Privacy policy

1. Data controller

The controller of your personal data is:

M. Corp. Finance SRL/BV
Registered office: Bld. Louis Mettewie 312 bte 10, 1080 Brussels, Belgium
Email: info@mcorporation.eu

Data Protection Officer: v.mettewie@mcorporation.eu.

2. Data we collect

• Contact form: your name, company, email address, subject and the content of your message.
• Direct correspondence: the data you choose to share when writing to us.
• Technical data: server connection logs and privacy-friendly, aggregated audience statistics collected without cookies (see section 8).
• Investor area: identity and contact details, agreements, investments, payments, banking details, identification and tax information, authentication logs, devices, IP addresses, audit events, documents and relevant correspondence.

3. Purposes and legal bases

• To respond to your enquiries and manage our correspondence — legal basis: our legitimate interest and/or steps taken at your request.
• To manage relationships with investors and partners and to operate the investor area — legal basis: performance of a contract and/or legitimate interest.
• To ensure the security, proper functioning and audience measurement of the website — legal basis: legitimate interest.
• To comply with our legal and regulatory obligations — legal basis: legal obligation.

4. Recipients

M. Corp. Finance is the controller. Access is limited to its authorised staff and necessary processors: M. Corporation (administrative and technical support), OVHcloud (hosting), Dropbox (document imports), Brevo (email delivery), the configured SMS provider, professional advisers and competent public authorities. Data is never sold.

5. Retention

Operational data, including banking and identification data, is deleted no later than twelve months after the final payment, dispute or other contractual obligation. Tax and accounting records are kept for ten years where legally required. Technical email logs are deleted immediately for one-time codes and secret links, after twelve months for operational mail and after twenty-four months for marketing. A legal hold suspends deletion.

6. International transfers

Services are configured for processing and hosting within the European Union. Any exceptional transfer may occur only with the safeguards required by the GDPR.

7. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw your consent at any time where processing is based on consent. To exercise these rights, please write to info@mcorporation.eu.

You also have the right to lodge a complaint with the Belgian Data Protection Authority — Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels — www.autoriteprotectiondonnees.be.

8. Cookies & audience measurement

The public website uses no advertising or cross-site tracking cookies. Audience measurement is configured without advertising profiling. The investor area uses only storage required for authentication and security.

9. Investor-area security

The investor area is not public: every file is isolated server-side and protected by a password and a second factor. Documents are encrypted at rest, IBAN and BIC are field-encrypted, and email contains only masked banking references.

10. Changes

This privacy policy may be updated to reflect legal or operational changes. The current version is always the one published on this page.

← Back to home