Privacy policy

Last updated: February 2026

1. Data collected and collection methods

We only collect data that is strictly necessary for our processing purposes. Through the access request form on this site, the following data is collected directly from you: - First name - Professional email address - Browser language (automatically detected) No sensitive data within the meaning of Article 9 of the GDPR is collected. This site does not use tracking cookies or behavioural analytics tools.

2. Legal basis for processing

The processing of your personal data is based on the following legal grounds: - Your explicit consent (Article 6.1.a of the GDPR), collected via the checkbox on the contact form - Our legitimate interest (Article 6.1.f of the GDPR) for the proper technical functioning of the site and the security of our information systems

3. Purpose of processing

The data collected is used exclusively for the following purposes: - Processing your access request to the Merlin Omnivision platform - Contacting you regarding your request - Compliance with our legal and administrative obligations Your data is never commercially exploited or shared with third parties.

4. Data retention period

Your data is retained for the period strictly necessary for the purposes described above, and for a maximum of 3 years from your last interaction with our services. At the end of this period, your data is deleted or anonymised, unless a legal obligation requires otherwise.

5. Personal data transfers

Your data is hosted on servers located within the European Union. No data transfers outside the European Economic Area are carried out. Should such a transfer become necessary, it would only be done in compliance with the safeguards provided by the GDPR: - European Commission adequacy decision - Approved standard contractual clauses - Your explicit consent

6. Your rights and how to exercise them

Under the GDPR (Articles 15 to 21), you have the following rights over your personal data: - Right of access: obtain confirmation of data processing and receive a copy - Right to rectification: correct inaccurate or incomplete data - Right to erasure: request deletion of your data under the conditions provided by law - Right to restriction of processing: temporarily restrict the use of your data - Right to data portability: receive your data in a structured, machine-readable format - Right to object: object to the processing of your data on legitimate grounds To exercise these rights, you can contact us: - By email: [DPO email] - By post: [postal address] We are committed to responding to your request within one month. This period may be extended by two months for complex requests. You also have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe that the processing of your data does not comply with applicable regulations.

7. Cookies

This site does not use tracking, profiling or advertising cookies. Only local storage mechanisms (localStorage) strictly necessary for the operation of the site are used, in particular to remember your preferences (display theme, cookie choice). This data remains on your device and is never transmitted to our servers.

8. Contact – Data Protection Officer

For any questions regarding the protection of your personal data or to exercise your rights, you can contact our Data Protection Officer (DPO): - Email: [DPO email] - Address: [postal address] We are committed to handling each request diligently and in compliance with applicable regulations.