Privacy policy

Data controller

• Maude Druoton — sole trader (entrepreneur individuel, EI)
• 8 allée des Vignes, 78160 Marly-le-Roi, France
• contact@mde-expertise.com

No data protection officer has been appointed: the activity does not fall within the cases listed in Article 37 GDPR.

Data collected

Two channels collect personal data.

The contact form
Name, email address, role and organisation, message content.

The self-assessment questionnaire
Your answers to the 25 questions, together with the contact details you provide to receive your analysis.

For site security and to prevent automated submissions, your IP address and the time of submission are processed when the form is sent, in order to limit the number of submissions per visitor. That data is not written to any database and does not appear in the message we receive.

No other personal data is collected.

Purposes and legal bases

Contact form: to answer your enquiry and, where relevant, prepare a proposal. Legal basis: steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR.

Self-assessment questionnaire: to produce and send you the personal analysis you requested. Legal basis: Article 6(1)(b) GDPR.

Site security: legitimate interest in preventing abuse, Article 6(1)(f) GDPR.

Your data is never sold, shared or passed to third parties for marketing.

Automated decision-making

The questionnaire calculates an indicative score from your answers. That score only supports an analysis written by hand. No decision producing legal effects or similarly significantly affecting you is taken on a solely automated basis within the meaning of Article 22 GDPR.

Retention periods

Contact and assessment data: three years from our last exchange, in line with the French data protection authority's guidance on B2B prospecting.

Technical security data: twelve months maximum.

You may request earlier deletion at any time.

Recipients and processors

Your data is processed by Maude Druoton and by the following technical providers, strictly within the GDPR framework:

• Vercel Inc. — 440 N Barranca Ave #4133, Covina, CA 91723, United States. Site hosting and execution of the function that handles contact form submissions. Data hosted in the United States.
• Typeform SL — Via Augusta 29-31, 08006 Barcelona, Spain. Provision and hosting of the self-assessment questionnaire, and storage of your answers. Provider established in the European Union.
• Plus Five Five, Inc. (Resend service) — 2261 Market Street #5039, San Francisco, CA 94114, United States. Delivery of the email generated by the contact form. According to this provider's data processing agreement, its processing operations take place primarily in the United States.
• OVH SAS — 2 rue Kellermann, 59100 Roubaix, France. Hosting of the contact@mde-expertise.com mailbox, which receives and stores messages sent through the form. Data hosted in France.

Transfers outside the European Union

Two providers process data outside the European Union: Vercel Inc. and Plus Five Five, Inc. (Resend service), both established in the United States.

These transfers are governed by the Standard Contractual Clauses adopted by the European Commission, incorporated into the data processing agreement concluded with each of these providers.

Cookies

This site sets no analytics, profiling or advertising cookies.

The self-assessment questionnaire is provided by a third party that sets cookies and other trackers on your device. It loads only after you explicitly ask for it: until then, nothing from that provider is requested and no cookie is set. No preference is stored, so the request is renewed on each visit.

Your rights

You have the right to access, rectify, erase, restrict processing of and port your data, the right to object, and the right to give instructions on what happens to your data after your death.

To exercise these rights: contact@mde-expertise.com. You will receive a reply within one month, extendable by two months for complex requests.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.