Confidentiality policy

ROADOO SAS with a capital of 53740€

APE code: 2620Z

SIRET number: 52148170500049

Administrative headquarters: 132 rue Fondaudège, 33000 Bordeaux

Director of the publication: Christophe TREMOULINAS

President: Christophe Trémoulinas

Editorial manager: Christophe TREMOULINAS

Data processing manager

Legal information:

Address: 132 rue Fondaudège,

33000 Bordeaux

Phone: 05 54 54 79 96

E-Mail: hello@maslo.app

Sito web: [https://www.malso.app](https://www.malso.app/)

‍ OVH host

2 rue Kellermann, 59100 Roubaix

Sito web: [https://www.ovh.com](https://www.ovh.com/)

‍ Developer: Jérôme DORSCHNER

Address: 132 rue Fondaudège, 33000 Bordeaux

Sito web: [https://www.maslo.app]
(https://www.maslo.app/)

L'application Maslo, éditée par ROADOO SAS, est une plateforme professionnelle destinée exclusivement aux utilisateurs majeurs invités par une entreprise cliente.

‍

This privacy policy defines and informs you of how MASLO uses and protects the information you provide to us, when you use:

- the Commercial Site accessible from the following URL:

[www.maslo.app] (http://www.maslo.app)et;

- the Web Application accessible from the following URL: [roadoo.com] (http://roadoo.com) and;

- from the “Maslo” Mobile Application available for download on Apple Store and on Play Store and;

- from a white label mobile application managed by MASLO for our customers who requested it.

‍

This privacy policy may be modified or supplemented at any time by MASLO, in particular in order to comply with any legislative, regulatory, jurisprudential or technological developments. In such a case, the date it was updated will be clearly identified at the top of this policy. These changes are binding on the User as soon as they are posted online. It is therefore appropriate that the User regularly consult this privacy and cookie policy in order to be aware of any changes. Any substantial modification will be sent to the User and his consent will be requested if necessary for the treatment concerned by the modification.

Access to the Web or Mobile Application implies full and unreserved acceptance by the User of this Privacy Policy.

‍

The Privacy Policy is valid for all pages hosted on the Site and for the records of this Site. The same is true for the Application.

It is not valid for pages hosted by third parties to which the MASLO publisher could refer and whose privacy policies may differ. The publisher MASLO cannot therefore be held responsible for any data processing carried out on or by these sites.

In addition, Maslo acts in many cases as a subcontractor of the company that has granted access to the Platform or the Application to the User, in particular for the management of Member areas or the sending of a gift ordered by the Member in full with coins.

‍

Below referred to as:

- the Site: the site [www.maslo.app] (http://www.maslo.app)

- The application: the Mobile Application or the Web Application, including white label applications.

- The user: the person who visits the Site, without having access to our Application. The term User also includes Members.

- the member: the person who uses our services, who has an account and who is able to connect to our Application.

-The administrator: the person, who manages and manages the platform to which the Member accesses. This person has additional privileges.

- Data: any information relating to the User, whether identified or identifiable.

‍

1. Why is your personal data collected by Maslo?

‍

Maslo may collect and process your Data for the following reasons:

As a data controller

Treatments carried out as a subcontractor

‍

Access to our Application

In order to allow you to access the Member area on the Application, processing of your Data is necessary.

This Data is only processed on the instructions of the company that has granted you a space and is therefore responsible for processing. Maslo only acts as a subcontractor in the context of this processing.

‍

The purposes are:

User account management

Management of challenges and rewards coins

Log management (security,...)

Management of requests to exercise rights

Monitoring of the use of the Platform for the Customer's needs

‍

Data collected as part of the purchase of a Gift (order made entirely with coins)

The Application allows you to buy gifts using coins distributed by your company. In this case, Maslo's customer is your company, and your Data is processed by Maslo only as a subcontractor, on instructions from your company (in particular for the delivery of the gift).

‍

Cookies

Data related to your browsing is used to optimize the functioning of our website, measure attendance and for marketing purposes.

They are kept for a maximum of 13 months.

‍

2. What personal data can be collected?

‍

Site contact form

On the Site, there is a contact form allowing you to:

- Request a demo

- Contact the Maslo team

The User who uses the contact form is required to fill in:

- Name, First name

- Professional email

- Telephone

- Company name and postal code

- Company size, team, function and the subject/theme of contact

‍

Access to the secure area of the Application

Access to the Application is only by invitation from an Administrator, a member of your company.

In order for you to have a Member Area, the following personal information is mandatory:

- The name

- The first name

- Professional email

- a hashed password (except in case of SSO connection)

‍

The Administrator may ask the Member for other personal information such as:

- The date of birth

- The position, the department, and/or the company

- The city, department, region, and/or country

- Other data useful to the Administrator in a professional context

‍

This information can be modified in our Application in case the Administrator has authorized this feature.

Maslo only processes the data in the User's secure area on the instructions of the Administrator, on behalf of the company that granted you access.

The latter is therefore the data controller, Maslo only acting as a subcontractor.

‍

Purchase of a gift in coins, or in whole or in part by credit card

‍

-Name

- First name

- Home address

- Telephone

-Other information required for delivery

‍

Purchase made

‍

History

If the purchase is made entirely in coins, Maslo only intervenes on instructions from your company, and is therefore a subcontractor within the meaning of the RGPD, the data controller being your company.

If the purchase is made in part or in full by credit card, you yourself become a customer of Maslo and Maslo then acts as data controller for the processing of your data necessary for the implementation of the purchase contract.

‍

Server logs

When the User accesses the Site and/or the Application, the servers consulted automatically record certain data, such as:

- The access provider with which the User connects to the Internet;

- The IP address assigned to the User (when connected);

- The date and time of access to the Site and other traffic data;

- The time spent viewing the pages;

- The pages consulted;

- The type of browser used;

- The platform and/or operating system used.

- At the level of the Maslo Application, these logs make it possible to identify any addition or deletion of data. A timestamp is performed.

This information is only kept for the sole purpose of security, statistics, audience measurement, improvement and operation of the Site and the Application as well as for customer support.

The IP address is kept anonymously only within the framework of article 3 of decree No. 2011-219 of February 25, 2011 relating to the conservation and consumption of data allowing the identification of any person who contributed to the creation of online content. Its shelf life is 1 year.

‍

Publicity

- Email address

- Phone number

‍

Reporting illegal content

As part of a notification of illegal content, the information collected is:

Identity: name, first name, profession, profession, residence, residence, nationality, date and place of birth.

‍

3. Who are the recipients of your Data?

‍

TalkJS

Maslo uses the TalkJS tool for messaging the Application.

Only the name and first name of the Member are sent to this service.

You can consult their Privacy Policy here: https://talkjs.com/privacy/

‍

microsoft

We use Microsoft's document preview service for Office documents added to our Application. These documents must be professional in nature and should not include sensitive data.

The files concerned by this service are: .doc, .docx, .xls, .xlsx, .ppt, .pptx

You can consult their Privacy Policy here: https://privacy.microsoft.com/fr-fr/privacystatement

‍

Intercom

Allows exchanges on the Platform between Administrators and Maslo.

‍

OVH

Data hosting

‍

Alteo

Server outsourcing

‍

Batch

Managing notifications

‍

Cross-border flows

Only data collected from cookies can be transferred outside the EU, but only within countries for which an adequacy decision has been adopted by the European Commission (United States, Great Britain).

‍

Sharing with the supplier of the Product and the deliverer

The gifts and/or products you order are delivered to your home. Your Data essential for this delivery is therefore communicated to the supplier and to the company responsible for the delivery.

‍

Sharing with authorities

We may disclose your personal data to administrative or judicial authorities when their disclosure is necessary for the identification, arrest or prosecution of any individual who may prejudice our rights, any other user or a third party.

‍

Transmission to rights holders

If the business or business is sold, Maslo's successors will be able to access the data.

‍

4. User Rights

In accordance with the regulations concerning the processing of personal data, the User has the rights listed below.

In order for the data controller to grant his request, the User is required to provide him with: first name, last name, email address. If Maslo has doubts about the identity of the person making the request, additional information may be requested. This additional information will only be kept for as long as necessary to process the request.

The data controller is required to respond to the user within a maximum of 30 (thirty) days. If additional time is required to respond to the request, the applicant will be informed within this period of thirty (30) days.

If the request communicated concerns another data controller, in particular the user's company, this request will be sent to this company.

You have the right to withdraw your consent to the processing of your data at any time when it is based on this consent and this, without affecting the lawfulness of the processing carried out before this withdrawal (article 7.3. of the RGPD).

You also have the rights defined in articles 15 and following of the GDPR:

• the right to obtain confirmation as to whether personal data concerning you is or is not being processed and, when they are processed, access to said personal data as well as to several information about our treatments (right of access — article 15 of the RGPD);

• the right to obtain the correction of erroneous or inaccurate personal data concerning you (right to rectification — article 16 of the RGPD);

• the right to obtain the erasure of personal data concerning you (right to erasure or “to be forgotten” — article 17 of the RGPD);

• the right to obtain the limitation of processing (right to the limitation of processing — article 18 of the RGPD);

• the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, and/or to ask us to transmit this data to another data controller, when the processing is based on consent or on the contract and the processing is carried out using automated processes (right to data portability — article 20 of the GDPR).

You have the rights of opposition defined by article 21 of the RGPD:

• the right to obtain, for reasons relating to your particular situation, the cessation of the processing of personal data concerning you (right to object — article 21.1. of the RGPD);

• the right to object to the processing of personal data concerning you for prospecting purposes (right to object to prospecting — article 21.2. of the RGPD);

• the right to register yourself on the Bloctel cold calling opposition list (https://www.bloctel.gouv.fr/).

These rights depend on your situation, so we may, in some cases, refuse to respond positively to them, in particular when the law requires us to keep documents or data or when the data is necessary for the performance of a contractual obligation.

You also have the right to define, modify and revoke at any time instructions relating to the storage, deletion and communication of your personal data after your death in application of article 40-1 of the Data Protection Act.

Right not to be the subject of a decision based exclusively on an automated process

In accordance with the provisions of article 22 of Regulation 2016/679, the User has the right not to be the subject of a decision based exclusively on an automated process if the decision produces legal effects concerning him, or significantly affects him in a similar way.

Right to refer the matter to the competent supervisory authority

If, after sending your request to the Data Controller, you consider that the Data Controller does not comply with its obligations with respect to your Personal Information, you can file a complaint with the competent authority. In France, the competent authority is the CNIL.

‍

‍

5- Politique de sécurité des enfants et lutte contre l'exploitation et les abus sexuels sur enfants (CSAE)

‍

L'application Maslo, éditée par ROADOO SAS, applique une politique de tolérance zéro à l'égard de tout contenu, comportement ou activité relevant de l'exploitation et des abus sexuels sur enfants (Child Sexual Abuse and Exploitation — CSAE), y compris les contenus pédopornographiques (Child Sexual Abuse Material — CSAM).

‍

Public visé par l'application

L'application Maslo est une plateforme professionnelle de reconnaissance et d'engagement destinée aux salariés et partenaires d'entreprises clientes. Elle est exclusivement destinée aux utilisateurs majeurs (18 ans et plus), invités par une entreprise cliente disposant d'un contrat actif avec ROADOO SAS, et qui sont salariés, prestataires ou partenaires de cette entreprise. L'application n'est pas destinée à un public mineur et ne fait l'objet d'aucune diffusion à destination des enfants.

‍

Interdictions explicites

Sont strictement interdits sur l'application Maslo : le téléversement, le partage, le stockage, la transmission, la diffusion ou la sollicitation de tout contenu d'exploitation ou d'abus sexuel d'enfants (CSAE/CSAM), y compris les images, vidéos, textes, dessins, contenus générés par intelligence artificielle, deepfakes, ou tout autre support représentant un mineur dans un contexte sexuel ou d'exploitation ; toute tentative de manipulation psychologique d'un mineur à des fins sexuelles (grooming) ; toute extorsion sexuelle (sextorsion) impliquant un mineur ; toute forme de traite, prostitution ou exploitation d'un mineur ; toute mise en relation avec un mineur à des fins sexuelles ou d'exploitation ; toute promotion, glorification, normalisation ou facilitation des comportements ci-dessus.

‍

Mesures de prévention et de traitement

ROADOO SAS met en œuvre les mesures suivantes : restriction d'accès par invitation contrôlée par l'employeur, limitant l'exposition à des contenus issus d'utilisateurs anonymes ; dispositif de modération a posteriori sur signalement, complété par les outils de signalement intégrés à l'application ; possibilité pour tout utilisateur de signaler un contenu, un compte ou un comportement à risque ; traitement prioritaire des signalements relevant de la présente politique et retrait diligent des contenus illicites identifiés ; suspension du compte concerné sans préavis en cas de violation manifeste, suivie d'un examen contradictoire pouvant conduire à la résiliation définitive conformément aux conditions générales d'utilisation ; conservation des éléments techniques nécessaires à la coopération avec les autorités compétentes, dans la limite des délais légaux de prescription et conformément aux principes de minimisation et de limitation de la conservation prévus par le RGPD.

‍

Signalement d'un contenu ou comportement CSAE

Tout utilisateur, parent, tuteur ou tiers peut signaler un contenu, un compte ou un comportement potentiellement lié à l'exploitation ou aux abus sexuels d'enfants à l'adresse safety@maslo.app (ou, à défaut, hello@maslo.app avec pour objet « Signalement CSAE »). Les signalements sont traités en priorité et de manière confidentielle. ROADOO SAS accuse réception du signalement et l'examine dans les meilleurs délais, conformément à l'article 16 du Règlement (UE) 2022/2065 (Digital Services Act).

Coopération avec les autorités

‍

ROADOO SAS coopère pleinement avec les autorités compétentes en cas de contenu ou comportement relevant du CSAE. Les contenus illicites identifiés sont signalés : en France, à la plateforme PHAROS du Ministère de l'Intérieur (www.internet-signalement.gouv.fr) ; au National Center for Missing & Exploited Children (NCMEC) lorsque la législation l'exige ; aux autorités judiciaires compétentes sur réquisition.

‍

Conformité réglementaire

Cette politique s'inscrit dans le respect : du Code pénal français, notamment les articles 227-22 (corruption de mineur), 227-23 (diffusion d'images pédopornographiques) et 227-24 (provocation et incitation) ; du Règlement (UE) 2016/679 (RGPD), notamment son article 8 relatif au consentement des mineurs, et de la loi n° 78-17 modifiée (loi Informatique et Libertés) ; du Règlement (UE) 2021/1232 du 14 juillet 2021 relatif à la dérogation temporaire en matière de lutte contre les abus sexuels commis contre des enfants en ligne ; du Règlement (UE) 2022/2065 du 19 octobre 2022 (Digital Services Act), notamment ses articles 14, 16 et 28 ; du Règlement (UE) 2024/1689 (AI Act), notamment son article 50 sur la transparence des contenus générés ou manipulés par IA ; des Standards de sécurité des enfants de Google Play (Google Play Child Safety Standards) ; des recommandations de l'Internet Watch Foundation (IWF) et de Thorn.

‍

Contact référent sécurité et confiance

Pour toute question relative à la sécurité des enfants ou à la présente politique, ROADOO SAS a désigné un référent Sécurité et Confiance joignable à l'adresse safety@maslo.app. Coordonnées postales : ROADOO SAS — Référent Sécurité et Confiance, 132 rue Fondaudège, 33000 Bordeaux, France. Email de secours : hello@maslo.app. Téléphone : 05 54 54 79 96.

‍

‍

Cookie table

The Site may ask you to accept cookies for statistical and marketing purposes. A cookie is information placed on your hard drive by the server of the site you are visiting. It contains multiple pieces of data that are stored on your computer in a simple text file that is accessed by a server to read and save information. Some parts of the Site cannot be functional without the acceptance of cookies.

‍

List of cookies:

‍