Data protection
Privacy policy
This site collects the strict minimum: the information you send us voluntarily through the contact form. No data is sold, rented or transferred for advertising purposes.
1. Data controller
The controller of the data collected on this site is MZ Informatique, whose registered office is at 4 rue de Grammont, 06100 Nice, France.
Contact for any question relating to personal data: dpo@mzmail.fr or 06 52 57 47 69. MZ Informatique is not required to appoint a data protection officer: requests sent to that address are handled directly by the management.
2. Data collected
The site has no user account, no client area and no advertising tracking. Only two categories of data are processed.
2.1 Contact form data
You provide it yourself when writing to us:
- your surname and, where applicable, your first name;
- your email address;
- your telephone number, if you enter it;
- the name of your company or organisation, if you enter it;
- the free text of your message.
Optional fields are marked as such in the form. We ask you not to include in your message any data that is sensitive within the meaning of article 9 of the GDPR, nor any credentials or passwords: they serve no purpose in handling your enquiry.
2.2 Technical log data
Like any web server, the infrastructure temporarily keeps technical logs (IP address, timestamp, page requested, user agent). They are used solely for security, abuse detection and incident diagnosis. They are not used for commercial purposes and are not matched against any profile.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering your request for information or a quote, and beginning the commercial relationship | Performance of pre-contractual measures taken at your request — article 6.1.b of the GDPR |
| Keeping the site secure and preventing abusive automated submissions | Legitimate interest in protecting our information system — article 6.1.f of the GDPR |
| Measuring the site's audience anonymously, without a cookie or an identifier | Legitimate interest — aggregate measurement, with no identification of individuals |
No commercial marketing email is sent on the basis of form data without your prior agreement.
4. Retention period
Messages received through the contact form are kept for three years from the last exchange, then deleted.
Where a contractual relationship begins, the data needed to perform it and to meet our accounting obligations is kept for the applicable statutory period, which is separate from the period above. Technical logs are kept for a maximum of twelve months, in line with the CNIL's recommendation on security logs.
5. Recipients
The data is accessible only to those people at MZ Informatique responsible for handling your enquiry. It is neither sold, nor rented, nor exchanged.
It may be disclosed to an administrative or judicial authority where the law requires it.
6. Processors
We use the following technical suppliers, bound by a processing agreement within the meaning of article 28 of the GDPR:
| Supplier | Role | Location |
|---|---|---|
| OVH SAS | Website hosting. | France (European Union). |
| Cloudflare, Inc. (under consideration) | Web application firewall and content delivery network. | United States, with delivery network in the European Union. |
| Brevo (Sendinblue SAS) | Delivery of the email generated by the contact form. | France (European Union). |
No advertising tool, no social network and no third-party form collection platform is embedded in the site.
7. Transfers outside the European Union
The suppliers named above are established in the United States. Data transfers are governed by the standard contractual clauses adopted by the European Commission and, where applicable, by the suppliers' certification under the EU — US Data Privacy Framework. You may ask us for a copy of the applicable safeguards.
8. Security
The site is served exclusively over HTTPS. The form is protected by server-side validation, an anti-robot mechanism with no tracking cookie and a limit on the number of submissions. Access to the messages received is named and restricted. No form content is stored in a public database or in a third-party collection service.
9. Automated decision-making and profiling
No decision producing legal effects concerning you is taken on the basis of automated processing. No profiling is carried out.
10. Your rights
Under articles 15 to 22 of the GDPR, you have the following rights over the data concerning you:
- Right of access: obtain confirmation that data concerning you is being processed, and receive a copy of it.
- Right to rectification: have inaccurate data corrected or incomplete data completed.
- Right to erasure: obtain the deletion of your data, within the limits set by the GDPR.
- Right to restriction: ask for the processing to be temporarily frozen while a check is carried out.
- Right to object: object to processing based on our legitimate interest, on grounds relating to your particular situation.
- Right to portability: receive your data in a structured, machine-readable format, or have it transmitted to a third party.
You may also give directions as to what happens to your data after your death.
To exercise these rights, write to dpo@mzmail.fr or to MZ Informatique, 4 rue de Grammont, 06100 Nice. We reply within one month of receiving your request. Proof of identity may be requested where there is reasonable doubt about the identity of the person making the request.
11. Complaint to the CNIL
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority:
- CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
- www.cnil.fr
12. Cookies
The site uses no tracking cookie and no personally identifying audience measurement. The details are set out in the cookie policy.
13. Changes to this policy
This policy may be amended to reflect a change to the site or to the applicable rules. The date of the last update appears at the top of the page. The legal notice complements this document.