Confidentiality policy

ROADOO SAS with a capital of 53740€

APE code: 2620Z

SIRET number: 52148170500049

Administrative headquarters: 132 rue Fondaudège, 33000 Bordeaux

Director of the publication: Christophe TREMOULINAS

President: Christophe Trémoulinas

Editorial manager: Christophe TREMOULINAS

Data processing manager

Legal information:

Address: 132 rue Fondaudège,

33000 Bordeaux

Phone: 05 54 54 79 96

E-Mail: hello@maslo.app

Sito web: [https://www.malso.app](https://www.malso.app/)

‍ OVH host

2 rue Kellermann, 59100 Roubaix

Sito web: [https://www.ovh.com](https://www.ovh.com/)

‍ Developer: Jérôme DORSCHNER

Address: 132 rue Fondaudège, 33000 Bordeaux

Sito web: [https://www.maslo.app]
(https://www.maslo.app/)

This privacy policy defines and informs you of how MASLO uses and protects the information you provide to us, when you use:

- the Commercial Site accessible from the following URL:

[www.maslo.app] (http://www.maslo.app)et;

- the Web Application accessible from the following URL: [roadoo.com] (http://roadoo.com) and;

- from the “Maslo” Mobile Application available for download on Apple Store and on Play Store and;

- from a white label mobile application managed by MASLO for our customers who requested it.

‍

This privacy policy may be modified or supplemented at any time by MASLO, in particular in order to comply with any legislative, regulatory, jurisprudential or technological developments. In such a case, the date it was updated will be clearly identified at the top of this policy. These changes are binding on the User as soon as they are posted online. It is therefore appropriate that the User regularly consult this privacy and cookie policy in order to be aware of any changes. Any substantial modification will be sent to the User and his consent will be requested if necessary for the treatment concerned by the modification.

Access to the Web or Mobile Application implies full and unreserved acceptance by the User of this Privacy Policy.

‍

The Privacy Policy is valid for all pages hosted on the Site and for the records of this Site. The same is true for the Application.

It is not valid for pages hosted by third parties to which the MASLO publisher could refer and whose privacy policies may differ. The publisher MASLO cannot therefore be held responsible for any data processing carried out on or by these sites.

In addition, Maslo acts in many cases as a subcontractor of the company that has granted access to the Platform or the Application to the User, in particular for the management of Member areas or the sending of a gift ordered by the Member in full with coins.

‍

Below referred to as:

- the Site: the site [www.maslo.app] (http://www.maslo.app)

- The application: the Mobile Application or the Web Application, including white label applications.

- The user: the person who visits the Site, without having access to our Application. The term User also includes Members.

- the member: the person who uses our services, who has an account and who is able to connect to our Application.

-The administrator: the person, who manages and manages the platform to which the Member accesses. This person has additional privileges.

- Data: any information relating to the User, whether identified or identifiable.

‍

1. Why is your personal data collected by Maslo?

‍

Maslo may collect and process your Data for the following reasons:

As a data controller

Treatments carried out as a subcontractor

‍

Access to our Application

In order to allow you to access the Member area on the Application, processing of your Data is necessary.

This Data is only processed on the instructions of the company that has granted you a space and is therefore responsible for processing. Maslo only acts as a subcontractor in the context of this processing.

‍

The purposes are:

User account management

Management of challenges and rewards coins

Log management (security,...)

Management of requests to exercise rights

Monitoring of the use of the Platform for the Customer's needs

‍

Data collected as part of the purchase of a Gift (order made entirely with coins)

The Application allows you to buy gifts using coins distributed by your company. In this case, Maslo's customer is your company, and your Data is processed by Maslo only as a subcontractor, on instructions from your company (in particular for the delivery of the gift).

‍

Cookies

Data related to your browsing is used to optimize the functioning of our website, measure attendance and for marketing purposes.

They are kept for a maximum of 13 months.

‍

2. What personal data can be collected?

‍

Site contact form

On the Site, there is a contact form allowing you to:

- Request a demo

- Contact the Maslo team

The User who uses the contact form is required to fill in:

- Name, First name

- Professional email

- Telephone

- Company name and postal code

- Company size, team, function and the subject/theme of contact

‍

Access to the secure area of the Application

Access to the Application is only by invitation from an Administrator, a member of your company.

In order for you to have a Member Area, the following personal information is mandatory:

- The name

- The first name

- Professional email

- a hashed password (except in case of SSO connection)

‍

The Administrator may ask the Member for other personal information such as:

- The date of birth

- The position, the department, and/or the company

- The city, department, region, and/or country

- Other data useful to the Administrator in a professional context

‍

This information can be modified in our Application in case the Administrator has authorized this feature.

Maslo only processes the data in the User's secure area on the instructions of the Administrator, on behalf of the company that granted you access.

The latter is therefore the data controller, Maslo only acting as a subcontractor.

‍

Purchase of a gift in coins, or in whole or in part by credit card

‍

-Name

- First name

- Home address

- Telephone

-Other information required for delivery

‍

Purchase made

‍

History

If the purchase is made entirely in coins, Maslo only intervenes on instructions from your company, and is therefore a subcontractor within the meaning of the RGPD, the data controller being your company.

If the purchase is made in part or in full by credit card, you yourself become a customer of Maslo and Maslo then acts as data controller for the processing of your data necessary for the implementation of the purchase contract.

‍

Server logs

When the User accesses the Site and/or the Application, the servers consulted automatically record certain data, such as:

- The access provider with which the User connects to the Internet;

- The IP address assigned to the User (when connected);

- The date and time of access to the Site and other traffic data;

- The time spent viewing the pages;

- The pages consulted;

- The type of browser used;

- The platform and/or operating system used.

- At the level of the Maslo Application, these logs make it possible to identify any addition or deletion of data. A timestamp is performed.

This information is only kept for the sole purpose of security, statistics, audience measurement, improvement and operation of the Site and the Application as well as for customer support.

The IP address is kept anonymously only within the framework of article 3 of decree No. 2011-219 of February 25, 2011 relating to the conservation and consumption of data allowing the identification of any person who contributed to the creation of online content. Its shelf life is 1 year.

‍

Publicity

- Email address

- Phone number

‍

Reporting illegal content

As part of a notification of illegal content, the information collected is:

Identity: name, first name, profession, profession, residence, residence, nationality, date and place of birth.

‍

3. Who are the recipients of your Data?

‍

TalkJS

Maslo uses the TalkJS tool for messaging the Application.

Only the name and first name of the Member are sent to this service.

You can consult their Privacy Policy here: https://talkjs.com/privacy/

‍

microsoft

We use Microsoft's document preview service for Office documents added to our Application. These documents must be professional in nature and should not include sensitive data.

The files concerned by this service are: .doc, .docx, .xls, .xlsx, .ppt, .pptx

You can consult their Privacy Policy here: https://privacy.microsoft.com/fr-fr/privacystatement

‍

Intercom

Allows exchanges on the Platform between Administrators and Maslo.

‍

OVH

Data hosting

‍

Alteo

Server outsourcing

‍

Batch

Managing notifications

‍

Cross-border flows

Only data collected from cookies can be transferred outside the EU, but only within countries for which an adequacy decision has been adopted by the European Commission (United States, Great Britain).

‍

Sharing with the supplier of the Product and the deliverer

The gifts and/or products you order are delivered to your home. Your Data essential for this delivery is therefore communicated to the supplier and to the company responsible for the delivery.

‍

Sharing with authorities

We may disclose your personal data to administrative or judicial authorities when their disclosure is necessary for the identification, arrest or prosecution of any individual who may prejudice our rights, any other user or a third party.

‍

Transmission to rights holders

If the business or business is sold, Maslo's successors will be able to access the data.

‍

4. User Rights

In accordance with the regulations concerning the processing of personal data, the User has the rights listed below.

In order for the data controller to grant his request, the User is required to provide him with: first name, last name, email address. If Maslo has doubts about the identity of the person making the request, additional information may be requested. This additional information will only be kept for as long as necessary to process the request.

The data controller is required to respond to the user within a maximum of 30 (thirty) days. If additional time is required to respond to the request, the applicant will be informed within this period of thirty (30) days.

If the request communicated concerns another data controller, in particular the user's company, this request will be sent to this company.

You have the right to withdraw your consent to the processing of your data at any time when it is based on this consent and this, without affecting the lawfulness of the processing carried out before this withdrawal (article 7.3. of the RGPD).

You also have the rights defined in articles 15 and following of the GDPR:

• the right to obtain confirmation as to whether personal data concerning you is or is not being processed and, when they are processed, access to said personal data as well as to several information about our treatments (right of access — article 15 of the RGPD);

• the right to obtain the correction of erroneous or inaccurate personal data concerning you (right to rectification — article 16 of the RGPD);

• the right to obtain the erasure of personal data concerning you (right to erasure or “to be forgotten” — article 17 of the RGPD);

• the right to obtain the limitation of processing (right to the limitation of processing — article 18 of the RGPD);

• the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, and/or to ask us to transmit this data to another data controller, when the processing is based on consent or on the contract and the processing is carried out using automated processes (right to data portability — article 20 of the GDPR).

You have the rights of opposition defined by article 21 of the RGPD:

• the right to obtain, for reasons relating to your particular situation, the cessation of the processing of personal data concerning you (right to object — article 21.1. of the RGPD);

• the right to object to the processing of personal data concerning you for prospecting purposes (right to object to prospecting — article 21.2. of the RGPD);

• the right to register yourself on the Bloctel cold calling opposition list (https://www.bloctel.gouv.fr/).

These rights depend on your situation, so we may, in some cases, refuse to respond positively to them, in particular when the law requires us to keep documents or data or when the data is necessary for the performance of a contractual obligation.

You also have the right to define, modify and revoke at any time instructions relating to the storage, deletion and communication of your personal data after your death in application of article 40-1 of the Data Protection Act.

Right not to be the subject of a decision based exclusively on an automated process

In accordance with the provisions of article 22 of Regulation 2016/679, the User has the right not to be the subject of a decision based exclusively on an automated process if the decision produces legal effects concerning him, or significantly affects him in a similar way.

Right to refer the matter to the competent supervisory authority

If, after sending your request to the Data Controller, you consider that the Data Controller does not comply with its obligations with respect to your Personal Information, you can file a complaint with the competent authority. In France, the competent authority is the CNIL.

‍

Cookie table

The Site may ask you to accept cookies for statistical and marketing purposes. A cookie is information placed on your hard drive by the server of the site you are visiting. It contains multiple pieces of data that are stored on your computer in a simple text file that is accessed by a server to read and save information. Some parts of the Site cannot be functional without the acceptance of cookies.

‍

List of cookies:

‍