Who is responsible
MVP IT Solution, IT consulting and services (sole proprietorship, SIRET 101 848 224 00016, 4 avenue Robert Emmanuel Brousse, 66100 Perpignan, France), is responsible for the data collected on the mvp-it-solution.fr website and by its internal tools. Full details are in the legal notice. On this page, "I" refers to MVP IT Solution.
For any question about your data or to exercise your rights, write to me through the contact form. I reply within 24 business hours, and in any case within the one month set by the GDPR.
What the website collects
The website requires no account. It only collects personal data in two cases.
The contact and quote form
When you send it, I store what you entered: name, email address, phone number and organization name if provided, organization type, selected needs, urgency, subject, message, and the language of the page.
This information is only used to answer your request and prepare a quote (steps taken at your request before a contract). It is kept for 3 years after our last exchange, then deleted; if we work together, it follows the length of the contract and accounting obligations.
Two emails are sent: an acknowledgement for you and a notification for me. They go through OVHcloud's email service, hosted in the European Union.
Technical logs
Like any web server, the website's server records the IP address, date, requested page and browser of each request. These logs are used for security and troubleshooting (legitimate interest) and are kept for 12 months at most.
Internal tools and Google API data
Outside the website, I use internal tools (scripts and automation agents) that connect to Google APIs through OAuth 2.0. They are not offered to the public: they serve MVP IT Solution and the clients who entrust me with managing their accounts, and only access accounts whose owner has granted permission on Google's consent screen.
Data accessed
Depending on the permissions granted, and only for the accounts concerned:
- Google Ads: account structure, campaigns, ad groups, ads, keywords, budgets, conversion actions and performance statistics. The tools can create and edit campaigns and upload offline conversions.
- Google Tag Manager: containers, tags, triggers, variables and versions, which the tools can create, edit and publish.
- Google Analytics: property configuration (data streams, key events) and aggregated audience reports.
- Data Manager: sending conversions from the client's own management system to the client's Google accounts. Contact identifiers (email address, phone number) are normalized and hashed with SHA-256 before being sent.
- Google Calendar: reading and creating events in the authorized calendar (title, date, location, attendees) to schedule appointments.
How this data is used
This data is only used to perform the tasks requested by the account owner: managing and optimizing campaigns, setting up and checking conversion tracking, producing reports, scheduling appointments. It is never:
- sold, rented or otherwise transferred;
- used to serve advertising, for targeting or to build profiles;
- used to train artificial intelligence models, including when an AI assistant performs a task on the user's behalf;
- used to determine creditworthiness or for lending purposes;
- read by a human, except with the user's consent, for security purposes (investigating abuse), to comply with the law, or once aggregated and anonymized for internal operations.
For a client's accounts, MVP IT Solution acts as a processor: the client remains the controller of its own customers' and prospects' data, and I only process it on the client's instructions.
Storage and security
OAuth tokens are stored on a server administered by MVP IT Solution, in files with restricted access, never in a code repository. All exchanges with Google use encrypted connections (HTTPS). Data accessed is processed on the fly; reports and extracts derived from it are kept for the duration of the engagement, then deleted no later than 3 months after it ends.
Sharing
Google data is only shared with the owner of the account concerned (their reports) and with the technical providers strictly needed to run the tools (hosting, notification messaging, AI assistant), who are bound by confidentiality and may not reuse it. It may also be disclosed when required by law.
Revoking access and deleting your data
You can revoke access at any time from the "Third-party apps & services" page of your Google Account: the tokens stop working immediately and I delete them from the server. To have data already extracted deleted, write to me through the contact form: it is deleted within 30 days.
Limited Use
MVP IT Solution's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Recipients and transfers outside the EU
Your data is neither sold nor rented. Only MVP IT Solution and its technical providers can access it: hosting and email (OVHcloud), and Google for accepted cookies and the internal tools.
Google may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework, under which Google LLC is certified, and by the European Commission's standard contractual clauses.
Your rights
Under the GDPR and the French Data Protection Act, you can:
- access your data and get a copy;
- have it corrected or erased;
- restrict or object to its processing;
- request its portability;
- withdraw consent at any time (cookies, Google access);
- set instructions on what happens to it after your death.
To do so, write to me through the contact form. I reply within one month. If you are not satisfied with the answer, you can lodge a complaint with the CNIL, the French data protection authority.
Changes to this policy
This policy may change, for instance when a tool changes or a new API is used. The date of the last update is shown at the top of the page; any change affecting the use of Google data is announced to the clients concerned before it applies.