Legal

Privacy Policy

How we collect, use, and protect your personal information.

Last updated: 14 March 2025 — Effective date: 14 March 2025

1. Data Controller

mehermsg ("we", "us", "our") is the data controller responsible for your personal data collected through mehermsg.com and any related services. We are based in France and subject to the requirements of the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

Controller contact:
Alix Cherriau — mehermsg
2 Rte de Thizay, 37500 Lerné, France
Email: info@mehermsg.com.com

2. Data We Collect

2.1 Information You Provide Directly

Contact enquiries: name, email address, company name, project description, and any other information you include in contact form submissions.
Communications: content of emails and messages you send to us.

2.2 Information Collected Automatically

Usage data: pages visited, time spent on pages, referring URLs, browser type and version, operating system, and device type.
Technical data: IP address (anonymised where possible), HTTP request logs, and error reports.
Cookies: session and preference cookies as described in our Cookie Policy.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

Consent (Art. 6(1)(a)): where you have given explicit consent, such as accepting non-essential cookies or opting into communications.
Legitimate interests (Art. 6(1)(f)): for website analytics, security monitoring, and fraud prevention, where your interests do not override ours.
Performance of a contract (Art. 6(1)(b)): where processing is necessary to deliver agreed services.
Legal obligation (Art. 6(1)(c)): where we are required to process data by applicable law.

4. How We Use Your Data

To respond to your enquiries and provide quotations for our services.
To deliver contracted development services.
To improve our website content, performance, and user experience.
To monitor website security and prevent fraudulent activity.
To comply with our legal and regulatory obligations.
To send service-related communications where you have requested them.

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

We do not sell, rent, or trade your personal data. We may share data with:

Service providers: trusted third parties who assist us in operating our website (e.g., hosting providers, email delivery services) under strict data processing agreements.
Legal authorities: where required by a court order, applicable law, or to protect the rights and safety of mehermsg or others.
Business transfers: in the event of a merger, acquisition, or sale of assets, subject to continued confidentiality obligations.

Any third party receiving your data is required to maintain at least the same level of data protection that we provide.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Contact form submissions: up to 24 months from the date of submission.
Client project data: for the duration of the project plus up to 5 years, in accordance with French accounting and commercial law.
Website analytics: up to 25 months (anonymised after 13 months).
Server logs: up to 12 months.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15): to obtain a copy of the data we hold about you.
Right to rectification (Art. 16): to request correction of inaccurate or incomplete data.
Right to erasure (Art. 17): to request deletion of your data in certain circumstances.
Right to restriction (Art. 18): to request that we limit our processing of your data.
Right to data portability (Art. 20): to receive your data in a structured, machine-readable format.
Right to object (Art. 21): to object to processing based on legitimate interests.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@mehermsg.com.com. We will respond within 30 days. You also have the right to lodge a complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), at www.cnil.fr.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS), restricted access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Cookies

We use cookies and similar tracking technologies. For full details, please see our Cookie Policy.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will indicate the date of the most recent revision at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

Alix Cherriau — mehermsg
2 Rte de Thizay, 37500 Lerné, France
Email: info@mehermsg.com.com