Protecting your personal data matters to us. This policy explains what data we collect, why, who it is shared with, how long we keep it, and what your rights are, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the loi Informatique et Libertés (the French Data Protection Act).
1. Data controller
The data controller is the company MARKETING ACCOMPAGNEMENT (SASU), which operates the MAstratos brand, registered with the RCS of Brest under number 995 379 740, whose registered office is at 80 rue Émile Zola, 29820 Guilers (France). For any question about your data, write to contact@mastratos.com.
2. What data do we collect?
2.1. Data you give us
When you fill in the contact form, we collect the data you send us voluntarily: your name, your company (optional), your email address, the nature of your need and the content of your message. No sensitive data (health, opinions and the like) is requested. Mandatory fields are marked with an asterisk.
When you send a form, a summary of your visit is attached to your request: the pages you viewed and how long you spent on each, the resources you downloaded, the page you arrived on and, where applicable, the campaign that brought you here. It helps us understand your need before replying, rather than making you repeat it. This summary is assembled in your browser and is only sent when you click “send”; it is kept from one visit to the next only if you have accepted audience measurement.
2.2. Data collected automatically
Like most websites, our hosting provider may record technical connection data (IP address, browser type, pages viewed, timestamp) for security purposes and to keep the site running properly. Anonymised audience measurement data may be collected, but only after you have given your consent (see the Cookies section). That consent also covers browsing behaviour analysis (areas clicked, scrolling, movement through the page), which we use to spot friction points and improve usability. Anything typed into forms is masked and never recorded.
3. Why do we collect this data?
Your data is used for the following purposes, and no others:
- to answer your request and get back to you about your project;
- to follow up on our business relationship;
- to keep the website secure and running properly;
- to measure and improve the website audience, if you have consented to it.
Your data is never sold or passed on to third parties for marketing purposes.
4. On what legal basis?
Each processing operation rests on a specific legal basis:
- Contact form: your consent, collected when you send the form, together with the publisher’s legitimate interest in answering the requests it receives.
- Visit summary attached to your request: the publisher’s legitimate interest in understanding the context of a request before answering it. You may object at any time (see section 10).
- Technical security data: the publisher’s legitimate interest in protecting its website.
- Audience measurement cookies: your consent.
5. Who has access to your data (recipients and processors)?
Your data is intended solely for the authorised staff of Marketing Accompagnement involved in handling your request. To operate, the website relies on technical processors, contractually bound to comply with the GDPR:
- OVH SAS (website hosting and email routing), located in France. Messages from the form are sent by OVH’s mail server, with no third-party emailing service.
- Google Ireland Limited (Google Analytics 4, audience measurement), only after you have given your consent.
- Microsoft Ireland Operations Limited (Microsoft Clarity, browsing behaviour analysis), only after you have given your consent.
- Hostinger International Limited (hosting of the server, located in France, that runs our customer relationship management tool). Your request and the visit summary attached to it are stored there so that we can follow it up. We install and administer that tool ourselves: its publisher has access to none of your data.
6. Does your data leave the European Union?
The website and the emails are hosted in France (European Union) by OVH, and our customer relationship management tool runs on a server located in France as well. We give priority to providers located in the European Union.
One exception: audience measurement relies on Google Analytics 4, whose parent company Google LLC is established in the United States. That transfer is framed by the EU to US Data Privacy Framework, which Google adheres to, as well as by the European Commission’s standard contractual clauses. This data is only collected after you have given your consent, and your IP address is anonymised. If you decline audience measurement cookies, no data is sent to Google.
The same applies to browsing behaviour analysis, handled by Microsoft Clarity, whose parent company Microsoft Corporation is established in the United States. Microsoft adheres to the EU to US Data Privacy Framework and applies the European Commission’s standard contractual clauses. Here again, nothing is collected or transmitted if you decline audience measurement cookies.
7. How long is it kept?
- Contact form data: for as long as is needed to handle your request, then up to 3 years after our last contact, for business follow-up purposes (the period recommended by the CNIL, the French data protection authority, for B2B prospecting).
- Technical connection data: kept for a limited period by the hosting provider, for security purposes.
- Cookies: see the durations given in the dedicated section.
Once those periods have passed, your data is deleted or anonymised.
8. How is your data kept secure?
We put in place appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encrypted connection (HTTPS), secure hosting, access restricted to authorised staff only. As no system is infallible, we cannot guarantee absolute security, but we undertake to act without delay in the event of an incident.
9. Cookies
A cookie is a small file placed on your device when you visit a website. The mastratos.com website only uses audience measurement cookies, and only after you have given your consent, collected through the banner shown on your first visit. Cookies that are strictly necessary for the website to work do not require consent.
| Type | Purpose | Consent | Duration |
|---|---|---|---|
| Functional | Remember your consent choice | Not required | 6 months |
| Audience measurement | Understand how the site is used (anonymised) | Required | 13 months maximum |
| Browsing analysis | Spot friction points inside the pages (entries masked) | Required | 13 months maximum |
You can change or withdraw your consent at any time, and set your browser to refuse cookies.
10. What are your rights?
Under the GDPR, you have the following rights over your data:
- Right of access: to know what data we hold about you.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure: to ask for your data to be deleted.
- Right to object: to object to processing based on legitimate interest.
- Right to restriction of processing: to ask for a processing operation to be suspended.
- Right to data portability: to receive your data in a readable and reusable format.
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, write to us at contact@mastratos.com. You will receive an answer within one month at the latest. We may ask you for proof of identity in the event of reasonable doubt.
11. Lodging a complaint with the CNIL
If, after contacting us, you consider that your rights are not being respected, you can lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL, the French data protection authority), cnil.fr.
12. Data relating to minors
The mastratos.com website is aimed at professionals and is not intended for minors. We do not knowingly collect data concerning people under the age of 15.
13. Changes to this policy
This privacy policy may be updated to reflect legal or technical developments. The date of the last update appears at the top of the page. We invite you to check it from time to time.