Legal information
Privacy policy
Mensialis Sàrl (hereinafter “Mensialis”) places great importance on respecting your privacy.
For any processing of personal data, Mensialis is committed to protecting the data of its website users in accordance with applicable regulations, in particular the General Data Protection Regulation (“GDPR”), in force since 25 May 2018.
For the purposes of this policy, personal data means any information relating to an identified or identifiable natural person, directly or indirectly.
For all processing carried out, Mensialis acts as data controller within the meaning of the GDPR.
1 / The data we collect
In general, your personal data is not automatically recorded when you browse our site: we do not currently use any advertising cookies or third-party audience measurement tools. For details on the strictly necessary technical cookies used to run the site, see our cookie policy.
When you fill in the contact form available on our site, we collect the data you provide there:
- full name;
- email address;
- company name (optional);
- phone number (optional);
- number of users and type of request (optional, to route your request to the right person); and
- the content of the message you send us.
When you submit the form, we process this information solely to respond to your request — see the purposes in section 2 below.
We also collect your data when you contact us directly through any other channel (for example an email sent directly to our contact address).
Finally, certain technical information is automatically collected in our host’s logs on every visit: IP address, browser and operating system used, pages viewed, and the date and time of the connection. These logs are used for the proper operation, security and technical diagnosis of the site.
2 / Purposes of data collection
We process your personal data solely in order to:
- respond to the request you send us via the contact form or another channel; and
- ensure the proper operation, security and technical diagnosis of the site, based on the technical logs described in section 1.
The contact form is not used for commercial prospecting, sending a newsletter, or any other marketing purpose. Should we process your data for any purpose other than those listed above, we commit to informing you beforehand and, where necessary, obtaining your separate consent.
3 / Legal bases for processing
Responding to your contact request is based on pre-contractual steps taken at your request (Article 6.1.b of the GDPR) or, depending on the content of your message, on our legitimate interest in replying to you. The technical security and diagnostic logs are based on our legitimate interest in ensuring the proper operation and security of the site (Article 6.1.f of the GDPR).
4 / Data recipients
Your data is accessible to Mensialis staff responsible for handling your request, as well as to our strictly necessary technical providers (website hosting, email), acting as processors and on Mensialis’s instructions. A contract is put in place with each processor, and appropriate technical and organisational measures are implemented in accordance with Articles 28 and 32 of the GDPR.
We strive to limit data transfers outside the European Union. Where a transfer outside the EU proves necessary (for example because a technical provider is based there), appropriate safeguards compliant with Chapter V of the GDPR are put in place, such as standard contractual clauses adopted by the European Commission.
5 / Data retention period
Data submitted via the contact form is kept for as long as necessary to process your request, then deleted or archived for a reasonable period allowing us to answer any follow-up questions. If your request leads to a contractual relationship with Mensialis, the data is then kept according to the retention rules specific to that contract. Technical security logs are kept for a limited period, strictly necessary for the site’s diagnosis and security.
6 / Security
Mensialis implements technical and organisational measures suited to the identified risks in order to keep your data secure.
The personal data we collect is stored in a secure environment. Mensialis staff with access to this data are bound to respect the confidentiality of your information.
7 / Rights of data subjects
As a natural person, you have a number of rights regarding your personal data, in particular:
- the right of access: you may request access to your data at any time, as well as a copy of it;
- the right to rectification: you may request at any time that inaccurate or incomplete data be corrected;
- the right to erasure: you may request the deletion of your data when, for example, it is no longer necessary for the purposes for which it was collected or processed;
- the right to restriction of processing: you may ask Mensialis to restrict the processing of your data if, for example, you dispute its accuracy or object to its processing;
- the right to data portability: you have the right to receive your data in a structured, commonly used, machine-readable format, where processing is automated or based on prior consent;
- the right to object: you may object to the processing of your data where it is based on our legitimate interest.
To exercise your rights, please contact us at: contact@mensialis.com
Your request will be processed within one (1) month of confirmation of your identity. You will not have to pay a fee to access your personal data (or to exercise any other right). However, we may charge a reasonable fee if your request is manifestly unfounded or excessive. We may also refuse to act on your request on the same grounds.
We may ask you for this information to confirm your identity and ensure that you are legitimately exercising your right of access (or any other right). This is a security measure intended to prevent your personal data from being disclosed to an unauthorised person.
If you are not satisfied, you may lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD): cnpd.public.lu
8 / Links
Our site may contain hyperlinks to other websites. This policy applies solely to personal data collected via the Mensialis website and to how Mensialis processes it. We are not responsible for the content or privacy practices of any other sites you may visit.
9 / Updates to this policy
We regularly review this policy and may amend, add to or remove parts of it at any time. We will publish any changes on our site before they take effect.