Privacy Policy

Preamble

This Privacy Policy is addressed to you in your capacity as a user of the website www.mca-process.com (hereinafter referred to as the “SITE”) and aims to inform you how your personal information may, where applicable, be collected and processed by MCA Process SASU, a single-member simplified joint-stock company, registered with the Trade and Companies Register of Quimper under number 333 600 708, with its registered office at 4 Rue Alice Richard, 29000 Quimper.

Respect for your privacy and your personal data is a priority for MCA Process, which undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of personal data.

In any event, MCA Process undertakes to comply with the following two (2) essential principles:

  • You remain in control of your personal data;
  • Your data is processed in a transparent, confidential, and secure manner.

Article 1. Definitions

  • SITE: refers to the website accessible at www.mcaprocess.com; the SITE includes all web pages, services, and features offered to you as a USER or CUSTOMER via MCA Process;
  • USER: refers to any person who accesses and browses the SITE as an internet user.

Article 2. Identity of the Data Controller

The data controller for the processing of personal data implemented in connection with the operation of the SITE is the company MCA Process.

Article 3. Collection and processing of data

In connection with the operation of the SITE, MCA Process may collect personal data relating to USERS of its SITE. This data is processed in accordance with the purposes specified at the time of collection.

In particular, MCA Process may collect personal data:

  • During your visit to the SITE;
  • When you use features and/or services offered on the SITE;
  • During exchanges with MCA Process via the SITE;
  • When you request to be contacted by MCA Process.

Regardless of the method of collection, MCA Process undertakes to inform you of the purposes of the processing, whether the information requested is mandatory or optional, the possible consequences for it of a failure to respond, the recipients of the data, and the existence and procedures for exercising its rights of access, rectification, and objection to the processing of its data.

Where necessary under Regulation (EU) No. 2016/679 of 27 April 2016, MCA Process undertakes, as applicable, to obtain your consent and/or to allow you to object to the use of your data for certain purposes.

The data that may be collected and processed by MCA Process to achieve the purposes described in Article 4 of this Privacy Policy concerns:

  • Identification data (surname, first names, postal, telephone and email contact details, date of birth, nationality, language, where applicable a copy of the identity card, a copy of an identity document for the purpose of proving the exercise of a right of access, rectification or objection, or to comply with a legal obligation);
  • Connection data (IP addresses, connection logs);
  • Data relating to the selection of individuals to carry out loyalty, prospecting, survey, product testing and promotional actions;
  • Data relating to contributions by individuals who post product reviews, including their username;

Article 4. Purposes of processing

Data collected through use of the SITE is processed in order to meet the purposes described in the table below.

The regulations in force protect users’ privacy and require any data controller to be able to justify a legitimate basis. The regulations therefore provide, among the legal bases for processing:

  • Performance of a contract between the CUSTOMER and MCA Process. Accordingly, certain personal data of the CUSTOMER is necessary in particular to deliver the order and manage the ACCOUNT;
  • The prior consent of the data subject;
  • The legitimate interest of the data controller, while respecting the rights and freedoms of USERS. For example, improving the customer experience or preventing fraud may justify data collection.

Purposes of processing

Statistical, analysis, selection and segmentation operations of CUSTOMERS in order to improve knowledge of CUSTOMERS

Provision of sharing tools on social networks

Sharing information with business partners

What are the justifications?

MCA Process’s legitimate interest

CUSTOMER consent

Performance of the contract concluded between the CUSTOMER and MCA Process and CUSTOMER consent (for prospecting operations)

Article 5. Consent

When browsing the SITE, you complete various forms and provide various personal data about yourself in order to benefit from all the services offered by MCA Process.

By voluntarily providing your personal data, you expressly consent to such data being collected and processed by MCA Process for the purposes made known to you.

Article 6. Data recipients

Only the persons mentioned below may have access to USERS’ data:

Management and the various sales, marketing, administrative, logistics and IT departments of the MCA Process companies, responsible for customer relations, order processing and service support.
Your data is not disclosed, exchanged, sold or rented to any person other than those mentioned above.

Article 7. Data retention period

MCA Process undertakes to ensure that the data collected is kept in a form that allows your identification for a period that does not exceed the time necessary for the purposes for which such data is collected and processed.

With regard to the cookies referred to in Article 9 of this Privacy Policy, it is specified that the information stored in your device (e.g., cookies) or any other element used to identify you for audience measurement statistics purposes is not retained beyond a period of thirteen (13) months. After this period, raw traffic data associated with an identifier is either deleted or anonymized.

Article 8. Your rights regarding your personal data

In accordance with Articles 14 to 22 of Regulation 2016/679 of 27 April 2016, any natural person using the SITE may exercise the following rights:

  • A right of access, rectification and deletion of the data collected;
  • A right to object to the processing of their data;
  • A right to data portability of the data collected;
  • To set out instructions relating to the retention, deletion and disclosure of their personal data after their death, in accordance with Article 40-1 of Law No. 78-17 of 6 January 1978.

If MCA Process detects a personal data breach likely to result in a high risk to the rights and freedoms of USERS, it undertakes to inform the affected USERS as soon as possible.

These rights may be exercised by simple request by email to contact@mca-process.com, or by post to MCA Process: 4 Rue Alice Richard, 29000 Quimper, providing proof of identity and a legitimate reason where required by law.

The USER must attach proof of identity to their request.

To learn more about your rights, you may also consult the website of the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés), accessible at: http://cnil.fr.

Article 9. Connection data and cookies

MCA Process uses connection data (date, time, Internet address, visitor’s computer protocol, page viewed) and cookies (small files saved on your computer) on its SITE, enabling it to identify you, remember your visits, and obtain audience measurement and statistics for the SITE, in particular relating to pages viewed.

By browsing the SITE, you agree that MCA Process installs this type of so-called “technical” cookies, whose sole purpose is to enable or facilitate electronic communication between your device and our website, by facilitating its management and navigation.

Our access to information stored on your device or the recording of information on it will therefore take place only in the following cases:

  • To enable or facilitate electronic communication;
  • Where it is necessary for the provision of our online communication service at your express request.

As with other data, you may exercise your right of access to this connection data by requesting it by email at contact@mca-process.com or by post to MCA Process: 4 Rue Alice Richard, 29000 Quimper, and you must attach proof of identity to your request.

If your browser allows it, you can disable these cookies at any time by following the procedure indicated by your browser.

In addition, MCA Process informs you that it uses Google Analytics services to measure the audience of its SITE. You can refuse to have your browsing on the SITE tracked via the Google Analytics tool by downloading and installing the Google Analytics Opt-out Browser Add-on for your browser, available at: http://tools.google.com/dlpage/gaoptout?hl=fr.

In any event, the information stored on your device (e.g., cookies) or any other element used to identify you for audience measurement statistics purposes is not retained beyond a period of six (6) months. After this period, raw traffic data associated with an identifier is either deleted or anonymized.

Article 10. Social networks

You have the option to click on the icons dedicated to the LINKEDIN and YOUTUBE social networks displayed on the SITE.

As such, the personal information you have indicated as public and accessible from your LINKEDIN and YOUTUBE profiles will be accessible to MCA Process, which the USER expressly authorizes.

However, MCA Process neither creates nor uses any database independent of LINKEDIN and YOUTUBE from the personal information you may publish there, and MCA Process will not use any data relating to your private life through this means.

If you wish to object to MCA Process accessing personal information published in the public area of your profiles or social accounts, you must use the means made available to you by LINKEDIN and YOUTUBE to limit access to your data.

Article 11. Security

As data controller, MCA Process SASU undertakes to take all necessary precautions, in view of the nature of your data and the risks presented by our processing, to preserve data security and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorized third parties (physical protection of premises, customer authentication process with personal and secure access via confidential usernames and passwords, connection logging, encryption of certain data, etc.).