Privacy Policy

ARTICLE 1: PREAMBLE

This privacy policy applies to the website: Maecia.

The purpose of this privacy policy is to inform users of the website about:

The way in which their personal data is collected and processed. All data that may identify a user must be considered personal data. This includes, in particular, first and last name, age, postal address, email address, the user’s location and their IP address;
What rights users have regarding this data;
Who is responsible for the processing of the personal data collected and processed;
To whom this data is transmitted;
Where applicable, the website’s policy on « cookies ».

ARTICLE 2: GENERAL PRINCIPLES ON DATA COLLECTION AND PROCESSING

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of users’ data on the website comply with the following principles:

Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user is informed that their data is being collected and of the reasons why it is being collected;
Purpose limitation: the collection and processing of data are carried out to meet one or more objectives determined in these General Terms of Use;
Minimisation of data collection and processing: only the data necessary for the proper performance of the purposes pursued by the website is collected;
Limited retention of data: data is kept for a limited period, of which the user is informed. Where this information cannot be provided, the user is informed of the criteria used to determine the retention period;
Integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

To be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they satisfy at least one of the conditions listed below:

The user has expressly consented to the processing;
The processing is necessary for the performance of a contract;
The processing meets a legal obligation;
The processing is justified by a necessity related to the protection of the vital interests of the data subject or of another natural person;
The processing may be justified by a necessity related to the performance of a task carried out in the public interest or in the exercise of official authority;
The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHEN BROWSING THE WEBSITE

1. Data collected and processed, and how it is collected

The personal data collected on the Intranet Inside website is as follows:

Last name
First name
Email
Company
Phone number

This data is collected when the user performs one of the following operations on the website:

When the user sends us a message via the contact form
When the user schedules a demonstration with our team
When the user downloads a resource available on the website

The data controller will keep all the data collected in the website’s IT systems under reasonable security conditions for the following periods:

Analytics cookies: 13 months;
Contact form data: 13 months;
Demonstration form data: 13 months;
Resource download data: 13 months.

The collection and processing of data serve the following purposes:

Responding to requests sent via the contact form;
Sending the requested resources;
Other communications.

The data processing carried out is based on the following legal grounds:

Consent of the user;
Request for information.

2. Transmission of data to third parties

The personal data collected by the website is not transmitted to any third party and is processed only by the publisher of the website.

3. Data hosting

The Intranet Inside website is hosted by: Scaleway SAS, whose registered office is located at: 8 rue de la Ville l’Evêque, 75008 Paris.

The hosting provider can be contacted on the following phone number: +33 (0)1 84 13 00 00.

The data collected and processed by the website is hosted and processed exclusively in France.

ARTICLE 3 BIS: DATA PROCESSED BY THE MODERN EMPLOYEE DIRECTORY SHAREPOINT WEB PART

1. Presentation of the solution

Modern Employee Directory, marketed in French as « Annuaire moderne des collaborateurs », is a SharePoint Web Part developed by Maecia.

It allows users of a Microsoft 365 environment to search for and view the members of their organisation directly from SharePoint Online.

The solution relies on the professional information available in Microsoft 365, in particular through Microsoft Graph and Microsoft Entra ID.

2. Data that may be accessed

Depending on the organisation’s configuration, the solution may access the following professional information in particular:

first and last name;
professional email address;
profile photo;
job title;
department or team;
professional location;
professional contact details;
manager;
other professional attributes available in Microsoft 365.

3. Purposes

This data is used to enable:

searching for members;
displaying them as a list or as a card view;
filtering by professional criteria;
displaying a member profile;
getting in touch through Microsoft 365 services;
customising the information displayed in the Web Part.

4. Origin and storage of data

The information displayed comes from the Microsoft 365 environment of the organisation using the solution.

Modern Employee Directory does not create a separate member database hosted by Maecia. The information is read from the Microsoft 365 environment of the organisation using the solution.

The professional data accessed by the Web Part is not transmitted to Maecia’s systems as part of its normal operation.

5. Microsoft Graph permissions

The solution may require Microsoft Graph permissions in order to access the information it needs to operate.

Some permissions may require approval by a Microsoft 365 administrator. The organisation using the solution remains responsible for the permissions granted.

6. Sharing and tracking

Maecia does not sell the personal data accessible through Modern Employee Directory.

Modern Employee Directory does not use advertising cookies and does not include any advertising profiling mechanism.

7. Responsibility of the organisation using the solution

The organisation that installs Modern Employee Directory remains responsible, in particular, for:

the data present in its Microsoft 365 environment;
the management of its users;
the Microsoft Graph permissions granted;
the persons authorised to access the directory;
compliance with its data protection obligations.

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

1. The data controller

The data controller for personal data is: Hadrien Marchand, DPO. He can be contacted as follows:

By email: [email protected]

The data controller is responsible for determining the purposes and the means used for the processing of personal data.

2. Obligations of the data controller

The data controller undertakes to protect the personal data collected, not to transmit it to third parties without the user having been informed, and to comply with the purposes for which this data was collected.

The website has an SSL certificate to ensure that the information and the transfer of data passing through the website are secure.

An SSL (« Secure Socket Layer ») certificate is intended to secure the data exchanged between the user and the website.

In addition, the data controller undertakes to notify the user in the event of rectification or deletion of the data, unless this would entail disproportionate formalities, costs and steps for the controller.

If the integrity, confidentiality or security of the user’s personal data is compromised, the data controller undertakes to inform the user by any means.

3. The Data Protection Officer

Users are also informed that a Data Protection Officer has been appointed: Hadrien Marchand, DPO of Maecia.

The role of the Data Protection Officer is to ensure the proper implementation of national and supranational provisions relating to the collection and processing of personal data. They may also be appointed as DPO (Data Protection Officer).

The Data Protection Officer can be contacted as follows:

By email: [email protected]

ARTICLE 5: USER RIGHTS

In accordance with the regulations concerning the processing of personal data, users have the rights listed below.

In order for the data controller to grant their request, the user must provide: their first and last name and their email address.

The data controller is required to respond to the user within a maximum period of 30 (thirty) days.

1. Presentation of user rights regarding the collection and processing of data

A. Right of access, rectification and erasure

The user may access, update, modify or request the deletion of data concerning them, in accordance with the procedure set out below:

The user must send an email to the personal data controller, specifying the subject of their request, to the contact email address.

B. Right to data portability

The user has the right to request the portability of their personal data held by the website to another website, in accordance with the procedure set out below:

The user must make a request for the portability of their personal data to the data controller by sending an email to the address provided above.

C. Right to restriction of and objection to data processing

The user has the right to request the restriction of, or to object to, the processing of their data by the website, and the website cannot refuse unless it demonstrates the existence of legitimate and compelling grounds that may prevail over the interests, rights and freedoms of the user.

In order to request the restriction of the processing of their data or to object to the processing of their data, the user must follow the procedure below:

The user must make a request to restrict the processing of their personal data by email to the data controller.

D. Right not to be subject to a decision based exclusively on automated processing

In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on automated processing if the decision produces legal effects concerning them, or similarly significantly affects them.

E. Right to determine the fate of data after death

Users are reminded that they may organise what should become of their collected and processed data in the event of their death, in accordance with Act No. 2016-1321 of 7 October 2016.

F. Right to lodge a complaint with the competent supervisory authority

If the data controller decides not to respond to the user’s request and the user wishes to contest this decision, or if the user believes that one of the rights listed above has been infringed, they are entitled to refer the matter to the CNIL (French Data Protection Authority, https://www.cnil.fr) or to any competent court.

2. Personal data of minors

In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data.

If the user is a minor under 15 years of age, the consent of a legal representative will be required for personal data to be collected and processed.

The publisher of the website reserves the right to verify by any means that the user is over 15 years of age, or that they have obtained the consent of a legal representative, before browsing the website.

ARTICLE 6: USE OF COOKIES

The website may use « cookie » techniques.

A « cookie » is a small file (less than 4 KB), stored by the website on the user’s hard drive, containing information relating to the user’s browsing habits.

These files allow it to process statistics and traffic information, facilitate browsing and improve the service for the user’s convenience.

For the use of « cookies » involving the storage and analysis of personal data, the user’s consent is necessarily requested.

This user consent is considered valid for a maximum period of 6 (six) months. At the end of this period, the website will again ask for the user’s authorisation to store « cookies » on their hard drive.

1. User objection to the use of « cookies » by the website

Cookies that are not essential to the operation of the website are only placed on the user’s terminal after obtaining their consent. The user may withdraw their consent at any time, as follows:

Please click on the Cookie Management link at the bottom of the page to change your consent options.

More generally, users are informed that they can object to the storage of these « cookies » by configuring their browser software.

For information, users can find at the following addresses the steps to follow in order to configure their browser software to object to the storage of « cookies »:

If the user decides to disable « cookies », they may continue browsing the website. However, any malfunction of the website caused by this action cannot be considered as being the fault of the website’s publisher.

2. Description of the « cookies » used by the website

The publisher of the website draws the user’s attention to the fact that the following cookies are used during browsing:

Cookie: Google Analytics (_ga, _gcd_au, _gid, 1P_JAR, NID, CONSENT, DV);
Issuer: Google.com;
Purpose: analysis of browsing habits;
Cookie: hubspot (__hssrc, hubspotutk, _hjid, _hjIncludeInSessionSample, __hstc, _hjAbsoluteSessionInProgress, _hjIncludeInPageviewSample, _hjTLDTest, _hjFirstSeen, __hssc);
Issuer: Hubspot.com;
Purpose: analysis of browsing habits and contact;
Cookie: Complianz;
Issuer: Maecia;
Purpose: user consent.

By browsing the website, users are informed that third-party « cookies » may be stored.

These third parties are in particular the following:

Google France
Hubspot France

Users’ attention is drawn to the fact that these websites have their own privacy policies and terms of use that may differ from those of the website. The publisher of the website invites users to consult the privacy policies and terms of use of these websites.

ARTICLE 7: CONDITIONS FOR AMENDING THE PRIVACY POLICY

The publisher of the website reserves the right to amend it in order to ensure its compliance with applicable law.

Consequently, users are invited to consult this privacy policy regularly in order to stay informed of the latest changes made to it.

Users are informed that the latest update of this privacy policy took place on: 08/04/2021.

ARTICLE 8: ACCEPTANCE OF THE PRIVACY POLICY BY THE USER

By browsing the website, the user confirms that they have read and understood this privacy policy and accepts its conditions, particularly with regard to the collection and processing of their personal data, as well as the use of « cookies ».