Table of Contents
1. Scope of this privacy policy
This privacy policy applies to the personal data processed through the website magnetfab.cerfalunettes.fr, including the home page, the contact page, the “Talk to our expert” pop-up form and the legal pages. It explains, in a clear and transparent way, how MagnetFab collects, uses, stores and protects your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.
This privacy policy does not apply to external websites that may be linked from our pages. We invite you to read the privacy policy of each website you visit.
2. Definitions
In this privacy policy, “personal data” means any information relating to an identified or identifiable natural person, such as a name, an email address or an IP address. “Processing” means any operation performed on personal data, such as collection, recording, storage, consultation or deletion. “You” refers to any visitor of the website or any person who contacts MagnetFab through the website.
3. Privacy policy: data controller
The data controller for the personal data processed on this website is MagnetFab, [to be completed] (legal form and registered office), Grenoble, France. MagnetFab determines the purposes and the means of the processing described in this privacy policy.
For any question about this privacy policy or your personal data, contact us at contact@magnetfab.com. Data protection contact: [to be completed].
4. Personal data we collect
This privacy policy covers the data you choose to send us. We only collect the data you choose to send us through the contact forms of the website:
- identity and professional details: full name, company;
- contact details: email address and, optionally, phone number;
- information about your project: application field and message;
- your consent, and technical data related to the submission (date and time, page, IP address and browser information) kept for security and proof purposes.
Mandatory fields are marked with an asterisk. Without them, we cannot answer your request. Please do not include sensitive personal data (health, political opinions, etc.) in your message: it is not necessary to answer a business request.
When you simply browse the website, the hosting server automatically records technical logs (IP address, date and time, requested page, browser type). These logs are used only to ensure the security and proper operation of the website.
5. Purposes and legal bases
- Answering your request and discussing your micromagnet or MEMS project – legal basis: pre-contractual measures taken at your request and your consent (GDPR art. 6.1.a and 6.1.b).
- Managing our business relationship and following up on prototyping discussions – legal basis: MagnetFab’s legitimate interest in developing its activities (art. 6.1.f).
- Securing the website, keeping technical logs and preventing spam – legal basis: legitimate interest.
- Complying with legal obligations, for example when an authority requests information – legal basis: legal obligation (art. 6.1.c).
Your data is never sold or used for automated decision-making or profiling, and it is never used for purposes other than those described in this privacy policy.
6. Data minimisation and accuracy
In accordance with the principles of the GDPR, MagnetFab only collects the personal data that is adequate, relevant and limited to what is necessary to answer your request. The forms contain only a few mandatory fields. You can ask us at any time to update or correct inaccurate information, and we regularly delete requests that are no longer useful.
7. Retention periods
Messages sent through the forms are recorded in the website database. They are kept for a maximum of three years after our last contact with you, in line with the recommendations of the CNIL for business prospects, then deleted or anonymised. If a contract is signed, data is kept for the duration of the business relationship and the applicable legal limitation periods. Technical server logs are kept for a maximum of twelve months.
Backups of the website, which may contain form submissions, are kept for a limited period and are automatically replaced by newer backups. When a retention period expires, the data is securely deleted from the database and, progressively, from the backups.
8. Recipients and hosting
Your data is only accessible to the authorised MagnetFab team members in charge of business and partnerships, and to our technical subcontractors acting on our instructions: the website hosting provider ([to be completed]) and the web agency maintaining the website, Agence Cerf à Lunettes. These subcontractors are bound by confidentiality and data protection obligations and may not use your data for their own purposes.
9. Transfers outside the European Union
MagnetFab does not transfer your personal data outside the European Union. Fonts are hosted locally on our server, so no data is sent to Google when you browse the website. If a subcontractor ever had to process data outside the European Economic Area, appropriate safeguards such as the standard contractual clauses of the European Commission would be implemented and this privacy policy would be updated.
10. Cookies and local storage
In line with this privacy policy, the MagnetFab website only uses cookies and local storage that are strictly necessary for its operation: security, form submission and pop-up display. According to the CNIL guidelines, these cookies do not require your consent. No audience measurement, social network or advertising cookie is used. If such tools were added in the future, your prior consent would be requested through a consent banner.
11. Security
As part of this privacy policy, we implement appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access or disclosure: encrypted HTTPS connection, restricted and password-protected access to the administration area, spam protection, regular updates of the software and plugins, and regular backups of the website. In the event of a personal data breach likely to result in a risk to your rights, we will notify the CNIL and, where required, the people concerned.
Access to the form submissions stored in the website is limited to a small number of named administrators. Each administrator uses a personal account with a strong password, and access rights are reviewed regularly and removed as soon as they are no longer needed.
12. Minors
The website and its contact forms are intended for professionals. MagnetFab does not knowingly collect personal data from children under 15. If you believe that a minor has sent us personal data, please contact us so that we can delete it as quickly as possible, without keeping any copy.
If you contact us on behalf of your employer, you confirm that you are authorised to share the professional information included in your request, in particular the name of your company and the description of its project.
13. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:
- right of access: obtain confirmation that your data is processed and a copy of it;
- right to rectification: correct inaccurate or incomplete data;
- right to erasure: ask for the deletion of your data;
- right to restriction: temporarily freeze the use of your data;
- right to object to processing based on our legitimate interest;
- right to data portability: receive your data in a structured format;
- right to withdraw your consent at any time, without affecting the lawfulness of prior processing;
- right to define instructions regarding the fate of your data after your death.
14. How to exercise your rights
To exercise these rights, write to contact@magnetfab.com, specifying your request. We may ask you for proof of identity if we have reasonable doubts. We will answer within one month, which may be extended by two months for complex requests; you will then be informed of the extension.
If you consider that your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL, 3 Place de Fontenoy, 75007 Paris, France.
15. Business communications
MagnetFab does not send newsletters or marketing emails through this website. After answering your request, we may occasionally contact you about the follow-up of your project or about closely related MagnetFab services, on the basis of our legitimate interest. You can object to these communications at any time, simply by replying to our email or by writing to contact@magnetfab.com, and we will stop immediately.
Where required by law, your data may also be disclosed to competent authorities, courts or public bodies, only to the extent necessary to comply with a legal obligation or to defend MagnetFab’s rights.
16. Changes to this privacy policy
MagnetFab may update this privacy policy to reflect legal, technical or organisational changes. The version published online is the one that applies, and the date of the latest update is shown below. Significant changes will be highlighted on the website. See also our Legal Notice.
Last updated: September 17, 2026
