Privacy Policy

The controller responsible for processing personal data under the General Data Protection Regulation (GDPR) is:

When you access the website, the hosting provider may automatically process technical information such as your IP address, date and time of access, requested resource, referrer URL, browser, operating system and response status. This processing is needed to deliver the website, maintain stability and security, and investigate misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and efficient operation of the website. Vercel runtime logs are normally retained for one hour under the current Hobby plan, unless longer retention is required to investigate a security incident or comply with law.

Hosting provider: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. Static content may be delivered through Vercel's globally distributed content-delivery network. Website functions currently execute in Vercel's iad1 region in Washington, D.C., United States.

If you contact us through a form or by email, we process the information you provide, including your name, business email, organization, role, message and any selected topic or expert. We use this information to assess and respond to your enquiry.

Where your enquiry concerns a prospective or existing engagement, processing is based on Article 6(1)(b) GDPR. Otherwise it is based on Article 6(1)(f) GDPR and our legitimate interest in responding to professional enquiries and managing business relationships.

We retain correspondence for as long as needed to address the enquiry and, where relevant, for statutory retention periods or the establishment, exercise or defence of legal claims. Routine enquiries that do not lead to a business relationship are deleted after [CONTACT RETENTION PERIOD].

Form submissions are transmitted from the website to MANREAU's shared mailboxes through Microsoft 365 and Microsoft Graph. Microsoft therefore processes the form content and contact details as part of the email delivery service. Confirmation emails are also sent through Microsoft 365.

When you submit a transformation question, we process the question, contextual information, your name, business email, organization, role and your publication choices. We use these details to review the question, request clarification where necessary and decide whether to prepare a MANREAU Answer.

Anonymous editorial publication is based on the permission you provide when submitting the form and, where the submission still constitutes personal data, Article 6(1)(a) GDPR. Attribution is optional and requires separate, explicit confirmation before your identity or organization is published. You may withdraw consent at any time with effect for the future.

Submissions that are not selected are deleted after [EDITORIAL REVIEW RETENTION PERIOD]. Selected questions and the associated editorial record may be retained for the life of the publication and for an appropriate archival period. Do not submit confidential, personal or commercially sensitive information.

Personal data is accessible only to those within MANREAU who need it for the stated purpose and to service providers acting on our instructions, for example hosting, email, form-delivery or IT-support providers. Such processors are contractually bound in accordance with Article 28 GDPR where required.

Current service providers used for website forms include Microsoft 365 and Microsoft Graph for email transmission, Cloudflare Turnstile for automated-abuse prevention, and Upstash Redis for the pseudonymous hourly submission limit.

We disclose data to public authorities, courts or advisers only where required by law or necessary to establish, exercise or defend legal claims. We do not sell personal data.

If a service provider processes personal data outside the European Economic Area, we use a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required. [CONFIRM WHETHER ANY CURRENT PROVIDER INVOLVES A THIRD-COUNTRY TRANSFER.]

Subject to the applicable legal conditions, you have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure or restriction of processing;
• receive data you provided in a portable format where applicable;
• object to processing based on legitimate interests;
• withdraw consent at any time with effect for the future; and
• lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact contact@MANREAU.com. We may need to verify your identity before acting on a request. The competent supervisory authority depends on the verified place of establishment and must be added here: [AUTHORITY, ADDRESS AND WEBSITE].

We apply appropriate technical and organizational safeguards proportionate to the nature and risk of the processing. No method of transmission or storage can guarantee absolute security.

We may update this policy when the website, our processing activities or legal requirements change. The current version and its revision date are published on this page.