Foreword

Why this policy?

At MAGMA, personal data protection comes first!

This policy tells you how we process your personal data. Rest assured, we comply with the 1978 FrenchData Protection Act and the EU regulation dated 27 April 2016 (hereinafter“GDPR”) when collecting and processing your data.

What is personal data?

When using the Magma solution (hereinafter the “Solution”) and/or the website at the address www.magma.app (hereinafter the “Site”), we might ask you to send us your personal data to be able to use our services. The term“personal data” refers to all data used to identify you as an individual.

What personal data is collected by Magma?

Through our services, we are required to collect a certain amount of information about you, specifically: your full name, company name, data about your professional activity, city, telephone number, email address and login details.

This data might be collected when you use the Solution and/or our Site or when you use our Services.

Who is the data controller?

We are the data controller. We have appointed a data protection officer for this purpose. You can contact them at the following email address: privacy@magma.app.

Policy

1. Use of your personal data

On what legal basis is your personal data collected and used?

Why is your personal data collected and used?

You can always refuse to provide us with your data, we will then inform you of the possible consequences of this refusal where such data is mandatory.

2. Recipients of collected data

The following will have access to your personal data:
(i) Our team,
(ii) Services responsible for verification (specifically the statutory auditor),
(iii) Our subcontractors,

Plus public organizations, court officers (bailiffs, notaries, etc.), judicial officers and organizations responsible for debt recovery.

Your personal data will never be transferred, lent or exchanged to third parties.

3. How long your personal data is retained

Data is retained for as long as you subscribe to our services to use the Solution, and for a period of:

- Three (3) years after you cancel your subscription regarding the use of data for marketing purposes. After this three(3)-year period, we can contact you again to find out if you want to continue to receive marketing materials.

- Three (3) years minimum from exercising the right to object regarding information to acknowledge your rights.

- Five (5) years after you cancel your subscription regarding compliance with legal and regulatory obligations, as well as to establish evidence of a right or contract.

- Thirteen (13) months for the cookies set out in article 6.

4. Security

No worries! We (and our subcontractors) have taken all the necessary precautions, as well as appropriate organizational and technical measures to protect the security, integrity and confidentiality of your personal data.

5. Hosting

Your data is retained and stored whilst it is being processed on the servers of the companies Hubspot, Heroku, which are located in the United States.

These companies are part of the “Privacy Shield” initiative, which was deemed to offer a suitable level of protection through a decision by the European Commission dated July 12, 2016 (See adequacy decision). To find out more about the protection offered by the “Privacy Shield”, please visit the website.

6. Cookies

Cookies are text files stored on your browser, which are often encrypted. They are created when your browser loads a specific website: the site sends information to your browser, which then creates a text file. Whenever you return to the same site, your browser retrieves this file and then sends it.
‍
There are different types of cookies, which do not have the same purposes:
Technical cookies are used as you browse, to facilitate and run certain functions. As an example, a technical cookie can be used to remember the answers you gave in a form or your language or site layout preferences, if these options are available.

We use technical cookies:
Social media cookies can be created by social media platforms to allow site designers to share their content on these platforms. These cookies can be used by social media platforms to track user browsing on the website in question, whether or not they use these cookies.

We do not use social media cookies.‍
We encourage you to read the privacy policies of the social media platforms which create these cookies, to find out more about how they use browsing information which they might collect when using these cookies, and how to exercise your rights vis-à-vis these platforms.

Advertising cookies can be created by the website you are browsing, but also other websites with advertising, notices, widgets or other elements on the displayed page. These cookies can be used for targeted advertising, i.e. advertising based on your browsing habits.

We do not use advertising cookies.
However, we do use Google Analytics, which is a statistical audience analysis tool which generates a cookie to measure the number of visits to the Site, the number of pages viewed and User activity. Your IP address is also collected to determine where you are located. This cookie is only stored if you give your approval. You can accept or reject them.

Please note that you can object to cookies by changing your browser settings. How ever rejecting cookies can prevent the Site from operating properly.

7. Your rights

What are your rights to your data?

8. Entry of this policy into effect

This policy enters into effect on 20/01/2020.

9. Amendments

We reserve the right, at our sole discretion, to amend this policy at any time, in full orin part. You will be informed of this amendment through a message which will be displayed when you next use the Solution or open the Site.  

These amendments will enter into force on publication of this new policy. Your use of the Solution or the Site after the entry into force of these amendments will constitute recognition and acceptance of this new policy. If not, and if you are not satisfied with the new policy, you should no longer access the Solution or Site.