Last Updated: December 19th, 2025
1. Introduction
Mellonne (“Mellonne”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, subscribe to our communications, or use our products and services, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
This policy applies to all users of the Mellonne website and related services.
2. Data Controller
The data controller responsible for processing your personal data is:
Mellonne
11 rue La Boétie, 75008 Paris, France
📧 Email: contact@mellonne.com
📞 Phone: +33 9 72 15 34 82
3. Personal Data We Collect
Depending on how you interact with Mellonne, we may collect and process the following categories of personal data:
3.1 Identity and Contact Data
- First name
Last name
Email address
Company name
Telephone number (if provided)
3.2 Technical Data
- IP address
Browser type and version
Device and operating system information
Usage data related to your interaction with our website
3.3 Marketing and Communications Data
- Newsletter subscription preferences
Consent records
Interaction data with our communications (e.g. email opens or clicks)
We do not collect special categories of personal data (such as health, biometric, or sensitive personal information).
4. How We Use Your Personal Data
We only process personal data when permitted by applicable law. Your data may be used for the following purposes:
To provide and manage our services
Including responding to inquiries, delivering content, and managing customer relationships.To send communications
Such as newsletters, product updates, certification insights, and security-related information, when you have provided explicit consent.To improve our website and services
Through analytics, performance monitoring, and user experience improvements.To comply with legal and regulatory obligations
Including accounting, security, and compliance requirements.
5. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
Consent (Article 6(1)(a) GDPR)
For newsletter subscriptions and marketing communications.Contractual necessity (Article 6(1)(b) GDPR)
When processing is required to fulfill a contract or pre-contractual request.Legitimate interests (Article 6(1)(f) GDPR)
For website security, service improvement, and business operations, provided these interests do not override your fundamental rights.Legal obligation (Article 6(1)(c) GDPR)
When required by applicable laws or regulations.
6. Newsletter and Marketing Communications
6.1 Purpose
Mellonne offers a newsletter to share product updates, certification insights, security-related information, and expert content related to secure testing and compliance. Communications are sent on an occasional basis, only when relevant.
6.2 Data Collected
When subscribing to the newsletter, we collect:
First name
Last name
Email address
Company name
6.3. Legal Basis
Newsletter processing is based on explicit consent.
Subscription requires a clear opt-in action and acceptance of this Privacy Policy.
You may withdraw your consent at any time.
6.4 Technical Data
Newsletter communications are managed using Brevo, acting as a data processor on behalf of Mellonne.
Brevo processes personal data in accordance with GDPR and applies appropriate safeguards, including Standard Contractual Clauses where applicable.
6.5 Technical Data
Newsletter emails may include tracking technologies (e.g. tracking pixels or link tracking) to measure:
Email delivery
Open rates
Click interactions
These metrics are used solely to improve content relevance and are not used for profiling or automated decision-making.
6.6 Technical Data
Newsletter data is retained for as long as you remain subscribed.
Upon unsubscription:
Your data is removed from active mailing lists
Technical logs may be retained for a limited period for compliance purposes
6.7 Technical Data
You may unsubscribe at any time via:
The “unsubscribe” link included in every email
Contacting Mellonne directly
Requests are processed without delay.
7. Cookies
Mellonne uses cookies and similar technologies to ensure proper website functionality and improve user experience.
Cookies may be used to:
Enable core website features
Analyze website usage
Improve performance and content relevance
You can manage or disable cookies through your browser settings or via our cookie management tool.
For more information, please refer to our Cookie Policy.
8. Data Sharing
We do not sell or rent your personal data.
Your data may be shared only with:
Service providers (e.g. hosting, analytics, email services) acting under contractual obligations
Legal authorities, where required by law
Business partners, in the event of a merger, acquisition, or restructuring
All third parties are required to protect your data in accordance with GDPR.
9. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), Mellonne ensures appropriate safeguards are in place, including:
Transfers to countries recognized as providing adequate protection
Standard Contractual Clauses approved by the European Commission
10. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
Once retention is no longer necessary, data is securely deleted or anonymized.
11. Your Rights Under GDPR
You have the right to:
Access your personal data
Rectify inaccurate or incomplete data
Request erasure (“right to be forgotten”)
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time
To exercise your rights, please contact us using the details below.
12. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or alteration.
However, no method of transmission over the internet is entirely secure.
13. Contact and Complaints
For any questions regarding this Privacy Policy or your personal data, please contact:
You also have the right to lodge a complaint with your local Data Protection Authority.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page and, where appropriate, communicated to users.