We only collect what we need to answer your enquiry. No advertising, no resale, no advertising trackers on this website.
Data controller
MIRABEAU TRUST, SASU with a share capital of €500, 64 rue Mirabeau, 92160 Antony, France, registered with the Nanterre Trade Register under number 938 112 711, represented by Mr Benjamin Sichet, President. Phone: +33 6 95 91 96 09. Contact: roxane@mirabeau-trust.com.
Data we collect
Through the contact form: name, company, email address, country of establishment of the company, marketplaces used, needs selected and free-text message. Only name and email are mandatory.
During an engagement: the information and documents required for the formalities entrusted to us (articles of association, supporting documents, sales data, tax and EPR identifiers).
Through the client area (case tracking page): your tracking number, the encrypted fingerprint of your password (never the password itself), the date of your last sign-in and the documents you upload there.
Technical data: the hosting provider logs IP addresses and pages visited, for security purposes.
Purposes and legal bases
- Answering your enquiry and preparing a quote: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
- Performing the engagement: performance of a contract (Art. 6(1)(b)).
- Meeting our accounting and tax obligations: legal obligation (Art. 6(1)(c)).
- Securing the website and preventing abuse: legitimate interest (Art. 6(1)(f)).
Recipients
Data is intended for MIRABEAU TRUST. Where strictly necessary it may be shared with our hosting provider OVH SAS (servers located in the European Union), the partner firms acting in the countries covered by your engagement, and the tax authorities or producer responsibility organisations with which we file on your behalf.
Client case tracking and the documents uploaded through the client area are stored on Google Drive and Google Sheets (Google Workspace), in a folder dedicated to each client and accessible only to the MIRABEAU TRUST team. Google acts as a processor within the meaning of Article 28 GDPR; its servers may be located outside the European Union, in which case transfers are covered by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
Your data is never sold, and the information you enter in our forms is not passed on to advertising networks.
Retention
- Enquiries that do not lead to an engagement: 3 years from the last exchange.
- Clients: for the duration of the relationship, then 5 years (civil limitation period).
- Accounting records and invoices: 10 years (Article L.123-22 of the French Commercial Code).
- Technical logs: 1 year maximum.
Cookies and third-party services
Advertising cookies from Google Ads and LinkedIn (Insight Tag) are used only if you click “Accept” in the cookie banner. They let us measure which ads bring visitors who use our simulator or book a diagnostic. Without your consent, nothing is stored. Your choice is kept for 6 months in a cookie named mt_consent, and you can change it at any time with “Manage cookies” at the bottom of each page. The cookies set by Google and LinkedIn are kept for a maximum of 13 months.
Booking a diagnostic opens the Calendly booking service (Calendly LLC, United States), which processes the data you enter there under its own privacy policy and the EU–US Data Privacy Framework.
Fonts are loaded from Google Fonts: your browser therefore sends your IP address to Google, which may process it outside the European Union under the EU–US Data Privacy Framework.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to give instructions regarding its use after your death. To exercise these rights, write to roxane@mirabeau-trust.com or by post to 64 rue Mirabeau, 92160 Antony, France. We reply within one month.
If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority of your country of residence.
Security
The website is served over HTTPS and form submissions are sent by email to a single business address. Access to client files is limited to the people who need it for the engagement. The client area can only be accessed with your tracking number and a personal password that you choose yourself; it is only stored as an encrypted fingerprint that nobody at MIRABEAU TRUST can read. Access is temporarily locked after several wrong attempts and the session closes after a period of inactivity. Uploaded documents are never shared publicly.