Marc Duvollet Formation attaches great importance to the protection of your personal data and the respect of your privacy. This privacy policy informs you about how your data is collected and processed, in accordance with the General Data Protection Regulation (GDPR) No. 2016/679 of 27 April 2016.
Data Controller
Marc Duvollet Training
89 avenue de Flandre, 75019 Paris
Telephone: 06 68 58 73 28
Email: marc.duvollet@mdconseil-formation.com
For any questions relating to your personal data, you can contact Marc Duvollet directly at the address above.
Data collected and purposes
We collect personal data in the following situations:
- Contact forms: Name, surname, email, telephone, message — purpose: to respond to your inquiries.
- Registration for a training course: name, surname, email, company, position, contact details — purpose: registration management and educational monitoring.
- Learning Management System (LMS): Connection data, progress, quiz results — purpose: to track your training path.
- Traffic analysis: Anonymized browsing data via Google Analytics — purpose: improvement of the site and training offer.
Legal basis for processing
Depending on the processing activities, we rely on the following legal bases:
- Consent (Article 6.1.a of the GDPR): analytical cookies, sending of commercial communications.
- Execution of a contract (article 6.1.b): management of registrations and educational monitoring.
- Legitimate interest (article 6.1.f): site improvement, security, fraud prevention.
- Legal obligation (Article 6.1.c): Accounting and tax obligations.
Data retention period
Your personal data is kept for the following periods:
- Contact requests: 3 years from the last contact.
- Training data and learners: 5 years after the end of the training (legal obligation linked to QUALIOPI certification).
- Login data (LMS): Duration of access to the platform + 1 year.
- Analytical data: 26 months (Google Analytics setting).
- Accounting documents: 10 years (legal obligation).
Data recipients
Your data is processed only by the following persons and entities, within the limits of their responsibilities:
- Marc Duvollet Training (internal team): training management and customer follow-up.
- MVP IT Solution (technical service provider): application maintenance and hosting — subcontractor within the meaning of the GDPR, bound by a confidentiality agreement.
- OVH Web Cloud (hosting provider): data storage on servers in Germany.
- Google LLC : audience analysis (Google Analytics) — anonymized data.
No data is sold or transferred to third parties for commercial purposes.
Your rights (GDPR)
In accordance with the GDPR and the amended French Data Protection Act, you have the following rights:
- Right of access: obtain a copy of the data concerning you.
- Right of rectification: correct inaccurate or incomplete data.
- Right to erasure: request the deletion of your data («right to be forgotten»).
- Right to limitation: temporarily restrict the use of your data.
- Right to object: you object to the processing for legitimate reasons.
- Right to data portability: receive your data in a structured and machine-readable format.
- Right to withdraw your consent at any time, without affecting previous treatments.
To exercise your rights, contact us at: marc.duvollet@mdconseil-formation.com Please attach a copy of your identity document. We will respond within one month.
If you are not satisfied with the response, you can file a complaint with the CNIL : www.cnil.fr — 3 place de Fontenoy, 75007 Paris.
Transfers outside the European Union
The data is hosted in France by OVH Web Cloud. No transfer of personal data to countries outside the European Union is carried out, with the exception of anonymized data transmitted to Google Analytics (Google LLC, USA), governed by the standard contractual clauses of the European Commission.
Data security
Marc Duvollet Formation implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure: HTTPS connection, password encryption, restricted data access, regular backups.
Cookies
Our website uses cookies. To learn more about the cookies used and how to manage them, please see our Cookie Policy.
Changes to this policy
This privacy policy may be updated at any time to reflect changes in law, regulations, or our practices. The date of the last update is indicated at the bottom of the page. We encourage you to review it regularly.
Last updated: May 2025



