Privacy & cookies

1. Purpose

MUTATEK pays particular attention to the protection of personal data.

For processing related to the MUTATEK website, this policy describes the categories of data that may be processed, the purposes pursued, the applicable legal bases, recipients, retention periods, individuals’ rights and the rules on cookies and other trackers.

It applies to browsing the MUTATEK website, requests sent through its contact form and, for authorised persons, the use of restricted areas and the backoffice.

Additional information may be provided where a particular processing activity requires it.

2. Data controller

Personal data protection contact: contact@mutatek.com.

3. Data that may be processed

Depending on the features actually used, the following categories of data may be processed in particular:

Identification and contact data

  • surname;

  • first name;

  • email address;

  • telephone number;

  • company;

  • job title.

Data provided in exchanges

  • content of a form or message;

  • subject of the request;

  • information voluntarily provided in the context of a professional relationship.

Data relating to the professional relationship

Where necessary:

  • history of exchanges;

  • requests for a quotation or proposal;

  • information necessary to conduct a pre-contractual or contractual relationship.

Technical data

Depending on the architecture actually deployed:

  • IP address;

  • connection date and time;

  • device or browser type;

  • technical events and security logs;

  • information strictly necessary for the website to operate and remain secure.

Restricted access and administration

To manage authorised access, we process the account identifier, identity information necessary for authentication, access rights, session information and events necessary to monitor and secure administration.

Cookies and trackers

Data associated with cookies and other trackers is described in the dedicated section of this policy.

4. Purposes and legal bases

Data may be processed for the following purposes.

Responding to a contact request

Information submitted through the form is used to assess your request and respond to you. This processing is based on our legitimate interest in managing requests and professional exchanges. When you personally request steps necessary to prepare a contract to which you may be a party, the corresponding processing is based on those pre-contractual steps.

Managing client and partner relationships

Purpose: managing exchanges, proposals, services and follow-up of the professional relationship.

Legal basis: performance of a contract or pre-contractual steps for data concerning a person who is or may become a party to the contract; legitimate interest in managing professional exchanges for data concerning contact persons representing a client or partner company, depending on the processing actually carried out.

Managing permissions and securing restricted areas

Managing permissions and securing restricted areas are based on our legitimate interest in reserving these areas for authorised persons, preventing unlawful access and ensuring that administration actions can be traced.

Ensuring website operation and security

Purpose: preventing incidents, detecting anomalies, protecting systems, technical logging and maintaining service availability.

Legal basis: MUTATEK’s legitimate interest in ensuring the security of its digital systems and services.

Complying with legal obligations

Purpose: compliance with accounting, tax, administrative or other applicable obligations.

Legal basis: legal obligation.

Audience measurement and other trackers

Where trackers that are not strictly necessary are actually used, storing or accessing them requires the user’s prior consent, unless an exemption provided by the regulations applies.

5. Mandatory or optional information

Fields identified as mandatory in a form are necessary to process the corresponding request.

If this information is not provided, MUTATEK may be unable to process the request properly.

Other information is optional.

MUTATEK seeks to collect only data that is adequate, relevant and necessary for the purpose pursued.

Please do not use this form to send passwords, sensitive data or confidential information that is not necessary for your request.

6. Recipients

Data is accessible to authorised persons acting on behalf of MUTATEK, within the scope of their responsibilities.

It may also be disclosed to technical service providers acting on behalf of MUTATEK, in particular for:

  • hosting;

  • maintenance;

  • security;

  • email services;

  • tools necessary for the website to operate.

The categories of service providers involved in operating the website include hosting and technical operations, email services used to receive and handle requests, and, where they are actually involved, maintenance and security. Their access is limited to the data necessary for their work.

Data is not sold to third parties.

7. Retention periods

Data is retained for no longer than necessary for the purpose of processing and then, where necessary, archived for the applicable statutory periods.

8. Transfers outside the European Economic Area

If some service providers process data from a country outside the European Economic Area, MUTATEK ensures, where required, that the safeguards provided for by the GDPR are implemented, such as an adequacy decision or standard contractual clauses, together with any necessary supplementary measures.

You can obtain information about these safeguards and, where applicable, request a copy from contact@mutatek.com.

9. Security

MUTATEK implements technical and organisational measures appropriate to the nature of the data, processing and identified risks, in particular to preserve:

  • confidentiality;

  • integrity;

  • availability;

  • traceability;

  • and the resilience of the systems concerned.

As no security measure can guarantee zero risk, MUTATEK adapts its arrangements to changes in uses, risks and technologies.

10. Your rights

Under the conditions provided by applicable regulations, you may in particular have:

  • a right of access;

  • a right to rectification;

  • a right to erasure;

  • a right to restriction of processing;

  • a right to object;

  • a right to data portability, where applicable;

  • the right to withdraw your consent at any time for processing based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

11. Exercising your rights

To exercise your rights or ask a question about the use of your data:

Email address: contact@mutatek.com.

To protect the individuals concerned, proof of identity may be requested only where necessary to verify the requester’s identity.

We respond to your request as soon as possible and, in principle, within one month of receipt. This period may be extended by two months, taking into account the complexity and number of requests. In that case, we inform you of the extension and its reasons within one month of receiving your request.

12. Complaints to a supervisory authority

You may lodge a complaint with a competent supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where you consider that an infringement has occurred.

In France, you may contact the Commission nationale de l’informatique et des libertés (CNIL). We also invite you to contact us to facilitate resolution of your request, without making this a condition of your right to complain.

13. Automated decision-making and profiling

The website processing described in this policy does not involve decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

14. Cookies and other trackers

Principle

A cookie or tracker is a mechanism that may store or access information on a user’s device.

Trackers strictly necessary for the service to operate may be exempt from consent where the legal conditions are met.

Other trackers must not be stored or accessed before the user has given valid consent.

User choices

Where consent is required, the website must allow trackers to be refused as easily as they are accepted.

Users must also be able to withdraw their consent easily and at any time.

Changing your choices

When trackers requiring consent are activated on the public version, an accessible mechanism must allow users to change or withdraw their choices at any time.

15. Changes to the policy

This policy may be amended to reflect changes in processing, features, service providers or the applicable legal framework.

Last updated: 16 September 2026.