Home » Privacy Policy and Cookie Management

Privacy Policy and Cookie Management

This page describes the personal data collected by the website mafr.fr, the purposes for which it is collected, how long it is retained, and the rights available to each visitor, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

Data Controller

The data controller is MAFR Conseil, 63, rue de la Faisanderie, 75116 Paris, represented by Marie-Anne Frison-Roche, Publication Director. For any questions relating to personal data, please contact: mafr@mafr.fr.

What Data Is Collected, and Why

Browsing the Website

Consulting the website’s pages does not require registration and does not involve the collection of any directly identifying personal data. The server records technical logs (IP address, pages viewed, browser, date and time), which are necessary for the operation and security of the website. Their retention is based on the publisher’s legitimate interest; they are not used to identify visitors.

Messages Received by Email

When a person writes to the email address stated in the legal notice and repeated above regarding the website or its content, their name, email address and the content of their message are collected, together with any information they choose to provide. These data are used solely for the purpose of replying to them. Their processing is based on the legitimate interest in responding to enquiries received.

Audience Measurement

The website uses Google Analytics 4 to measure traffic to its pages: pages viewed, source of traffic, device type and duration of visits. IP addresses are anonymised before processing and no directly identifying personal data are transmitted to Google. These measurements are activated only with the visitor’s consent, given through the cookie banner (see below).

Embedded Content

Some pages display videos hosted on YouTube (MAFR TV) or content from other websites (LinkedIn, publishers). Once activated, such content may collect data as though the visitor were directly accessing the website on which it is hosted; it is loaded only after the visitor has given consent.

Newsletters

The website does not collect any email addresses for the purpose of sending newsletters. Marie-Anne Frison-Roche’s newsletters (Law, Compliance, Regulation; Surplomb; Droit & Art) are distributed through LinkedIn, where subscriptions are governed by LinkedIn’s own rules.

Who Has Access to the Data

The data are accessible to Marie-Anne Frison-Roche and to persons authorised by her, as well as to the website’s technical service providers (hosting provider, developer), solely for maintenance and improvement purposes and subject to confidentiality obligations. The data are neither sold nor transferred to third parties. They may be disclosed to public authorities where required by law. Audience measurement data are processed by Google Ireland Limited, subject to the safeguards provided for by the GDPR in relation to transfers outside the European Union.

How Long the Data Are Retained

  • Messages received by email concerning the website: three years after the last exchange
  • Server technical logs: no more than twelve months
  • Audience measurement data: no more than fourteen months, after which only anonymous statistics are retained
  • Choice expressed through the cookie banner: six months

Your Rights

Each visitor has, in relation to personal data concerning them, the right of access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to give instructions concerning the handling of their data after their death. They may withdraw at any time the consent given for cookies.

These rights may be exercised by email at mafr@mafr.fr or by post to MAFR Conseil, 63, rue de la Faisanderie, 75116 Paris. Proof of identity may be requested if the request does not make it possible to identify its author with certainty. Requests are handled free of charge within one month of receipt; this period may be extended to three months if the request is complex or if several requests have been submitted, in which case the person concerned will be informed. In the event of any difficulty, a complaint may be lodged with the French Data Protection Authority (Commission nationale de l’informatique et des libertés — CNIL), www.cnil.fr.

Cookies

What Is a Cookie?

A cookie is a small file placed on the visitor’s device by the website being accessed. It makes it possible to recognise the device during subsequent visits; it does not identify the visitor by name.

Cookies Used by mafr.fr

  • Technical cookies, which are necessary for the operation of the website (display language, security, storage of the choice made through the cookie banner): these do not require consent.
  • Audience measurement cookies (Google Analytics 4): placed only after consent has been given.
  • Third-party content cookies (YouTube, LinkedIn): placed only when the visitor activates the content, after giving consent.

Consent

On the first visit, a banner allows visitors to accept, refuse or customise cookies that are not strictly necessary. Their choice is retained for six months and may be changed at any time via the “Cookie Management” link in the footer. Refusing cookies does not prevent access to the website.

Browser Settings

Each visitor may also block or delete cookies through their browser settings (Chrome, Firefox, Safari, Edge); some website functions may then no longer be available.

Updates

This policy may be amended to reflect changes to the website or developments in the law; the date on which it was last updated is shown below.

Last updated: September 2026.