Legal
Privacy & cookies
How DMC DEFENSE collects, uses and protects your data when you visit this website.
Document details
- Data controller
- DMC DEFENSE
- Contact
- contact@dmc-defense.com
- Last updated
- Complaints (France)
- CNIL (www.cnil.fr) (new tab)
Contents
1. Purpose
This policy explains what personal data DMC DEFENSE collects on this website (dmc-defense.com), why, for how long it is kept, and which cookies are stored on your device, including their retention period.
It applies to the entire site, in all three languages (French, English, Vietnamese), and complements our terms of service without replacing them.
2. Data controller
The controller for data collected on this website is DMC DEFENSE.
- Contact
- contact@dmc-defense.com
- +33 7 43 73 44 48
Company name, legal form, registered office and registration number of the website publisher: see the legal notice (dmc-defense.com/en/mentions-legales).
3. Data we collect
We collect three categories of data:
- Data you provide directly: name, email, company, phone number and message when you fill in the contact form or request a demo.
- Technical connection data, recorded automatically by our server: IP address, requested page, date and time, browser type. The site uses no audience analytics or session recording tool.
- Questions asked to the site assistant (chatbot): the text of your messages and the address of the page you are viewing, sent to Mistral AI to write the answer. Do not enter personal or sensitive data.
- Chat with an advisor (the assistant's « Talk to an advisor » button): your messages, the email address you choose to give, the page you are viewing, your latest questions to the assistant (passed on to the advisor so they do not ask them again) and technical information (browser, language, approximate city derived from the IP address), processed by Crisp. This service only loads if you open it; after that, as long as its cookies are present, it reloads on your next visits to show the advisor's reply.
4. Purposes and legal basis
We process this data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Responding to your contact or demo requests | Pre-contractual measures / contract performance (GDPR art. 6-1-b) |
| Keeping the site running and secure (server logs, preventing abuse of the form and the assistant) | Legitimate interest (GDPR art. 6-1-f): protecting the site and its visitors |
| Answering questions asked to the site assistant (chatbot) | Legitimate interest (GDPR art. 6-1-f): informing visitors who ask |
| Answering messages sent to an advisor (Crisp) | Pre-contractual steps taken at your request (GDPR art. 6-1-b) |
| Complying with our legal obligations and responding to competent authorities | Legal obligation (GDPR art. 6-1-c) |
6. Data retention period
| Data | Retention |
|---|---|
| Contact form data | Kept for 3 years from the last exchange, then deleted or archived in line with legal obligations |
| IP address attached to a contact request | Kept for 90 days for security and abuse-prevention purposes, then deleted automatically |
| Server technical logs (IP address, requested page) | Kept for 14 days, then deleted automatically |
| Site assistant (chatbot) messages | Not stored by DMC DEFENSE; processed by Mistral AI to produce the answer, under Mistral AI's API terms |
| Chats with an advisor (Crisp) | Kept for at most 3 years from the last exchange, then deleted |
| Data required for a legal or contractual obligation (e.g. invoicing) | Kept for the applicable legal duration |
7. Recipients and transfers
Your data is accessible to authorized DMC DEFENSE staff, and to technical processors strictly necessary to operate the site:
| Processor | Role and safeguards |
|---|---|
| OVH SAS (France) | Hosting of the website and of the contact request database, on a server reserved for DMC DEFENSE |
| Resend | Transactional emails (acknowledgements, internal notifications) |
| Mistral AI | Writing the site assistant (chatbot) answers from the site content (France, European Union) |
| Crisp IM SAS (France) | Live chat with a DMC DEFENSE advisor, opened only at your request |
We never sell or rent your personal data to third parties.
8. Data security
As a cybersecurity company, we apply to our own systems the standards we recommend to our clients: encrypted connections (HTTPS/TLS), access restricted to authorized personnel only, and continuous monitoring of our infrastructure.
9. Your rights
Under GDPR, you have the following rights over your personal data:
- Right of access, rectification and erasure of your data
- Right to restriction and objection to processing
- Right to data portability
- Right to set directives regarding your data after your death
To exercise these rights, contact us at contact@dmc-defense.com. You may also lodge a complaint with your national data protection authority (in France, the CNIL: www.cnil.fr (new tab)).
10. Changes to this policy
This policy may be updated to reflect changes to the site or applicable regulation. The last update date appears at the top of this page. We encourage you to review it periodically.