PRIVACY & CONFIDENTIALITY POLICY COOKIES

• PRESENTATION OF THE PRIVACY POLICY OF MESCENES PRODUCTIONS

The www.mecenus.com solution is published by MESCENES PRODUCTIONS and is dedicated to bringing together structures eligible for sponsorship and sponsors, whether private individuals or professionals. As part of these activities, MESCENES PRODUCTIONS processes users' personal data when they browse or order on the solution. The term "personal data" refers to information that can be used to identify you directly as an individual, such as your surname, first name and address. Other information may also be used to identify you (telephone number, IP address, etc.). European Union regulations, and in particular the General Regulation on the Protection of Personal Data (known as the "RGPD"), provide a framework for the use of your personal data by third parties. The purpose of this privacy policy is to explain what personal data about you is used by MESCENES PRODUCTIONS when you browse our solution, how it is used and what rights you have.

• What data do we process and for what purposes?

In the course of our business activities, we may collect and store personal data on users of the solution and on our consumer and professional customers. The data we process about users of the solution varies according to the type of user. The categories of data and purposes are described below:

• For all users: individuals and businesses?

PURPOSE	DATA	LEGAL BASIS	SHELF LIFE
Manage your registration request.	Your contact details, including: [first name, last name, email, telephone number, structure name,	Execution of pre-contractual or contractual measures.	On the earlier of these two dates: Until you request deletion of your account (in your customer area on the solution in the "Delete my account" tab or at the address given below) or for 3 years from the date of your registration.
Manage your contact requests, reports or complaints about the solution.	Your contact details ([ first name, last name, email, telephone number, structure name) and your request.	Our legal and regulatory obligations.	In the active database: while your request is being processed. In intermediate storage: 3 years from the date of your request.
To enable you to exercise your rights with regard to the protection of personal data.	Your contact details ([first name, last name, email, telephone number, structure name) and your request to exercise your rights.	Our legal and regulatory obligations.	On an active basis: for the time it takes to process the request. In intermediate storage: 3 years from the date of your request to exercise your rights.

• For sponsorship referrers registered on the solution

When you subscribe to a Subscription on behalf of the Structure you legally represent, we collect the following personal data:

PURPOSE	DATA	LEGAL BASIS	SHELF LIFE
Validate your order and your payment and keep a record of this payment in case of difficulties or dispute of the transaction.	Information concerning your payment by credit card via STRIPE or by bank transfer and the amount of your order.	Execution of pre-contractual or contractual measures.	For a maximum period of 13 months for debit cards and 15 months for credit cards.
Execute your order.	Your contact information and order details, including: first name, last name, e-mail address, telephone number, structure name.	Execution of pre-contractual or contractual measures.	3 years after your last order.
Issue an invoice to you.	Your contact information and order details, including: first name, last name, e-mail address, telephone number, structure name.	Our legal and regulatory obligations	6 years after the invoice issue date in the active database (if you still have an active account, otherwise the invoice is archived in the intermediate database). And for a further 1 year in the intermediate archive, as evidence in the event of an administrative inspection or dispute.
Track your order (complaints).	Your contact information and order details, including: first name, last name, e-mail address, telephone number, structure name.	Execution of pre-contractual or contractual measures.	We delete the data concerning the complaint as soon as it has been processed, or we may keep it for 3 years from the date of your complaint, as evidence in the event of a dispute.
Respond to your requests to exercise your right of withdrawal and refund you where appropriate.	Your contact information and order details, including: first name, last name, e-mail address, telephone number, structure name.	Our legal and regulatory obligations.	3 years after your last order.
Communicate this data to an acquirer or prospective acquirer as part of a capital transaction or business sale.	Your contact details and order information.	Our legitimate interest in communicating customer and prospect data to demonstrate that we have an up-to-date and qualified customer database to a prospective acquirer and to enable us to assess the value of that database.	3 years from your last contact or your last order.

• For sponsors who have made donations to the solution for the benefit of structures

When you make a donation on the solution to the organization of your choice, we collect the following data:

PURPOSE	DATA	LEGAL BASIS	SHELF LIFE
Validate your order and your payment and keep a record of this payment in case of difficulties or dispute of the transaction.	Information concerning your payment by credit card via [name of payment module to be requested from your service provider] or by bank transfer and the amount of your order.	Execution of pre-contractual or contractual measures.	For a maximum period of 13 months for debit cards and 15 months for credit cards.
Execute your order.	Your contact information and order details, including: first name, last name, e-mail address, telephone number, structure name.	Execution of pre-contractual or contractual measures.	3 years after your last order.
Issue a tax receipt to your attention to enable you to benefit from a tax reduction.	Your contact information and order details, including: first name, last name, email, telephone number, structure name, nature and amount of your donation.	Our legal and regulatory obligations	6 years after the invoice issue date in the active database (if you still have an active account, otherwise the invoice is archived in the intermediate database). And for a further 1 year in the intermediate archive, as evidence in the event of an administrative inspection or dispute.

Our site only uses cookies that are strictly necessary for its operation (authentication, display configuration, language management, payment security via Stripe). These cookies do not require your consent and are stored for a maximum of 13 months. No advertising or non-exempt audience measurement cookies are used.

• RECIPIENTS OF YOUR PERSONAL DATA

The company MESCENES PRODUCTIONS may transmit your personal data:

• To its personal data subcontractors (in particular its IT hosting service provider or its payment service provider, ...);

• To the authorities (DGCCRF, CNIL, tax authorities, etc.);

• To prospective buyers or transferees of the company in the case of equity transactions, where applicable;

• To a court or counsel in the event of a dispute.

• TRANSFERRING DATA OUTSIDE THE EUROPEAN UNION

MESCENES PRODUCTIONS uses certain third-party tools on the solution, such as FACEBOOK and INSTAGRAM (social networks). As these tools are located in the United States, data may be transferred outside the European Union. These transfers are made on the basis of the DATA PRIVACY FRAMEWORK. To find out more about how these tools use your data, you can consult their privacy policies in the clickable links above.

• YOUR RIGHTS

If you have any questions or complaints regarding the processing of your personal data by MESCENES PRODUCTIONS, please contact us at contact@mecenus.com. You have the right to access, rectify, delete, limit or oppose the processing of your personal data or the right to portability of such data by sending an e-mail. Where the legal basis indicated in article 2 is consent, you also have the right to withdraw your consent at any time. Where the legal basis referred to in Article 2 is based on legitimate interest, you have the right to object if you consider that the following three conditions are not met:

• The legitimate interest must be proven and in accordance with the law;

• Treatment must be necessary, with no less intrusive alternatives to achieve the desired goal;

• An interest assessment must demonstrate that your rights have not been infringed.

Any person whose personal data is collected may define general or specific directives concerning the retention, deletion and communication of his or her personal data after his or her death. You also have the right to lodge a complaint with the CNIL (Commission Nationale Informatique et Libertés) concerning the processing of your personal data by us. https://www.cnil.fr.