Privacy Policy

MTG AUTO SPORT attaches great importance to the protection of your personal data. This policy explains what data we collect, why, how long we keep it and what your rights are.

1. Data controller

MTG AUTO SPORT, SASU with share capital of €1,000, 60 rue François Ier, 75008 Paris – SIRET 940 282 528 00014.
Contact: mtgautosport@gmail.com – +33 6 21 50 42 23.

2. Data collected

• Identity and contact details : surname, first name, e-mail address, telephone number, postal and billing address.
• Business data : company name, SIREN or SIRET, VAT number, for professional customers and partners.
• Vehicle data : make, model, year, engine, registration number, mileage, ECU reference.
• ECU files : files read from or sent in, which may contain the vehicle identification number (VIN).
• Supporting documents : copy of the vehicle registration certificate and ID document enclosed with ECUs sent in.
• Order and payment data : order history, invoices, MTG Credits balance. Bank card data is processed exclusively by our payment providers.
• Appointment data : date, time and service booked.
• Browsing data : IP address, browser, pages viewed, subject to your consent for non-essential cookies.

3. Purposes and legal bases

Website messaging

When you write to us via the "Write to MTG Auto Sport" bubble, we record your first name, your WhatsApp number, your message, the page you were viewing and the contents of your basket, solely in order to reply to you (via WhatsApp). Legal basis: your consent, given by ticking the box on the form. This data is deleted automatically after 12 months. To save you from re-entering it, your first name and number are also kept in your browser (local storage); you can erase them at any time by clearing the site data in your browser.

Automated assistant

The "Write to MTG Auto Sport" bubble includes an automated assistant (artificial intelligence). The questions you ask it, the page you are viewing and the contents of your basket are sent to our provider Anthropic to generate the reply, then kept for 3 months to improve our answers, before being automatically deleted. Please do not enter any personal data. Legal basis: our legitimate interest in answering visitors' questions quickly.

4. Retention periods

• Customer and order data : 3 years after the last order.
• Invoices and accounting documents : 10 years (legal obligation).
• ECU files : 3 years after the service, to allow support and any restoration to the original software.
• Copies of registration certificate and ID document : for the duration of the service, then deleted no later than 12 months afterwards, unless a dispute is ongoing.
• Contact and quote data : 3 years after the last contact.
• Messages sent via the “Write to MTG Auto Sport” bubble : 12 months, then automatic deletion.
• Conversations with the automated assistant : 3 months, then automatic deletion.
• Customer account : lifetime of the account, then 3 years after the last activity.
• Cookies : 13 months maximum.

5. Recipients

Your data is intended for MTG AUTO SPORT and, as far as they are concerned, its service providers:

• website hosting: Hostinger;
• payment: PayPal, Alma and our card payment provider;
• shipping: Mondial Relay, Chronopost;
• invoicing and accounting: Pennylane;
• digital file downloads: Bunny.net;
• appointment calendar: Google;
• cookie consent management: Complianz;
• automated assistant in the chat bubble: Anthropic (United States).

These service providers act on our instructions. Your data is never sold. It may be disclosed to the competent authorities upon legal request.

6. Transfers outside the European Union

Some service providers may process data outside the European Union. These transfers are governed by appropriate safeguards, in particular an adequacy decision or the European Commission's standard contractual clauses.

7. Security

We implement appropriate technical and organisational measures to protect your data: HTTPS encryption, restricted access, secure download links. Paper supporting documents received with ECUs are kept safe from any unauthorised access.

8. Your rights

In accordance with the GDPR and the French Data Protection Act (Informatique et Libertés), you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to give instructions regarding the fate of your data after your death.

To exercise these rights: mtgautosport@gmail.com. We reply within one month.

You may lodge a complaint with the CNIL: www.cnil.fr – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

9. Cookies

Details of the cookies used and the management of your preferences can be found in our Cookie Policy.

Website audience measurement

To measure website traffic (pages viewed, origin of visits and advertising campaigns, device type, visit duration, links clicked, files downloaded, searches carried out on the site, and approximate location – country, region, city – derived from the IP address at the time of the visit), MTG Auto Sport uses an in-house audience measurement tool, hosted on its own server. The data is anonymous: the IP address is neither stored nor transmitted, no name or e-mail address is associated with it, and only a random identifier is saved in your browser (local storage) to distinguish new visits. This data is used solely to produce traffic statistics for MTG Auto Sport (legitimate interest), is not cross-referenced with other processing or passed on to third parties, and is kept for 13 months at most. In accordance with CNIL recommendations, this tool is exempt from consent. You may object to it at any time: no longer be counted on this browser.

10. Changes

We may amend this policy at any time. The applicable version is the one published on this page, with its update date.