Header Placeholder

Privacy Policy

Important notice

Translated versions of contracts and policies are provided for informational purposes only to facilitate understanding of the French version.
The provision of these translations is not intended to create a legally binding agreement, and the translations do not replace the legal validity of the French version.
In the event of any discrepancies or contradictions between the different language versions, the French version shall prevail and be binding in the context of our contractual relationship.

§0 Scope of application

This policy applies to our online presence, including our activities as a seller on marketplaces such as eBay and our website mcpneu.fr, including future features such as customer accounts, newsletters, and an online store. It also covers communication with prospects and customers via email, telephone, and mail. Marketplace operators such as eBay process data under their own responsibility, and their privacy policies apply in addition to this policy.

§1 Data controller and contact details

Responsible: MCPNEU FRANCE SAS, 2, rue Jacques Brel, 44800 Saint-Herblain, France.

Contact for data protection requests: privacy@mcpneu.fr

A data protection officer has not been appointed at this time, as appointment is not required for our current activities. Should this change, we will add the contact details.

§2 Purposes and legal bases of processing

We process personal data for the following purposes:

  • Conclusion and execution of contracts via the eBay platform, order processing, payment collection via eBay, shipping, returns, warranty, legal basis Article 6(1)(b) of the GDPR.
  • Communication and customer service, responding to inquiries, handling complaints, legal basis Article 6(1)(b) and (f) of the GDPR, our legitimate interest is efficient management and adequate support.
  • Compliance with legal obligations, in particular commercial and tax retention obligations, legal basis Article 6(1)(c) of the GDPR.
  • Direct marketing to existing customers within the legal framework, currently without regular newsletters, legal basis Article 6(1)(f) of the GDPR, right to object at any time, see §9.

§3 Categories of data

Depending on the case, we process in particular:

  • Identification data, name, address, contact details,
  • Contract and order data, products purchased, prices, delivery and return data,
  • Communication data, messages via eBay, emails, call notes,
  • Payment status transmitted by eBay for processing; complete payment data is processed by eBay under its own responsibility.
  • No profiling with legal effects is carried out.

§4 Origin of data

We receive personal data:

  • directly from you in the course of our communications, and
  • from eBay as the platform operator, to the extent necessary for order and contract processing.

§5 Recipients and categories of service providers

We transfer data, if necessary, to the following categories of recipients:

  • Logistics and transport for shipping and returns,
  • IT service providers for messaging and system operation, hosting, and support as subcontractors,
  • Tax and accounting advice in connection with legal obligations,
  • Authorities and courts in the event of legal obligations or for the defense of rights.
  • eBay operates the marketplace and checkout on its own responsibility. eBay is independently responsible for the use of the platform and payment processing. Please refer to eBay’s privacy policies for the relevant country.

A current and detailed list of our subcontractors is available on request.

§6 Transfers to third countries

No regular transfers to countries outside the EU and the EEA take place at this time. If we use service providers located in third countries in the future, we will ensure an adequate level of protection, in particular through the EU’s standard contractual clauses and additional measures, Article 46 of the GDPR. We will provide information about such use in an updated version of this policy.

§7 Retention periods

We only store data for as long as is necessary for the purposes indicated, as well as for the statutory retention periods. Commercial and tax documents are generally retained for up to ten years, with the periods running from the end of the relevant calendar year.

§8 Rights of data subjects

You have the right to access, rectify, erase, restrict, and transfer your data, as well as the right to lodge a complaint with a supervisory authority, in accordance with Articles 15 to 20 and 77 of the GDPR. To exercise your rights, please contact the address indicated above.

§9 Right to object, Article 21 of the GDPR

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) of the GDPR. You may also object at any time, without giving any reason, to direct marketing, including profiling related to such marketing.

§10 Mandatory nature of supply

Certain data is required to process a purchase contract. Without this data, it is not possible to place an order, deliver goods, or process complaints.

§11 Automated decisions

No automated individual decision-making, including profiling within the meaning of Article 22 of the GDPR, takes place.

§12 Security

We implement appropriate technical and organizational measures to protect data, including access restrictions, authorization concepts, encryption in transit, and securing system access and media.

§13 Supervisory authority and right to lodge a complaint

You may lodge a complaint with any data protection authority. For our headquarters, the competent authority is the CNIL in France.

§14 Information about the eBay platform

On the eBay platform, cookies and similar technologies may be used by eBay and its partners. eBay is responsible for this processing. You can manage your cookie, advertising, and tracking preferences in your eBay account. Detailed information can be found in eBay’s privacy policy.

Seller profile: mcpneu_sas, seller page: https://www.ebay.fr/str/mcpneufrance

§15 Site web, cookies et outil de gestion du consentement

We use cookies and similar technologies on our website. We distinguish between:

  • Technologies necessary for operation, security, shopping cart, login, consent recording, legal basis Article 6(1)(f) of the GDPR and ePrivacy rules,
  • Comfort and statistics only with consent, e.g., audience measurement, A/B testing, legal basis Article 6(1)(a) of the GDPR,
  • Marketing only with consent, e.g., advertising networks, remarketing, legal basis Article 6(1)(a) of the GDPR.

CMT consent management tool: We use Borlabs Cookie. The tool records your choices, controls the activation of services, and logs consents for evidence purposes. It places a technically necessary borlabs-cookie to remember your preferences, typically stored for up to 6 months. You can change your choices at any time via the “Cookie settings” link at the bottom of the page; withdrawals take effect for the future.

Server logs: When you visit our website, our server automatically processes log data such as your IP address, date and time, URL accessed, referring URL, user agent, and status code. Legal basis: Article 6(1)(f) of the GDPR; our legitimate interest is to ensure the functioning, security, and error analysis of our website. Logs are generally stored for between 7 and 30 days, then deleted or anonymized.

§16 Tag management

We do not currently use any separate tag managers. If a tag manager is used in the future, it will only be loaded after the required consent has been given and will be indicated here.

§17 Integrated content and third-party providers

We integrate external content, such as fonts, maps, videos, or chat widgets. Providers may perform their own processing and place cookies. Where applicable, this content is only loaded after you have given your consent via the consent management tool. Information and links to the providers’ privacy policies can be found in a list of services on this page or in the immediate vicinity of the integration.

§18 Customer account on our website

You can create a customer account. We process mandatory data, such as name, email address, password hash, as well as optional data for account management and security purposes. Legal basis: Article 6(1)(b) of the GDPR. Accounts can be terminated at any time; statutory retention periods remain unaffected.

§19 Newsletter and direct marketing

We only send newsletters after obtaining prior consent using a double opt-in procedure. Legal basis: Article 6(1)(a) of the GDPR. Consent can be withdrawn at any time with future effect via the unsubscribe link. Open and click rates are only measured if you have consented to this. For email marketing to existing customers, processing may be based on Article 6(1)(f) of the GDPR; you can object to this at any time.

§20 Online store, ordering, and payment

For a future store, we process order, delivery, and payment data for the performance of the contract, Article 6(1)(b) of the GDPR. Depending on the payment method, we use payment providers that will be named at checkout, with links to their privacy policies. These include PayPal and Klarna. Fraud prevention and credit checks are only carried out if necessary and if there is an adequate legal basis for doing so.

§21 Presence on social media

When viewing our profiles, for example on Facebook, Instagram, YouTube, or LinkedIn, the terms and conditions of the platforms apply. When Insights are processed jointly with the platform, joint responsibility within the meaning of Article 26 of the GDPR may exist. The platforms provide additional information.

§22 Changes to this policy

We update this policy in the event of changes to our services, processes, or the legal framework. The version published here is the authoritative one.

§23 List of services

Date: 09.10.2025

This list supplements §17. Non-essential services are only loaded after consent via Borlabs Cookie. Technically necessary functions are permitted without consent.

Details of services

Borlabs Cookie
Category: consent, banner. Provider: Borlabs GmbH, Germany. Purpose: to collect and store consent, control the activation of services, evidence. Legal basis: Article 6(1)(c) of the GDPR for evidence retention, Article 6(1)(a) for service activation. Data processed: consent status, timestamp, anonymous identifier. Cookies and duration: borlabs cookie, up to 6 months. Settings: withdrawal via the “Cookie settings” link at the bottom of the page.

Contact Form 7
Category: forms. Provider: Rock Lobster Inc. Purpose: contact form, processing of requests. Legal basis: Article 6(1)(b) and (f) of the GDPR. Data processed: entered content, contact details, timestamp, IP address when sent. Cookies and duration: no own cookies, in combination with hCaptcha. Settings: via the consent tool, Contact page.

hCaptcha
Category: anti-bots, anti-spam. Provider: Intuition Machines, Inc., United States. Purpose: protection against bots, form security. Legal basis: Article 6(1)(f) or Article 6(1)(a). Data processed: interaction data, device and browser, IP address. Cookies and duration: provider-side cookies, duration depending on the provider. Settings: via the consent tool, mention on the form.

WPML
Category: translations. Provider: OnTheGoSystems Limited, Hong Kong. Purpose: language switching, language memorization. Legal basis: Article 6(1)(f) of the GDPR. Data processed: language preference, possible redirection information. Cookies and durations: wp wpml_current_language, _icl_visitor_lang_js, configurable durations. Settings: via the consent tool, language selector.

WP Statistics
Category: local statistics. Provider: VeronaLabs, EU. Purpose: audience measurement without third parties. Legal basis: Article 6(1)(f), possibly (a) if cookies are used. Data processed: abbreviated or hashed IP address, user agent, page views. Cookies and duration: generally no cookies, storage in the WordPress database. Settings: opt out via the consent tool, configuration in the admin panel.

Yoast SEO
Category: SEO. Provider: Yoast B.V., Netherlands. Purpose: server-side or CMS technical SEO functions. Legal basis: Article 6(1)(f) of the GDPR. Data processed: metadata, structured data in HTML. Cookies and duration: no cookies from the extension. Configuration: not required.

WPBakery Page Builder
Category: page builder. Provider: WPBakery, Rain Task Ltd. Purpose: building layouts in the CMS. Legal basis: Article 6(1)(f) of the GDPR. Data processed: no additional personal data. Cookies and duration: no cookies from the extension. Settings: not required.

AccessYes Accessibility Widget
Category: accessibility. Provider: CookieYes Limited, United Kingdom. Purpose: accessibility aids, contrast, font sizes. Legal basis: Article 6(1)(f) of the GDPR. Data processed: locally stored display preferences. Cookies and duration: local storage or session, no tracking. Settings: switch in the widget.

UpdraftPlus
Category: backups. Provider: Updraft WP Software Ltd., United Kingdom. Purpose: website backup. Legal basis: Article 6(1)(f) of the GDPR. Data processed: website and database content, logs. Cookies and duration: no cookies, optional transfer to storage chosen by the publisher, e.g. Drive or S3. Settings: configuration in the admin panel.

WP Fastest Cache
Category: cache and performance. Provider: Emre Vona. Purpose: delivery of static pages, faster loading. Legal basis: Article 6(1)(f) of the GDPR. Data processed: no additional personal data. Cookies and durations: possible cache control cookies for logged-in users or sessions. Settings: settings in the admin area.