This policy is effective as of May 25, 2018.
MD101 Consulting (“we” or “us”) is committed to protecting and respecting your privacy. This privacy statement (together with all other documents referred to in this document) sets out the basis on which personal data collected from you, or which you provide to us, will be processed by us in the course of our general business communication. Please read the following document carefully to understand our views and practices regarding your personal data and how we will process it.
For the purposes of the General Data Protection Regulation (“GDPR”), the data controller is MD101 Consulting, SIRET 790 330 948 00023 RCS Marseille - France.
Your rights
Under the General Data Protection Regulation, you have a number of important rights. In summary, these rights include:
- access to your personal data and certain other additional information provided in this privacy policy,
- ask us to correct any errors in the information we hold,
- ask us to delete your personal data in certain situations,
- ask us to access your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit such data to a third party in certain situations,
- object at any time to the processing of your personal data for direct marketing purposes,
- object to decisions being taken by automated means that produce legal effects for you or have a similar effect on you,
- object in certain other situations to the continued processing of your personal data,
- limit the processing of your personal data in certain circumstances,
- claim compensation for damages caused by our violation of data protection laws.
Your personal information
Information we collect from you
We collect and process some or all of the following types of information when you contact us:
- Your name, e-mail address and any other contact information about you,
- We may keep a record of your correspondence.
Information we collect from other sources
We do not collect information from other sources. The only information we collect has been provided by you.
Uses made of your information
Legal basis for processing
Our processing of personal data is in the interest of the company's productivity and development, such as communication with existing and potential customers and partners. The legal basis on which we process personal data is consent, contract and legitimate interests.
Purposes of processing
We use information held about you in the following ways:
- For business-related communications
How we store your personal data
Security
We take appropriate measures to ensure the security of all personal data, including security measures to prevent personal data from being accidentally lost, used or accessed in an unauthorized manner. We limit access to your personal data to those who really need to see it. Those who process your information will do so only in an authorized manner and are subject to an obligation of confidentiality.
We also have procedures in place to deal with any suspected breach of data security. We will notify you and any relevant regulatory body of a suspected data security breach where we are legally obliged to do so.
Unfortunately, the transmission of information via the Internet is not totally secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted by online means, so any transmission remains at your own risk.
Where we store your personal data
We store your personal data in our information system.
We will not intentionally transfer your personal data outside the European Economic Area (“EEA”) or to any organization (or subordinate body) governed by public international law.
How long we keep your personal data
We will retain your data for up to 5 years after our last communication.
Your personal information will be deleted on the earlier of the following two dates:
- deletion of your personal information at your request
- at the end of the retention period, unless you specify otherwise.
For more information about your rights, including the circumstances in which they apply, please see the guidelines issued by the French Data Protection Authority (CNIL) under the General Data Protection Regulation.
If you wish to exercise any of these rights, please:
- contact us by e-mail: bonjour@md101.io,
- leave sufficient information to identify yourself,
- leave proof of your identity and address, and
- indicate the information to which your request relates.
Contact
All questions, comments and requests concerning this privacy policy should be sent to
bonjour@md101.io.
How to make a complaint
We hope that we can resolve any questions or concerns you raise about our use of your information, please file your complaint at
bonjour@md101.io.
The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority, particularly in the European Union (or European Economic Area) member state where you normally work, or in the event of a breach of data protection laws. The supervisory authority in France is the Commission Nationale de l'Informatique et des Libertés (CNIL), which can be contacted at http://www.cnil.fr.