Privacy

Privacy Policy

Last updated: July 2026

Introduction

This privacy policy describes how MEKANO collects, uses, and protects the personal data of visitors to the mekano.one website, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended. We are committed to collecting only the data that is strictly necessary and to processing it fairly and transparently.

Data Controller

The data controller is: MEKANO, SAS with share capital of €1,000 Registered office: 12 rue de la Part-Dieu, 69003 Lyon, France RCS Lyon 106 022 130 Email: contact@mekano.one

Data We Collect

We collect the following data: • Via the contact form: your name, email address, company name (optional), and the content of your message. • Technical data: while you browse, our hosting provider may record connection data (IP address, browser type, pages viewed, timestamp) for security and the proper operation of the website. We do not collect any sensitive data and do not carry out any advertising profiling.

Purposes and Legal Basis

Data collected via the contact form is used solely to respond to your request and manage our relationship. The legal basis is your consent and/or MEKANO's legitimate interest in responding to the enquiries it receives (Article 6 GDPR). Technical connection data is processed on the basis of MEKANO's legitimate interest in ensuring the security and proper operation of the website.

Recipients and Processors

Your data is intended solely for authorised personnel of MEKANO. It is never sold or transferred to third parties for commercial purposes. We rely on the following technical subprocessors, acting on our behalf: • Vercel Inc. (website hosting) • Formspree, Inc. (processing and delivery of messages sent via the contact form) These providers use your data only to provide their service and in accordance with our instructions.

Transfers Outside the European Union

Some of our subprocessors (Vercel and Formspree) are based in the United States. Where your data is transferred outside the European Union, such transfers are governed by appropriate safeguards within the meaning of the GDPR, in particular the standard contractual clauses adopted by the European Commission and, where applicable, certification under the Data Privacy Framework.

Retention Period

Messages received via the contact form are kept for as long as necessary to process your request, and then archived or deleted no later than three (3) years after our last contact, for business follow-up purposes. Technical connection data is kept for a period not exceeding thirteen (13) months.

Your Rights

In accordance with applicable law, you have the following rights over your data: the right of access, rectification, erasure, restriction of processing, objection, and portability, as well as the right to set instructions regarding the fate of your data after your death. You can exercise these rights at any time by writing to contact@mekano.one. We will respond within one (1) month. We may ask you for proof of identity in case of reasonable doubt about your identity.

Security

MEKANO implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure, or alteration, including encryption of communications (HTTPS) and restricting access to authorised personnel only.

Cookies

This website uses only cookies that are strictly necessary for its operation (for example, remembering your language). It does not use any advertising or analytics cookies. To find out more, see our Cookie Policy at /cookies.

Lodging a Complaint with the CNIL

If, after contacting us, you believe that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at https://www.cnil.fr.