Légal
Privacy Policy
MIIP MADE IN IP places great importance on protecting your privacy.
This Privacy Policy explains how and why we process your personal data and provides you with information regarding your rights Data Controller The data controller is MIIP MADE IN IP, a simplified joint stock company (SAS) with a share capital of €600,000, having its registered office at 60 rue Pierre Charron, 75008 Paris, France, and registered with the Paris Trade and Companies Register under number B 399 970 615.
Email: contact@miip.fr – Phone: +33 (0)1 56 59 70 90
MIIP MADE IN IP ensures that all processing of personal data is lawful, based on a valid legal ground, and that personal data are retained only for a reasonable and necessary period corresponding to the purposes for which they were collected, in compliance with applicable laws and limitation periods. What personal data do we process? For what purpose? On what legal basis? For how long?
Do we perform automated decision-making or profiling? No. MIIP MADE IN IP does not make any automated decisions, including profiling, based on your personal data. What are your rights and how can you exercise them? Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Under the EU General Data Protection Regulation (GDPR) No. 2016/679, you have the following rights:
| Category / Type of Data | Purpose of Processing | Legal Basis | Maximum Retention Period |
| CLIENT RELATIONSHIPS | |||
| Title, first and last name, business email address, business phone number, position, title of address, preferred language | Manage information requests, quotes, and meeting scheduling from prospects and clients | Legitimate interest | Retained for the duration of the business relationship; archived when the individual is no longer a contact on any matter; anonymized 3 years after archiving |
| Title, first and last name, business email address, business phone number, position, title of address, preferred language | Manage client and prospect files, contracts, orders, matters, and invoices | Contract performance or pre-contractual measures at the request of the data subject | Retained for the duration of the business relationship; archived when the individual is no longer a contact on any matter; anonymized 3 years after archiving |
| Title, first and last name, business email address, business phone number, position, title of address, preferred language | Manage registrations for events, workshops, training sessions, and newsletters or marketing communications (via MailChimp) | Consent | Until the individual unsubscribes; MailChimp audience deleted 1 week after sending or in case of unsubscription; MailChimp certified under the Data Privacy Framework |
| Title, first and last name, business email address, business phone number | Provide access to the SHERPA IP client platform (login/password) | Consent | Retained for the duration of the business relationship; archived and anonymized 3 years after; access disabled after 3 months of inactivity |
| Connection data (e.g., IP addresses, logs, device identifiers, login credentials, timestamps) | Provide and secure access to the SHERPA IP platform; connection statistics | Legitimate interest | Connection logs retained for 5 years |
| Website data (cookies, trackers, browsing data, analytics, audience measurement) | Produce commercial and website usage statistics | Consent | Analytics cookies retained for 13 months from deposit; Google Analytics server logs kept 2 months; IPs anonymized |
| Data entered by users in free-text fields (emails, messages) | Manage contracts, files, and invoices | Legitimate interest / Legal obligation | Retained for the duration of the business relationship; archived and anonymized after 3 years. Professional rules require case records to be kept for 10 years beyond the end of the relationship (only contact details are archived) |
| Title, first and last name, business email address | Manage contracts, files, and invoices | Legitimate interest | The Code of Ethics for Intellectual Property Attorneys requires that all case records be retained for 10 years after the end of the business relationship. To this end, we do not archive email correspondence related to cases, but only the contact information of the parties involved. |
| Banking details | Manage invoices, credit notes, and reimbursements | Legitimate interest | Retained for the duration of the commercial relationship; then deleted |
| SUPPLIER RELATIONSHIPS | |||
| Title, name, position, business email, business phone | Manage contracts, orders, deliveries, invoices, and payments | Contractual obligation | Retained for the duration of the business relationship; then deleted |
| Title, name, position, business email, business phone | Manage invoices | Legal obligation | Retained for the duration of the business relationship; then deleted |
| Banking details | Manage payments | Legitimate interest | Retained for the duration of the business relationship; then deleted |
| Title, first and last name, business email address | Manage contracts, files, and invoices | Legitimate interest | The Code of Ethics for Intellectual Property Attorneys requires that all case records be retained for 10 years after the end of the business relationship. To this end, we do not archive email correspondence related to cases, but only the contact information of the parties involved. |
| Data you enter in your messages: free-form text field in emails | Manage contracts, files, and invoices | Legitimate interest Legal obligation | The Code of Ethics for Intellectual Property Attorneys requires that all case records be retained for 10 years after the end of the business relationship. To this end, we do not archive email correspondence related to cases, but only the contact information of the parties involved. |
| PERSONNEL MANAGEMENT | |||
| Categories of Personal Data Involved | Purpose(s) | Legal Basis | Retention period |
| Civil status, identification, and image data (name, address, photograph, date and place of birth, social security number) | Application management / Scheduling job interviews | Implementation of pre-contractual measures taken at the request of the person concerned | Unhired candidates: 2 years from the date of the last contact (unless a request for deletion is made or consent is given for a longer period). Hired candidates: length of service with the organization + 5 years from the employee’s departure |
| Last name, First name, Mailing address, Email address, Phone number, Social security number Personal information (e.g., lifestyle, family status, etc.) Professional information (e.g., resume, employment status, education, training, awards, degrees, etc.) Position | Employment contracts, Amendment to the Employment Contract | Legal obligation | 5 years from the employee’s departure |
| Last name and first name; Nationality; Date of birth; Gender; Occupation; Qualifications; Dates of entry into and departure from the establishment; date of authorization for hiring or termination (protected employee) or date of the authorization request; type and serial number of the document serving as a work permit (for foreign workers required to hold a document authorizing them to engage in salaried employment); Type of contract (fixed-term contract, permanent contract, temporary contract, part-time contract, apprenticeship, professional training, as applicable) | Administrative management of personnel (employee records, central employee registry, medical examinations, workplace accidents, internal directory, organizational chart, statistics). Payroll and social security obligations management (salaries/compensation, contributions, tax and social security filings, profit-sharing management). Management of labor relations and employee welfare programs (employee representative bodies, social and cultural programs). | Legal obligation | For the entire duration of the employment relationship, with the following specifics: 5 years (employee records, payroll, contracts, labor inspections, Health, Safety, and Working Conditions Committee [CHSCT], training); 3 years (working hours and social security contributions); 1 year (detailed records of working hours, on-call duty, and compensation). |
| Last name, First name, Mailing address, Social security number Job title, Absence (specifying the reason: paid time off, RTT, sick leave, etc.) Economic and financial information (e.g., income) | DSN (Nominative Social Declaration) filing Social security contribution audit | Legal obligation | Documents related to payroll taxes and the payroll tax: 3 years from the date the DNS is filed |
| Last Name, First Name, Mailing address, Email address, Phone number Economic and financial information | Tax obligations: Preparation of tax returns Bookkeeping, payments | Legal obligation | Preparation of tax returns: statutory limitation period: 10 years from the end of the fiscal year Accounting records and payments: statutory limitation period: 10 years from the end of the fiscal year |
| Last Name, First Name, Mailing Address, Email Address, Social Security Number, Employee ID Personal Information (e.g., lifestyle, family status, etc.) Professional Information (e.g., resume, employment status, education, training, awards, degrees, etc.) Position, Absence (specifying the reason: paid time off, RTT, sick leave, etc.) Economic and financial information (e.g., income, benefits in kind, financial situation, bank account information, etc.) | Preparing payslips | Contractual obligation | Payslip: 50 years or 6 years after the employee’s retirement age |
| Economic and financial information, Last Name, First Name, Bank account information (RIB) | Payroll/compensation transfers, individual allocations, expense reimbursements | Contractual obligation | Throughout the term of the employment contract and until the final settlement of all accounts |
| Last Name, First Name, Title Economic and financial information (e.g., bank information, etc.) Any information listed on invoices (including location) | Reimbursement of Business Expenses / Expense Reports | Legitimate interest | Throughout the term of the employment contract and no later than the date of the final reimbursement of business expenses. |
| Last Name, First Name, Email address, Status, Tenure | Organization of Elections for Employee Representatives | Legal obligation | 5 years from the end of the employment contract |
| Last Name, First Name, Mailing address, Email address, Phone number | Contact employees (e.g., regarding missing documentation, processing final pay) | Legitimate interest | 5 years from the end of the employment contract |
| Last Name, First Name, Mailing address, Email address, Phone number, Social security number Personal information (e.g., marital status, etc.) Job title | Employee enrollment in social security programs (pension, health insurance, life insurance, occupational health, etc.) | Legal obligation | 5 years from the end of the employment contract |
| Last Name, First Name, Mailing address, Email address, Phone number | SWILE meal voucher management | Legal obligation | Throughout the term of the employment contract |
| Last Name, First Name, Email Address Personal Information (e.g., lifestyle, family status, etc.) Job Title, Absence (specify reason: vacation, time off, sick leave, etc.) | Staff scheduling management: # Tracking of work hours on projects, as entered by employees # Tracking of workdays for employees on a fixed-rate contract # Management of on-site schedules and time off | Legal obligation | 5 years from the date the data was collected |
| Last Name, First Name, Mailing address, Email address, Phone number, Social security number, Employee ID Personal information (e.g., lifestyle habits, family status, etc.) Job title, Absences with Reason (vacation, time off, sick leave, etc.) | Reporting of events (illness, maternity leave, workplace accident, return to work, etc.) | Legal obligation | Reporting a work-related accident to the health insurance office: 5 years from the date of reporting |
| Last Name, First Name, Mailing address, Email address, Phone number, Copy of driver’s License | Reporting traffic violations involving a company vehicle | Legal obligation | The time it takes to report the person in question |
| Last Name, First Name, Mailing address, Email address, Phone number, Personal information (e.g., lifestyle, family status, etc.) Professional information (e.g., resume, employment status, education, training, awards, degrees, etc.) Position, Absence (specifying the reason: vacation, time off, sick leave, etc.) Economic and financial information (e.g., income, financial situation, etc.) | Employee performance review | Legal obligation | For the duration of the employment contract for the data itself, and for 5 years after the expiration of the employment contract for the performance review records |
| Last Name, First Name, Mailing address, Email address, Phone number Professional background (e.g., resume, employment status, education, training, awards, degrees, etc.) Economic and financial information (e.g., bank account information, etc.) | School/OPCO billing | Contractual obligation | 10 years from the invoice date |
| Last Name, First Name, Mailing address, Email address, Phone number, Social security number Personal information (e.g., lifestyle, family status, etc.) Professional information (e.g., resume, employment status, education, training, awards, degrees, etc.) | Handling training files, apprenticeship contracts, and professional training contracts | Contractual obligation | For the duration of the contract for the data itself, and for 5 years after the expiration of the employment contract for the training records |
| Last name, first name, address, date and place of birth, Social security number | Training (requests and training sessions conducted, session organization) Assessment of staff knowledge | Legitimate interest | For the entire duration of the employment contract and for at least 5 years—and beyond that for interim archiving purposes |
| Last Name, First Name, Email address, Job title | Parking passes | Contractual obligation | For the entire duration of the subscription |
| Last name, first name, badge number, access zone, job title, date and time of badge scan | Control and restriction of access to the various areas of the buildings in question | Legitimate interest | 3 months |
| Last name, first name, job title, usernames, passwords Login data (IP addresses, logs, device IDs, timestamps, etc.), supplies, equipment | Access to professional IT tools such as a password vault, HR vault, and line-of-business software (including the SHERPA tool), as well as email Monitoring and maintenance of IT equipment Ensuring the security and proper functioning of IT applications and networks | Legitimate interest | Login credentials, supplies, and equipment for the entire duration of the employment contract Sherpa login logs retained for 5 years Emails: The Intellectual Property Attorney’s code of ethics requires that all records be retained for 10 years beyond the end of the business relationship. To this end, we do not archive email exchanges related to cases, but only the contact information of the parties involved. Since employees’ email accounts may continue to receive automatic notifications from government agencies for more than 10 years after the end of the business relationship with the client, email addresses are archived and can no longer send messages; however, they may continue to receive them in order to fulfill this professional obligation. This information is communicated to departing employees. |
| Copy of Identity document | If in doubt, verify the identity of the individuals concerned before responding to requests to exercise their rights | Legal obligation | Deletion after verification |
| Title, Last Name, First Name, Work email address, Job title | Manage contracts, files, and invoices | Legitimate interest | The Code of Ethics for Intellectual Property Attorneys requires that all case records be retained for 10 years after the end of the business relationship. To this end, we do not archive email correspondence related to cases, but only the contact information of the parties involved. |
| Data you enter in your messages: free-form text field in emails | Manage contracts, files, and invoices | Legitimate interest Compliance with a legal obligation | The Code of Ethics for Intellectual Property Attorneys requires that all case records be retained for 10 years after the end of the business relationship. To this end, we do not archive email correspondence related to cases, but only the contact information of the parties involved. |
| Title, Last Name, First Name, Job title | Identify and highlight the employee’s contribution to the drafting of an article / news item | Legitimate interest | Until the publication is removed or upon request by the employee concerned. |
- Right of access – to be informed and obtain access to your personal data;
- Right to rectification – to request correction or updating of inaccurate or incomplete data;
- Right to erasure – to request permanent deletion of your data;
- Right to restriction – to request that we temporarily or permanently stop processing all or part of your data;
- Right to object – to object at any time to processing based on legitimate interest or to direct marketing;
- Right to data portability – to receive your data in a structured electronic format and transfer it to another controller;
- Right not to be subject to automated decision-making, including profiling;
- Right to define the handling of your data after your death (post-mortem directive).