and applicable laws (CCPA for California, LGPD for Brazil, etc.), you have the following rights:
- Right of access – know what personal data we process about you.
- Right to rectification – correct inaccurate data.
- Right to erasure (“right to be forgotten”) – have your data deleted.
- Right to restriction – restrict processing.
- Right to data portability – receive your data in a structured, commonly used format.
- Right to object – object to processing based on legitimate interest (e.g., IP statistics).
- Right to withdraw consent (for emails).
To exercise these rights, email [email protected] and specify your preferred language and country of residence. We respond within 30 days at most. In case of unjustified refusal, you may lodge a complaint with the CNIL (France) or your local supervisory authority.
6. Data recipients and security
We do not sell, trade, or rent any personal data. Access is strictly limited to:
- The publisher of Calculax (data controller).
- The hosting provider, strictly within its technical duties (logs, maintenance).
- Judicial or administrative authorities upon legally enforceable request.
Security measures implemented:
- TLS encryption (HTTPS) for all communications.
- Systematic anonymization of IP addresses.
- No database containing personal data (minimal storage in server logs).
- Firewall, regular infrastructure updates.
7. Detailed retention periods
- Anonymized IP logs: 6 months.
- Language cookie: 1 year.
- Email correspondence: duration of the exchange + 1 year (archiving for evidentiary purposes).
- Consent cookie: 6 months.
After these periods, data is permanently deleted or anonymized.
8. Country-specific provisions
For any other country, we comply with local data protection laws where they provide a level of protection equivalent to the GDPR.
9. Links to third-party sites
Calculax may contain links to reference sites (WHO, NIH, PubMed, etc.). These sites have their own privacy policies. We assume no responsibility for their practices.
10. Policy updates
We may modify this policy to reflect legal or technical changes. The most current version will always be available on this page with its update date. In the event of a material change, an information banner will be displayed on the site (in the 7 languages).
11. Contact us
For any privacy-related questions or to exercise your rights:
- 📧 Email: [email protected]
We acknowledge requests within 7 business days and provide a definitive response within a maximum of 1 month.