Privacy Policy

Personal Data Protection Policy

1. Our commitment

Within MECALAC, (“MECALAC” means each of the entities of the group, including its subsidiaries), we attach great importance to your privacy and ensure the confidentiality, protection, integrity and security of the personal data you entrust to us through all of our communication channels.

We collect your personal data when using our websites https://www.mecalac.com; https://shop.mecalac.com (hereinafter referred to as the “Sites”), but also when you purchase a MECALAC product, or in various situations described below.

The purpose of this Charter (hereinafter referred to as the “Charter”) is to explain to you which information we collect, for what purposes, how long we keep it, who the recipients are, to whom we transfer it and what protection measures are implemented, in accordance with the General European Regulation on the Protection of Personal Data (GDPR) and the Data Protection and Freedoms Act adopted in France.

1. Definitions

“Personal data” means any information relating to an identified or identifiable natural person, such as his or her name, contact information, sex, social security number, image, biometric or genetic data in accordance with Article 4 GDPR (hereinafter referred to as “Data”).

“Data processing” is defined by any operation carried out on personal data, whether or not it is carried out using automated processes. Processing encompasses everything that can be done with data, such as the collection, registration, retention, modification, extraction, use, transmission, dissemination, erasure or destruction of personal data in accordance with Article 4 GDPR (hereinafter referred to as “processing”).

2. Controller

The person responsible for the processing of your Data within the meaning of the GDPR is:

  • MECALAC France SAS
  • Company by Shares Simplified to share capital of EUR 4568600
  • Registered in the Register of Commerce and Companies of Annecy under number 422 483 214 00017
  • Registered office: MECALAC France SAS, 2 avenue du pré de Challes, CS40230, 74942 ANNECY Cedex, France
  • Email: contact[at]mecalac.com
  • Telephone: +33 (0)4 50 64 01 63

With this Charter, MECALAC undertakes, as Data Controller and within the framework of the processing for which it has determined, the purpose and means to process your personal data with all the care required and exclusively for the purposes for which it was collected, in accordance with the principles of the General Data Protection Regulation of the European Union No.2016/679 (hereinafter “GDPR”) and more broadly with all the legal provisions concerning the protection of personal data in force in France.

3. How do we collect your data and for what purposes?

Your data is collected and used by the different entities of the MECALAC group solely for specific and legitimate purposes and communicated to you.

The purposes for processing your personal data are described and defined at the time of the data collection.

The main purposes for which your Data is collected are as follows.

a. Visit to our Sites

You can use the Sites without providing personal information.

In the event of the use of our Sites for information purposes, we do not process any data, with the exception of the data transmitted by your browser in order to allow the consultation of our Sites and the information transmitted in the context of cookies for the purposes of statistical analysis of the use of the Sites (see below).

We process your Data in order to provide you with technical access to our Sites on the following legal basis:

  • By virtue of legitimate interest, in the event of consultation of our Websites for the purpose of informing you about our products,
  • Under legitimate interest, so that we can ensure the technical provision of the Sites. Our legitimate interest is to be able to provide you with an attractive, technically functional and user-friendly site, take all measures to protect our Sites from cyber security risks, and prevent third parties from being exposed to such risks on our Sites.

In any event, the storage period of the information thus collected is thirteen months from the time of the insertion of the corresponding cookie.

b. Contact form

We process your Data for the purpose of responding to your requests on the legal basis of legitimate interest.

If you contact us via our contact form, you must indicate your last name, first name, country of residence, e-mail address, telephone, subject of contact and send us your message.

The Data is stored with us in order to be able to answer your request and/or your questions, register on a commercial prospecting list and send you commercial offers/communications. We specify that these communications may be sent to you by our distributors.

Your Data is held only for the duration strictly necessary for the proper management of our business relationship, in relation to the products or services you request from us or which you have requested from our distributors. This is to allow follow-up of a quotation and in all cases, for a period not exceeding three years from the last request from you and in the absence of a request for deletion and/or opposition from you during this time.

c. Purchase on the Sites

We process your Data for the purposes of managing your orders on the legal basis of the performance of the contract or pre-contractual measures.

If you wish to make a purchase on our Sites, it will be necessary to provide certain mandatory information, including your title, surname, first name, postal address, country, telephone number and email address, as well as certain financial information (such as your credit card details) allowing for the payment of the products ordered and the processing of your order.

The information provided will be stored on our servers.

Your Data is held for the duration strictly necessary for; the proper management of our business relationship; for the management of our customer relationship via our CRM; the supply of the products or services you request us from us or which you have requested from our distributors; to send you commercial communications; to send you a satisfaction survey; for the management of the operation and optimisation of the online sales service; the provision of a customer service and/or guarantee; the management of outstanding payments; the management of outstanding claims and the processing of any infringements during the period of three years.

d. Subscribe to the newsletter

We process your Data to send you our newsletter on the following legal basis:

  • You may withdraw your consent at any time by sending an email to contact[at]mecalac.com or by calling us at +33 (0)4 50 64 01 63 or by clicking on the unsubscribe link appearing at the end of each newsletter.

You can subscribe to our newsletter within the relevant section by completing your email address, surname, given names, area of activity, profession, country, department, company, telephone, it being specified that telephone and company fields are not mandatory.

We will then regularly send you our newsletter containing news about our products, offers/commercial communications. You may, at any time, unsubscribe and/or ask to stop receiving our newsletter. We specify that these communications may be sent to you by our distributors.

Your Data shall be kept for the duration strictly necessary for the sending of this newsletter and in any event, for a period not exceeding three years from the date of your registration or the last request from you and in the absence of a request for deletion and/or opposition from you during this time by sending an e-mail to contact[at]mecalac.com or by clicking on the unsubscribe link appearing at the end of each newsletter received by email.

e. Organisation of competitions and games

We process your Data for the purposes of managing your participation in the contest on the legal basis that

  • You may withdraw your consent at any time by sending an email to contact[at]mecalac.com or by calling us on +33 (0)4 50 64 01 63.

You can participate in our contests by entering your last name, first name, e-mail address, telephone number on the dedicated form.

The Data is registered with us for the purposes of managing the contest.

Your Data is held for the duration strictly necessary for the proper management of the contest and in any event, for a period not exceeding three years from the last request from you and in the absence of a request for deletion and/or opposition from you in the meantime.

4. Cookies

The User’s consent is formalised upon acceptance of the cookie banner appearing on the homepage. The period of retention of the consent thereby collected is thirteen months from the insertion of the corresponding cookie.

a. What is a cookie?

A cookie is a text file that records information on your device (computer, tablet or mobile) about your browsing on a website (date and time of loading of the pages; navigator used and language; page views, frequency and duration of visits to the site, number of visits, sources of the visit, location).

b. What are cookies used for?

When you connect to the Sites, MECALAC or third-party companies whose services MECALAC uses (technical or advertising partners) may have to install various cookies on your device (computer, tablet or mobile) in order to send you content and services tailored to your interests.

Your device is not in danger with cookies since no virus or malicious programs can be deposited by cookies.

c. What are the types of cookies?

The types of cookies used by MECALAC are:

  • Cookies strictly necessary for the proper functioning of the Sites:
    • These are essential for browsing the Sites and using the basic features requested (language cookies, identification cookies...).
    • If you can block these cookies by configuring your browser, MECALAC would no longer be able to ensure the proper functioning of the Site and guarantee the optimal functioning of the Sites.
  • Functional cookies to improve your user experience: they are there, for example, to record your choices on the Sites.
  • Performance cookies that allow to measure the audience and to establish statistics and volumes of attendance and use of the various elements of the Sites.

Names of cookies used on the Sites:

Name Supplier Purpose Duration Category
visitor_id320841-hash
visitor_id320841		 Pardot Retention of information or access to information already stored on your device, such as advertising identifiers, device identifiers, cookies and similar technologies.
Collection and processing of information related to your use of this service in order to subsequently send you personalised advertisements and/or content in other contexts, for example on other sites or applications. In general, the content of the Sites or the application is used to deduce your interests, which will be useful in the context of subsequent selections of advertising and/or content.		 3 years Preservation and access to information
Customisation
ga
__utmz
__utmt
__utmc
__utmb
__utma
 Google Analytics Retention of information or access to information already stored on your device, such as advertising identifiers, device identifiers, cookies and similar technologies. 14 months Retention and access to information
CAKEPHP_Public
accept_cookies (Appeared when visitor accepts cookies)
mecalac_documentation_pardot_submission (Appears when the visitor downloads documentation)
mecalac_landing_pardot_submission		 Djük Retention of information or access to information already stored on your device, such as advertising identifiers, device identifiers, cookies and similar technologies.
Collection and processing of information related to your use of this service in order to subsequently send you personalised advertisements and/or content in other contexts, for example on other sites or applications. In general, the content of the Sites or the application is used to deduce your interests, which will be useful in the context of subsequent selections of advertising and/or content.		 30 days Retention and access to information
Customisation
d. How do I set these cookies?

You can specify your preferences by going to the cookie banner.

Thus, you can block cookies by activating the setting of your browser allowing you to refuse all or some of the cookies. However, if you choose to block all cookies, you will no longer be able to access all or part of the Sites.

If you are using Google Chrome, follow the instructions on this link or as follows:

  • Choose the Settings menu, then Advanced Settings
  • In the “Privacy and security” section, click Site Settings
  • Find the Cookie menu and select the appropriate options.

If you are using Mozilla Firefox, follow the instructions given on this link or as follows:

  • Choose the Tool menu and then Options
  • Click on the Privacy icon
  • Repair the Cookie menu and select the appropriate options

If you are using Internet Explorer, follow the instructions given on this link or as follows:

  • Choose the Tools menu then Internet Options
  • Click on the Privacy tab
  • Select the desired level using the cursor

If you are using Safari, follow the instructions given on this link or as follows:

  • Choose the Settings menu > Safari,
  • Enable Block all cookies or content blocker option

If you are using Opera, follow the instructions given on this link or as follows:

  • Choose the File menu > Preferences
  • Private life.
5. What categories of data are collected?

We collect only relevant and necessary data.

The personal data that we collect is only the data necessary to achieve the purposes of the treatments implemented. We are committed not to collect more data than necessary.

When you decide to provide us with some of your personal data through the collection forms on our websites the fields to be filled identified by an asterisk are mandatory in that it is the information strictly necessary to access the services to which you wish to subscribe (subscription to newsletters, registration on the Sites, creation of an account for an online order, etc.).

Certain data is automatically collected with your consent, by installing cookies on your device (see article 4 on cookies).

6. Shelf life-Delete

Your Data is deleted as soon as the purpose of its processing has ceased, no longer exists or you request its deletion, or exercise your right of opposition.

Your Data is also deleted upon expiry of the retention periods mentioned, unless it is necessary or legitimate to keep the Data for the signature, performance, or termination of a contract, for the exercise of legal rights or you have given your express consent to keep it.

In particular, it is specified that the personal data may be the subject of intermediate archiving so that we are able to meet our legal, fiscal and accounting obligations, such as the obligation to keep invoices for a period of 10 years.

7. Is your data shared with third parties?

At first, only our employees are required to process your Data. They are obliged to respect the confidentiality of the Data and are regularly trained in data protection and security.

However, in order to fulfil the purposes indicated above, access to your personal data must be allowed to identified third parties whom we use to offer you certain services, i.e.:

  • The entities of the MECALAC group,
  • Technology service providers, IT...
  • The MECALAC Product Distributor who is in charge of your sector,
  • Suppliers and collaborators of services related to the marketing and advertising of our products and services.

The list of the different recipients of your personal data is available by requesting it from: contact[at]mecalac.com

In any event, each transfer of personal data is governed by contractual arrangements, and we require recipients to act only in accordance with our instructions and the law in force, and that they take all necessary technical and organisational measures to ensure the confidentiality, integrity and security of your personal data.

In any event, your personal data will never be sold, shared, disclosed or transferred in any form to an unidentified third party for its own purposes, including commercial or marketing.

8. Data Transfer

The Data collected will not be transferred outside the European Union, unless your area of residence or operation of your activity is outside the European Union.

In the latter case, MECALAC shall take all necessary measures and precautions with its subcontractors and partners in order to guarantee an adequate level of protection of your data to the European regulation (signature of the “standard contractual clauses” of the European Commission or submission to binding internal rules approved by the national authorities etc.).

9. How is the security of your personal data ensured?

MECALAC protects your personal data by putting in place means of physical, legal, technical and organisational security in order to prevent unauthorised access, improper use, disclosure, loss or destruction of your personal data.

Since the Internet is not a completely secure environment, we cannot guarantee, despite the measures we have put in place, the complete security of the personal data transmitted via our Sites. It is your responsibility, when you use our Sites, to ensure that the device you use is adequately secured and protected against malware such as Trojans and viruses.

You are informed that without adequate security measures (examples: secure configuration of your web browser, update of anti-virus programs, firewall software, non-use of software from doubtful sources, etc., you run the risk that the data and passwords you use to protect your data can be disclosed to unauthorised third parties.

We also invite you to carefully choose your password which must be complex and keep it strictly confidential.

10. What rights do you have?

In accordance with the law of 6 January 1978 known as the amended Data Protection and Freedoms Act, and the GDPR, you have the following rights:

  • The right to object, for legitimate reasons, and in the light of your personal situation, against processing of your personal data other than those to which you have consented. In this case, we will cease processing your Data unless the processing is to be continued for legal reasons or for the exercise or defence of our rights in the context of any legal/judicial complaints.

We undertake to take into account your requests to discontinue the processing of your data, except for legitimate and compelling reasons for the processing that would prevail over your rights and freedoms, or for the exercise or defence of rights in court.

  • The right to inform you about the processing of your personal data;
  • The right of access: Subject to certain conditions, you may obtain information about the processing of your data by MECALAC as well as a copy of your personal data being processed;
  • The right to rectify, update or delete all or part of said data. We undertake to process your requests for correction as soon as possible if the personal data we hold about you is inaccurate. We also undertake to process, as soon as possible, requests for partial or total erasure of your data, in accordance with Article 17 of the European Union General Data Protection Regulation (right to be forgotten);
  • The right to withdraw your consent, where the legal basis for processing is your consent.
  • The right to limitation of treatment: We undertake to process your requests for limitation of processing, under the terms of Article 18 of the General Data Protection Regulation of the European Union. In this case, we retain your data but no longer process it except your consent, or for the recognition, exercise or defence of legal rights;
  • The right to portability of your data: We undertake, at your request, to provide you with the personal data you have provided to us in a structured, commonly used and machine-readable format. This right to portability applies only to the data you have provided, where the processing is based on your consent or contract and is carried out using automated processes;
  • The right to “digital death”: In accordance with the Law for a Digital Republic, you can provide us with instructions on the retention, erasure and disclosure of personal data concerning you after your death. These directives may be entrusted to a “digital trusted third party” certified by the CNIL, when they are general, or directly to us when they are specific to processing for which we are responsible. In the absence of a designated person, your heirs will have the opportunity to exercise certain rights, including the right of access, for the purposes of the settlement of the estate, and the right of opposition to proceed with the closure of your accounts.
  • Right to lodge a complaint with a supervisory authority:
    • CNIL (for France)
    • Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (for Germany)
    • The Bureau of the Inspector General for the Protection of Personal Data — GIODO (for Poland)
    • The Information Commissioner’s Office (for the United Kingdom).

In case of difficulty regarding the processing of your personal data that we carry out, we invite you first to contact us. If you believe that your rights have not been respected, you can file a complaint with the CNIL.

You can exercise your rights by contacting us at one of the following addresses:

  • Email: contact[at]mecalac.com
  • By post: MECALAC France sas, 2 avenue du pré de Challes, CS40230, 74942 ANNECY Cedex, France

In order to ensure that your application is dealt with as efficiently as possible, remember to:

  • inform us of the processing related to your request
  • inform us of the right(s) you wish to exercise
  • provide us with a copy of your proof of identity (so that we can verify that the applicant is the person affected by the processing).
11. Amendments and updates to the Charter

By using the Sites, you agree to the collection, use and disclosure of your information in the manner described in this Charter. This Charter reflects the professional practices in force within MECALAC, and can be amended and updated at any time.

We invite you to refer to each new visit to our sites in order to read the latest version available at all times.