Privacy policy

1. Data controller

Controller

ModalB

Registered office

144 rue Paul Bellamy, 44000 Nantes, France

SIRET (French company number)

879 472 579 00033

Contact

contact@modalbgroup.com

2. Data collected and purposes

We collect no sensitive data and do not sell any data. We do not profile individuals and take no automated decision producing legal effects or similarly significant effects concerning them: for business prospecting, companies may be assessed, but individuals are not.

2.1. Contact form

First and last name, email address, phone number, company, nature of the need, indicative budget and timeline, message.

• Purpose: answering your enquiry and, where relevant, preparing a commercial proposal.
• Legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR).
• Retention: 3 years from the last contact.

2.2. Open application

First and last name, email address, phone number, field applied for, level of experience, motivation, availability and remote working preference.

• Purpose: considering your application and getting back to you.
• Legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR).
• Retention: 2 years from the last exchange, the period recommended by the French data protection authority for recruitment.

2.3. LumApps demonstration request

First and last name, email address, phone number, company, job title, company size, tools in place, indicative timeline and budget, message.

• Purpose: arranging the demonstration you asked for.
• Legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR).
• Retention: 3 years from the last contact.

2.4. Audience measurement

Pages viewed, referrer, device and browser type, truncated IP address.

• Purpose: understanding how the site is used in order to improve it.
• Legal basis: your consent (art. 6.1.a GDPR), collected before any tracker is set and revocable at any time from the cookies page.
• Retention: 13 months at most.

2.5. Business prospecting

• Data controller: ModalB (see section 1).
• Purposes: ModalB processes certain business data in order to identify companies and contacts likely to be interested in its services, to present to them its Microsoft 365 consulting and delivery, subcontracting and consultant placement offerings, and to follow up on business exchanges.
• Legal basis: this processing is based on ModalB's legitimate interest in developing its business with professionals, where the services offered are related to their position or professional activity.
• Data processed: last name, first name, job title, company, business email address, business phone number, address of a publicly accessible professional profile, source of the data and history of exchanges with ModalB. ModalB also processes information about the companies it prospects, in particular their sector of activity, their size and certain publicly accessible business information used to assess their potential interest in its services.
• Source of the data: the data may be provided directly by the person concerned, come from a prior business relationship, or be obtained from publicly accessible professional sources, in particular company websites, business directories, professional networks such as LinkedIn and the business press. The French SIRENE business register may also be used to identify and select companies likely to be interested in ModalB's services; it is not used as a source of individual contact details where these do not appear in it.
• Use of artificial intelligence: ModalB may use artificial intelligence tools to assist in drafting its business communications, preparing certain follow-ups and helping to sort replies. These tools are not intended to take, with regard to the persons prospected, any decision producing legal effects or similarly significant effects.
• Recipients and providers: the data is accessible to ModalB staff who need to know it for their sales duties and to providers acting on ModalB's behalf, in particular Scaleway for hosting and certain artificial intelligence processing, and Microsoft for Microsoft 365 email services. These providers process the data on ModalB's instructions under their contractual obligations.
• International transfers: some providers may process, or allow access to, certain data from countries outside the European Economic Area. Where such transfers take place, they are governed by the mechanisms provided for by the GDPR, in particular the European Commission's standard contractual clauses and, where applicable, the mechanisms recognised by the European Commission.
• Retention period: data relating to a prospect is kept for three years from its collection or from the last contact initiated by the prospect. Where a person objects to prospecting, their data used for prospecting is deleted and only a cryptographic hash of the contact detail concerned may be kept in an opt-out list, so that the request is respected on a lasting basis. This data is used for that purpose only. Data needed to manage a contractual relationship, to meet a legal obligation or to defend ModalB's rights may be kept for separate periods suited to those purposes.
• Your rights: you may object at any time, without giving reasons, to the use of your data for business prospecting, in particular through the unsubscribe link included in every message or by replying “STOP”. You may also request access to your data, its rectification, erasure or the restriction of its processing by writing to contact@modalbgroup.com. ModalB answers requests to exercise rights within the time limits set by the GDPR, as a rule within one month. You may also lodge a complaint with the French data protection authority, the CNIL (see section 6).

3. Recipients and processors

Your data is accessible only to the ModalB staff who need it. It is processed by the following providers:

• Amazon Web Services — site hosting (European Union).
• Microsoft — delivery and storage of form messages in our Microsoft 365 business mailboxes, and Microsoft 365 email used for business prospecting. The data is mainly hosted in the European Union, depending on the service configuration; some processing or access may involve transfers outside the European Economic Area, covered as set out below.
• Scaleway — hosting and artificial intelligence processing for business prospecting (France).
• Google — audience measurement, only if you have consented to it.

Some of these providers belong to companies established outside the European Union and may process, or allow access to, certain data from countries outside the European Economic Area. Where such transfers take place, they are governed by the mechanisms provided for by the GDPR, in particular the European Commission's standard contractual clauses and, where applicable, the mechanisms recognised by the European Commission, such as the EU–US Data Privacy Framework.

4. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of data concerning you, as well as the right to withdraw your consent at any time where processing relies on it.

To exercise these rights, write to contact@modalbgroup.com or to ModalB, 144 rue Paul Bellamy, 44000 Nantes, France. We reply within one month; proof of identity may be requested where there is reasonable doubt as to the identity of the person making the request.

5. Security

The site is served over HTTPS only. Messages from the forms travel through encrypted channels and are kept in business mailboxes with restricted access and strong authentication.

6. Complaints

If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the French data protection authority.

Authority

Commission nationale de l'informatique et des libertés (CNIL)

Address

3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France

Website

www.cnil.fr

7. Changes

This policy may change. The date of the last update appears at the bottom of this page; if a purpose changes, your consent to trackers is requested again.