M Mécénat d'Entreprise

Data protection

Privacy policy

Last updated: 17/06/2026.

1. Data controller

The data controller is [TO COMPLETE: company name], [address]. For any question about your data or to exercise your rights: [DPO email / GDPR contact].

2. Data collected

  • Associations (directory registration): name, RNA/SIRET number, purpose and missions, sector, region, website, contact name / email / phone, logo.
  • Companies / HR — direct account: name and email address.
  • Companies / HR — via alumni.space: identity provided by alumni.space (name, email), kept for the session only.
  • Browsing: technical data strictly necessary (session, security). No advertising or third-party tracking cookies.

3. Purposes and legal bases

  • Listing publication and matchmaking: performance of the contract (voluntary registration).
  • Partner link verification and reminder emails: performance of the contract (consideration accepted in the Terms).
  • HR account management and service emails: performance of the contract.
  • Senior matching: consent (revocable opt-in).

4. Recipients and processors

Your data is never sold. It is processed by sub-processors bound by a data processing agreement (DPA): Brevo (Sendinblue SAS, France — emails), OVH SAS (France — hosting). Published listings are by nature visible to all directory visitors.

5. Retention periods

  • Association listing: while the listing is active, then [12] months.
  • HR account: until deletion, then purged within [3] months.
  • Technical logs: [12] months maximum.

6. Your rights

Under the GDPR, you have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent. To exercise them: [DPO email / GDPR contact]. You may also lodge a complaint with the CNIL (www.cnil.fr).