Privacy policy

This translation is provided for information only. The French version is legally binding.

Last updated : 15 July 2026

The purpose of this Privacy Policy is to inform site visitors, prospects, beta-test applicants, customers and users of Mon Chai about how their personal data is collected and processed.

It applies to the site accessible at monchai.fr, to the Mon Chai platform and to the exchanges with the Mon Chai team.

1. Treatment Officer

The controller for the treatments described in this policy is:

HALLAIS & BERTHELOT
Company with shares simplified to capital of EUR 1 000
Head Office: 5 rue Pierre-Joseph Colin, 35000 Rennes
Siren: 100,858,547
RCS Rennes: 100 858 547
Sales name: Mon Chai

E-mail: contact@monchai.fr
Tel.: +33 (0)6 76 20 59 67

HALLAIS & BERTHELOT has not appointed a Data Protection Officer. Any questions concerning personal data can be addressed to contact@monchai.fr.

2. Scope

This policy concerns personal data for which HALLAIS & BERTHELOT acts as controller, including data from:

• visitors to the site
• persons using contact forms
• beta-test candidates
• prospects and professional contacts
• customers and users of Mon Chai
• persons exchanging with the assistance service

When operators use Mon Chai to record data relating to their own customers, employees, suppliers or contacts, the operator remains responsible for the processing of this data. HALLAIS & BERTHELOT then acts as a subcontractor, in accordance with the applicable GCUV and contractual commitments.

3. Data collected

Data reported directly

Depending on the forms and services used, Mon Chai can collect:

• First and Last Name
• professional e-mail address
• telephone number
• Professional position
• name of domain or structure
• address of holding
• SIREN or SIRET
• region, designation and professional activity
• size of the holding and number of employees
• information in the forms
• content of requests addressed to Mon Chai
• communication preferences
• information necessary for invoicing

Credit card data is not stored directly by HALLAIS & BERTHELOT. They are processed by the payment provider used by Mon Chai - CMB ARKEA - CITELIS.

Data collected during use of the site or software

Mon Chai can also collect:

• IP address
• date and time of connection
• type of browser and device used
• technical and security journals
• actions in the account
• information on technical errors and incidents
• data on the use of the functionality
• choices expressed regarding cookies

This information shall be used only to the extent necessary for the operation, safety and improvement of the service.

4. Purposes and legal bases

Contact request management

The data are used for:

• respond to requests
• provide information about Mon Chai
• organize an exchange, demonstration or appointment

Treatment is based on pre-contractual measures taken at the request of the person and on the legitimate interest of HALLAIS & BERTHELOT in responding to professional solicitations.

Registration for beta-test

The data are used for:

• receive and consider applications for registration
• verify the existence and professional activity of the structure
• verify eligibility for the programme
• prevent fraudulent or abusive registrations
• create access to Mon Chai
• organise training and support
• collect beta-tester returns

The treatment is based on the pre-contractual measures requested by the candidate as well as on the legitimate interest of HALLAIS & BERTHELOT to secure and organize the beta-test program.

Verification of SIRET

The SIRET number can be compared with information on official public databases to verify:

• the existence of the structure
• its state of activity
• its sector of activity
• consistency of information provided

This verification is based on the legitimate interest of HALLAIS & BERTHELOT in reserving the program to the professionals concerned and in preventing fraudulent use.

Creation and management of accounts

The data are used for:

• create and administer accounts
• authenticate users
• assigning access rights
• provide Mon Chai features
• follow up on subscription
• allow the deletion or the return of data

These treatments are necessary for the performance of the contract with the operator.

Customer support and relationship

The data are used for:

• respond to requests for assistance
• Diagnosis and resolve incidents
• support users
• maintain history of useful exchanges

These treatments are based on the performance of the contract and on HALLAIS & BERTHELOT's legitimate interest in improving the quality of its assistance.

Invoicing and payment

The data are used for:

• Manage subscriptions
• issue invoices
• record payments
• handling any outstanding claims
• meeting accounting and tax obligations

These treatments are based on the performance of the contract and the legal obligations applicable to HALLAIS & BERTHELOT.

Safety and prevention of abuse

Technical data and newspapers can be used to:

• Protecting accounts
• identify unauthorized access attempts
• preventing fraud
• detect anomalies
• ensuring availability and integrity of service
• retain the evidence necessary for an incident

These treatments are based on HALLAIS & BERTHELOT's legitimate interest in securing its services, data and users' services.

Improvement of Mon Chai

User information and returns can be used for:

• identify useful features
• correct errors
• improve ergonomics
• develop new features
• producing internal statistics

Where possible, the data used for this purpose are aggregated or anonymized.

Commercial communications and newsletter

When the person voluntarily subscribes to the newsletter, his or her email address is used to send him or her information about Mon Chai.

This treatment is based on his consent. This consent can be withdrawn at any time through the unsubscribe link present in each message.

Mon Chai may also send its professional customers information about similar or directly related services, on the basis of its legitimate interest, subject to allowing them to object to them simply and free of charge.

5. Mandatory nature of information

Fields marked with an asterisk in the forms are mandatory.

Without this information, Mon Chai may be unable to:

• to respond to a request
• to verify eligibility for the beta-test programme
• create an account
• to provide the services requested
• to properly manage a subscription

Other fields are optional and only allow for a better understanding of the person's needs.

6. Origin of data

Data are collected mainly directly from the data subjects.

Certain professional information may be verified or supplemented from public sources, including official business and establishment registers.

7. Data recipients

The data are only available:

• to the directors and members of the HALLAIS & BERTHELOT
• to persons responsible for support, customer relationship and billing
• technical providers acting on behalf of Mon Chai
• administrative or judicial authorities where a legal obligation imposes

Providers may include, inter alia:

• OVHcloud, for platform hosting and data
• Citélis (Crédit Mutuel de Bretagne), for the processing of payments
• Hubspot and Brevo, for transactional messages,
  management of contacts and forms
• Google Calendar, for the reservation of trainings
• HubSpot, when its tracking code is activated, for measuring site use and monitoring interactions
• Hubspot, subject to the choices expressed regarding cookies

an internal cookie consent management tool

Providers only receive the information necessary to carry out their missions and are subject to confidentiality and security obligations.

8. Transfers outside the European Economic Area

Mon Chai favours providers and infrastructure located in the European Union or the European Economic Area.

Some providers may nevertheless be established or have entities outside that space.

Where data are transferred outside the European Economic Area, HALLAIS & BERTHELOT shall ensure that the transfer is based on a mechanism recognised by the applicable rules, including:

• a decision by the European Commission to adapt
• standard contractual clauses adopted by the European Commission
• appropriate contractual and technical guarantees

9. Shelf life

The data are kept for a period proportionate to their purpose. CNIL recalls that the data cannot be kept indefinitely and that the billing documents must be kept for 10 years.

Contact requests and prospects

The data shall be kept for a maximum period of three years from the last contact of the person.

Beta-test applications accepted

The data are kept for the duration of the program and then, if the person becomes a user or client, during the duration of the contractual relationship.

Beta testing applications refused or abandoned

Information relating to the application shall be kept for six months from the date of the decision or abandonment, in order to manage any disputes and prevent abusive requests.

Where the individual has separately agreed to receive commercial communications, the address of the individual may be retained for three years from the last contact.

User account data

The data shall be kept for the duration of the contractual relationship.

In the event of account deletion or termination, the operational data shall be deleted or returned to the customer within a maximum of 30 days, unless the data have to be retained to meet a legal obligation or to ensure the protection of the rights of HALLAIS & BERTHELOT.

The residual data in the backups shall be deleted during their normal renewal cycle, within a maximum of 12 months.

Accounting documents and invoices

Invoices and accounting documents shall be kept for ten years from the end of the financial year concerned.

Contracts and evidence

Contracts, acceptances of UCLGs and elements necessary for the defence of the company's rights may be archived for the applicable limitation period, usually five years after the end of the contractual relationship.

Requests for assistance

Exchanges with assistance shall be kept for the period necessary for processing the request and, where justified, for a maximum of five years for evidentiary purposes.

Technical and safety journals

The newspapers necessary for the security of the service shall be kept for a maximum of 12 months, except where a longer period is required for the analysis of an incident or for the defence of rights in court.

Commercial prospect

Data used for prospecting purposes may be retained for three years from the date of collection or last contact from the prospect. CNIL recommends this period for prospectors and former customers after the end of the business relationship.

Opposition to prospecting

The information strictly necessary to comply with opposition to prospecting may be kept on a exclusion list for at least three years.

10. Security

HALLAIS & BERTHELOT implements appropriate technical and organisational measures to protect data against:

• Destruction
• loss
• Alteration
• unauthorized disclosure
• Unauthorised access
• any other form of unlawful treatment

These measures include, as appropriate:

• Encryption of communications
• the management of access rights
• Use of secure passwords
• access logging
• backups
• infrastructure supervision
• limiting access to only authorised persons
• incident management procedures

No computer system can guarantee absolute security, HALLAIS & BERTHELOT regularly adapts its protective measures to the identified risks.

11. Human rights

Depending on the legal basis and the circumstances of the treatment, each person may exercise:

• its right of access
• its right to rectification
• its right to erasure
• its right to limitation of treatment
• its right of opposition
• its right to portability, where applicable
• the right to withdraw consent at any time
• its right to define guidelines on the fate of its data after its death

Withdrawal of consent shall not affect the legality of the treatment before such withdrawal.

The request may be addressed to:

contact@monchai.fr

or by mail to:

HALLAIS & BERTHELOT
5 rue Pierre-Joseph Colin
35000 Rennes

The application must specify the subject matter of the right exercised and include the information to identify the person concerned.

Proof of identity may be requested only where there is reasonable doubt as to the identity of the applicant.

HALLAIS & BERTHELOT responds to requests within the time limits provided for by the regulations, in principle within a period of one month.

12. Claim to CNIL

Anyone who considers that his rights are not respected may lodge a complaint with the National Commission on Informatics and Freedoms (CNIL).

The person is nevertheless invited to contact HALLAIS & BERTHELOT in advance so that the company can examine and resolve its request.

13. Automated registration verification

When applying for beta-test, certain information can be verified automatically, including:

• the validity of the SIRET format
• the existence and state of activity of the structure
• the correspondence between the activity declared and the program criteria

This check allows the application to be pre-qualified.

Ambiguous or unrecognised situations may be subject to human verification.

No decision which has legal effects or which significantly affects the person shall be taken solely on the basis of this automated processing.

14. Cookies and other tracers

The site may use cookies or similar technologies.

Cookies strictly necessary

These cookies allow for:

• the technical operation of the site
• Memorizing privacy choices
• secure forms
• authentication
• the retention of a user session

They do not require consent when strictly necessary for the requested service.

Hearing measurement cookies

Cookies can be used to measure site attendance and performance.

Depending on their configuration, they may require user consent. Certain hearing measurement tools may be exempt from consent when they strictly comply with the conditions set by the CNIL.

Cookies related to third party services

Cookies may also be stored by third party services, including when integrating:

• of videos
• Cards
• of external forms
• social media buttons
• d) advertising or campaign monitoring tools

When consent is required, these services are only activated after the user has agreed.

The user can change his choice at any time with the link "Manage My Cookies" accessible from the footer.

The choice of acceptance or refusal can be retained for six months before the user is re-asked. The CNIL currently considers this duration as a good practice.

15. Policy change

This policy may be amended to reflect:

• d − a development of services
• addition or replacement of a provider
• d − regulatory developments
• d) a change in the treatments performed

The last update date is at the top of the page.

If there is a significant change in the user status of Mon Chai, they may be notified by e-mail or by notification in the software.