Privacy Policy

This Privacy Policy explains how MARINI collects, uses, retains, protects and, where applicable, shares personal data processed in connection with its website, contact forms, quotation requests, customer area, administration area, messaging tools, file upload tools, sketching tools, conversion, preview and CAD/STEP or AI assistance tools.

The website is mainly intended for professionals. MARINI therefore mainly processes data relating to professional contacts: managers, employees, business managers, buyers, engineers, technicians, project managers and representatives of client or prospect companies.

Some technical files submitted to MARINI may not contain personal data but may include confidential industrial information. Such files are covered by the specific confidentiality commitments described below. The website is not intended for minors. Users acting on behalf of a company or organization must be authorized to communicate the data and files submitted to MARINI.

3.1 Identification and contact data

• first name and last name;
• professional email address;
• telephone number;
• position, department or role, where applicable;
• company or organization represented.

3.2 Company data

• company name, SIRET or SIREN number;
• company address, official address, delivery address;
• company verification status;
• public or official data obtained from the recherche-entreprises.api.gouv.fr API.

3.3 Contact form data

• subject and content of the message, date and time of submission;
• technical anti-spam data (honeypot, Cloudflare Turnstile).

3.4 Quotation request data

• project type, sector, part or assembly type;
• intended process, material, thickness, finish, tolerances or constraints indicated;
• quantity, desired lead time, urgency, possible recurrence;
• requester contact details, company, SIRET, delivery address;
• request statuses, pricing information, estimates, prices excluding tax, commercial validation exchanges.

3.5 Technical and industrial files

MARINI may process files submitted by the user (PDF, DXF, DWG, STEP, STP, SLDPRT, images, photos, sketches, ZIP files, generated or converted files) and their metadata: original filename, extension, MIME type, size, SHA-256 hash, antivirus scan status, upload date, association with a request.

The user is invited not to submit unnecessary personal data in technical files.

3.6 Customer area data

When a user submits a quotation request, MARINI may automatically create a customer area associated with the email address provided. Access is mainly provided through a secure login link sent by email and may also rely on a WebAuthn/passkey or login through an external identity provider where those options are enabled.

In that context, MARINI may process profile information, language and notification preferences, company roles, invitations, company memberships, passkey metadata, OAuth account identifiers and, where necessary for authentication, technical tokens provided by Google or Microsoft.

3.7 Drafts, autosaves and uploads before login

Certain information entered in forms may be temporarily retained as a draft, either server-side or in the user's browser, to avoid loss of input or allow a language change without interruption. Files uploaded before login may then be associated with the quotation request and the customer area.

3.8 Messages, attachments and internal notes

MARINI may process messages exchanged, message attachments, internal notes added by MARINI teams, and commercial or technical follow-up data. Internal notes are not necessarily visible to the user but may contain personal data and are therefore covered by this Privacy Policy.

3.9 Authentication, log and security data

• magic link login tokens, reset tokens;
• session tokens, marini_token authentication cookie, email verification date;
• IP addresses, audit events, rate-limiting data, traces of access attempts or abusive uploads.

3.10 CAD, conversion and AI tool data

MARINI may process prompts or descriptions provided by the user, sketch data, technical parameters, generated files and conversion results. These processes are technical aids and do not replace MARINI's human and commercial validation.

Data processed by MARINI may come directly from the user, forms completed on the website, uploaded files, messages sent, the customer area, interactions with MARINI, public or official information relating to a company, or technical tools necessary for website operation, security and traceability.

Fields identified as mandatory in forms are required to handle the relevant request, create or secure the customer area, reply to the user, verify a company, prepare a quotation or comply with a legal obligation. If those details are not provided, MARINI may be unable to process the request, send a login link, analyze a file, produce a quotation or continue the commercial relationship.

Other information, comments, additional files, preferences, project notes or optional technical details are provided at the user's initiative. MARINI recommends limiting this information to what is useful for the technical, commercial or contractual review of the project.

MARINI may use audience measurement, advertising, retargeting, lookalike audience or social media tools, including Google, Meta and LinkedIn. These processing operations are described in the cookies section and are subject, where required, to an appropriate information, objection or consent mechanism.

Files submitted by the user may contain sensitive or confidential information: drawings, dimensions, manufacturing methods, prototypes, specifications, customer references, design data, part photos, CAD files or trade secret information.

MARINI uses these files only to analyze the request, check feasibility, prepare a quotation, manufacture parts if the quotation is accepted, and ensure support, follow-up and legitimate archiving. MARINI does not sell these files and does not voluntarily publish them.

The operational confidentiality applied to submitted files does not constitute a formal confidentiality agreement or NDA. For particularly sensitive projects, the user may contact MARINI before transmission in order to agree, if MARINI accepts, on a suitable channel or arrangements. MARINI does not guarantee that any given channel is suitable for every level of sensitivity or secrecy.

Where generation, conversion, extraction, preview or CAD/STEP assistance features are used, certain data may be processed automatically.

Depending on the feature concerned, information such as prompts, descriptions, sketches, technical parameters, rendered images, extracted text, geometry data or file extracts may be transmitted to OpenAI, only to enable the requested generation, conversion or analysis.

MARINI recommends not including unnecessary personal data, sensitive data, unnecessary industrial secrets or information subject to special restrictions in prompts or files.

AI-generated, converted or preview results are technical aids. They may contain errors and must be checked by MARINI before any manufacturing or contractual commitment. MARINI does not make decisions producing legal effects for the user solely on the basis of fully automated processing without human validation.

Data may be accessed, within the limits of authorization and need-to-know, by sales teams, engineering offices, technical teams, production teams, website administrators, management, technical service providers, hosting provider, transactional email provider, anti-spam or anti-bot provider, conversion or AI provider where applicable, IT maintenance providers, advisors, accountants, lawyers, insurers and competent authorities where required.

Data is, as far as possible, processed and hosted in the European Union or the European Economic Area.

However, certain providers, including Cloudflare, Brevo, OpenAI, Google, Meta, LinkedIn or the Google / Microsoft identity providers, depending on their contractual and technical configuration, may involve processing or transfers from countries located outside the European Union.

Where such transfers exist, MARINI ensures that they are governed by appropriate safeguards, including an adequacy decision of the European Commission where available, standard contractual clauses, UK standard contractual clauses or appropriate additional measures.

Deleting or anonymizing a customer account does not necessarily mean immediate deletion of all data linked to quotations, files, messages or commercial archives if legitimate retention is necessary.

MARINI implements technical and organizational measures intended to protect data and files, including restricted access based on authorizations, authentication of the customer and admin areas, login by secure link sent by email, passkeys where available, HttpOnly authentication cookie, HTTPS, secure server, firewall, application filtering, request limiting, abuse protections, antivirus scanning of uploaded files, server-side encryption of files at rest after processing where configured, signed or time-limited download links where applicable, security event logging and backup measures.

Files may be stored in clear text on the server during a technical window necessary for antivirus scanning, preview generation and encryption at rest. This measure is not end-to-end encryption.

For user experience reasons during public uploads, certain previews of uploaded files or certain generated STEP files may be accessible through a non-public and not easily guessable technical identifier, without full authentication. The user must not share these links and should avoid using this channel for files requiring enhanced confidentiality without prior agreement with MARINI.

Certain transactional emails may contain quotation references, access links or technical attachments where necessary for request follow-up. For the most sensitive files, the user should request a specific channel or agreement before transmission.

As no security measure is absolute, MARINI invites users to submit only the information strictly necessary for the review of their project.

MARINI uses or may use strictly necessary, functional, security, audience measurement, advertising, retargeting or social media trackers. Trackers that are not strictly necessary for the service are subject, where required, to prior consent or an appropriate objection mechanism.

Trackers necessary for website operation, authentication, security or remembering user preferences may be deposited without consent where permitted by law. Advertising, social media or non-essential analytics trackers are managed through the consent or objection mechanism available on the website.

In accordance with applicable regulations, data subjects have, as applicable, the following rights: right of access, right of rectification, right of erasure, right to restriction of processing, right to object, right to data portability, right to withdraw consent where processing is based on consent and right to define instructions regarding the fate of data after death.

These rights may be exercised by writing to: [email protected] or by mail to MARINI — Personal Data — 25 boulevard Robert Schuman, 93190 Livry-Gargan, France.

MARINI may request additional information where necessary to verify the requester's identity or identify the data concerned. MARINI will respond within one month from receipt of the complete request.

The customer area may provide an export or anonymization request feature. These tools facilitate the exercise of rights but do not necessarily replace a complete response to a GDPR request where data is also present in quotations, messages, files, audit logs, invitations, archives or backups.

Certain processing is necessary to handle a quotation request, follow the pre-contractual or contractual relationship, ensure website security, prevent abuse, comply with legal obligations, retain evidence, defend MARINI's rights or manage commercial and accounting archives.

In such cases, MARINI may refuse, limit or defer an objection, deletion or anonymization request, giving reasons where required by applicable regulations. MARINI does not promise absolute and immediate deletion where legitimate or legal grounds require retention.

Visible deletion of a library file or record does not always mean immediate deletion of all technical copies, logs, backups, preview files or attachments linked to a quotation, except where effective deletion is technically and legally possible.

In the event of a personal data breach likely to result in a risk to the rights and freedoms of individuals, MARINI will document the incident, take appropriate corrective measures and, where required by applicable law, notify the CNIL within the applicable time limits and inform the individuals concerned.

If the user considers that their rights have not been respected, they may lodge a complaint with the CNIL: Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy — TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

MARINI may amend this policy to reflect changes to the website, its services, technical tools, processors or applicable law. The last update date is indicated at the beginning of the page.

In the event of any discrepancy between the French version and any translation, the French version shall prevail.