Data controller
The data controller is Misana, whose full contact details appear in the legal notices. For any question regarding your data, please write to contact@misana.com.
Data collected
Misana collects only the data you actively transmit, primarily via the request form, the contact form, or by email. This includes : your first and last name, email address, phone number, preferred language, the nature of your request (service, dates, city, context) and the free-text content of your message. No sensitive data within the meaning of article 9 of the GDPR is requested or required to handle your enquiry.
Purposes and legal bases
Your data is processed to respond to your request, organise and coordinate the service, ensure follow-up of the relationship and, where appropriate, send you communications relating to your file. The legal basis is the performance of pre-contractual measures taken at your request, or the performance of the contract once concluded. Where you give your consent to receive our editorial letter, processing relies on this consent, which can be withdrawn at any time.
Recipients
Your data is accessible only to members of the Misana team who need it to handle your request, as well as to our technical processors acting on our instructions : Supabase Inc. (database hosting, infrastructure in the European Union), Vercel Inc. (web hosting), and a transactional email provider. Your data is never sold, rented or transferred to third parties for commercial purposes.
Transfers outside the European Union
Some of our technical providers are established in the United States, notably Vercel for web hosting. These transfers are governed by the standard contractual clauses adopted by the European Commission, ensuring a level of data protection equivalent to that in force in the European Union.
Retention periods
Data relating to a consultative request without follow-up is kept for thirty-six months from the last contact, for commercial follow-up purposes. Data relating to a service performed is kept for the duration of the contractual relationship, then archived for ten years for accounting and tax purposes in accordance with legal obligations. Subscribers to the editorial letter may unsubscribe at any time ; their contact data is then deleted as soon as possible.
Your rights
In accordance with the GDPR, you have a right of access, rectification, erasure, restriction and portability of your data, as well as a right to object to processing and to withdraw your consent at any time. You may also set instructions concerning the fate of your data after death. To exercise these rights, write to contact@misana.com indicating the subject of your request. A reply will be provided within one month, which may be extended by two months given the complexity of the request.
Complaint to the CNIL
If, after contacting us, you consider that your rights are not respected, you may submit a complaint to the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or via its website www.cnil.fr.
Security
Misana implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure. Access to data is strictly limited to authorised persons, and the transfer of data through the site is encrypted (HTTPS).
Cookies
The use of cookies on the site is governed by a dedicated policy, accessible from the footer.