Privacy Policy

Privacy policy As of 02/17/2023

This Privacy Policy is intended to explain to you, in accordance with the General Data Protection Regulation (GDPR), why My Data Solution (hereinafter “MDS”) processes your personal data, how they are processed, what rights you have over your data and how to exercise them.

MDS reserves the right to modify this Privacy Policy at any time. Any changes will take effect immediately. We invite you to regularly consult our Policy, accessible from all pages of the Site, in order to keep yourself informed of the latest applicable online version. We also invite you to check the date indicated on this Policy to find out the date of the last update.

Why do we need your data?

MDS collects your personal data in order to fulfill the purposes described below. Each of these purposes is based on a legal basis which authorizes MDS to carry out the processing.

Purposes	Legal Basis
Management of contact requests	Legitimate interest of MDS to process requests addressed to it
Management of the newsletter	Legitimate interest of MDS to manage the sending of the newsletter to subscribers
Management of commercial prospecting	Your consent
Management of webinar registrations	Legitimate interest of MDS to manage webinar registrations
Management of general accounting	Compliance with a legal obligation incumbent on MDS
Management of commercial relationships	Execution of contractual measures
Management of suppliers	Execution of contractual measures
Management of cookies	Cookies placed are not subject to your consent (session and security cookies). The legal basis for this processing is the legitimate interest of MDS to ensure the proper functioning of its website.
Management of requests to exercise rights	Compliance with a legal obligation incumbent on MDS as a data controller

In general, MDS does not process any of your data for purposes incompatible with those for which they were collected, unless you have previously agreed.

Who has access to your data?

MDS may transmit your data only to authorized recipients, within the limits of their respective responsibilities and according to the purpose(s) concerned: MDS staff, and external organizations, subcontractors with whom our relationship is contractually framed to include the requirements arising from the protection of personal data.

Purpose	Recipients
Management of webinar registrations	Partners who co-organize the webinar with MDS
Management of general accounting	– MDS's accountant – MDS's auditors (C.A.C)
Management of commercial relationships	– MDS's accountant – MDS's auditors (C.A.C)
Management of suppliers	– MDS's accountant – MDS's auditors (C.A.C)
Management of requests to exercise rights	– MDS's Data Protection Officer (DPO) – Subcontractors, partners, and/or any entity involved in processing your request to exercise rights

Is your data transferred outside the EU?

Your data is hosted on secure servers located in France.

If your data were to be transferred outside the EEA, in particular through our subcontractors, we would pay particular attention to ensuring that the latter process your data in strict compliance with the regulations in force regarding the protection of personal data. In the event that the latter are located in a country not subject to an adequacy decision by the European Commission, recognizing a level of protection equivalent to that provided by the European Union, a standard contract will be drawn up in order to comply with the model established by the European Commission.

What data is collected and processed?

The personal data that you communicate to us directly • When you fill out a contact form,

When you subscribe to the newsletter,
When you register for webinars,
When you request the exercise of a right,
Generally speaking, when you interact with MDS in any other way.
When you fill out one of our contact forms
when you wish to enter into a contract with our company

Personal data we collect automatically

When you access our website, certain information about you is collected automatically. MDS uses cookies. To find out more about cookies and how to deactivate them, please consult the “Cookies Policy”, accessible at the bottom of the page.

How long is your data kept?

Purposes	Retention Period
Management of contact requests	The collected data is retained for 1 year from the processing of your request.
Newsletter management	The data is retained until you withdraw your consent or, if not, for 3 years from the last contact made.
Commercial prospecting management	The data is retained until you withdraw your consent or, if not, for 3 years from the last contact made.
Management of webinar registrations	The data is retained for 1 year from the end of the relevant webinar.
General accounting management	The data is retained for the applicable statutory retention periods.
Commercial relationship management	In accordance with applicable statutory periods, the data is retained for the duration of the contractual relationship and then archived for a period of 5 years.
Supplier management	The data is retained for the applicable statutory retention periods.
Cookie management	The data collected by cookies strictly necessary for the proper functioning of the website is retained for the duration of your session.
Management of rights exercise requests	In accordance with applicable statutory periods, the data will be retained for the time necessary to process your request and then archived for a period of 5 years.

Prospecting and targeted advertising

Once you have agreed to receive commercial offers from MDS, you can, at any time, reconsider your choice by clicking on the unsubscribe link present in all our communications or by sending STOP, as indicated in the SMS sent to you. If you have agreed to receive newsletters from MDS, you can at any time express your wish to no longer receive them, using the unsubscribe link in each of the newsletters.

What are your GDPR rights?

Right	Description
Right of access to your data	You can obtain confirmation from MDS whether or not your data is being processed and, if so, access all the data and information held by MDS.
Right to rectify your data	You can request MDS to rectify any inaccurate or incorrect data concerning you as soon as possible. You may also request that your data be completed, if necessary.
Right to erasure of your data	Except for legal exceptions, you may request MDS to erase your data if, for example, you believe that the processing of your data is no longer necessary for the purposes for which it was collected.
Right to data portability	You have the right to retrieve part of your data in an open and machine-readable format or request MDS to transfer it to another organization. This right only applies to data that you have actively and consciously provided to MDS or that was generated while using a service or device and is processed automatically.
Right to object	You may object to your data being used for a specific purpose, provided you explain reasons related to your particular situation. However, in the case of commercial prospecting, you may object without justification at any time.
Right to restriction of data processing	If you contest the accuracy of the data used or object to its processing, MDS may carry out a verification over a certain period. During this time, you may request that your data not be used while remaining stored.
Right to withdraw consent	When the processing of your personal data is based on your consent, you can withdraw it at any time.
Right to define post-mortem directives	You can define directives regarding the retention, deletion, and communication of your data after your death. These directives can be modified or revoked at any time.

For more information on your rights, you can consult the CNIL website:

How to exercise your GDPR rights?

To exercise one of your rights, send your request to:

dpo@mydatasolution.fr

By mail:

For MDS France : A l’attention du DPO – WOJO Cœur de défense – 110 Esplanade Charles de Gaulle – 92400 – Courbevoie ;
For MDS Océan Indien : A l’attention du DPO – Le CARé – 62 Rue Adrien Lagourgue – 97424 – Piton Saint Leu – La Réunion ;
For MDS Caraïbes : A l’attention du DPO – Be BOOSTER – 12 Rue des Arts et Métiers – Lotissement DILLON – STADE – 97200 – Fort de France.

Any request must specify, in the subject, the reason for the request (exercise of the right of access, opposition, etc.). The request must also be accompanied by any element to prove the identity of the requester and specify the address to which the response must be sent.

MDS will send you its response within a maximum of one (1) month, from the date of receipt of your request. This deadline may, however, be extended by two (2) additional months due to the complexity and number of requests.

If you consider, after contacting MDS, that your IT and Liberties rights are not respected, you can send a complaint directly on the CNIL Website or by post to: CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07”; after “you can send a complaint to the CNIL