Privacy policy

PRIVACY POLICY AND PERSONAL DATA

DEFINITIONS

Privacy Policy concerns the personal data.
« Personal data » means any information relating to an identified or identifiable natural person. For the purposes of this definition, an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

« Applicable Data Protection Legislation » means any data protection regulations that may apply in the context of the Personal Data Processing operated and in particular:

• Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (RGPD) as amended
• The law of January 6, 1978, known as the « Data Protection Act » as amended

« Controller » means the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of Processing Personal Data

« Processor » means a legal entity that processes Personal Data on behalf of the Controller.

« Processing » means any operation or set of operations, whether or not carried out by means of automated processes and applied to Personal Data or sets of Personal Data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, limitation, erasure or destruction.

« Data Breach » means any security incident, whether malicious or not and whether intentional or unintentional, that results in the compromise of the integrity, confidentiality or availability of personal data.

WHAT PERSONAL DATA IS COLLECTED BY MAGELLIUM SAS VIA ITS WEBSITE?

Browsing on the website https://earthobservation.magellium.com leads to the collection of Personal Data relating to browsing, i.e. web time stamps, IP addresses of users, technical data relating to the equipment and browser used by users.

Apart from the above-mentioned Processing, only the Personal Data that you communicate to MAGELLIUM SAS in the context of the information requests are processed by MAGELLIUM SAS.

WHAT ARE THE TERMS AND CONDITIONS OF THE PERSONAL DATA PROCESSING CARRIED OUT ?

The terms and conditions (data concerned, purposes, legal basis, retention period, etc.) relating to each Processing of Personal Data (excluding connection data) are specified under each section of the https://earthobservation.magellium.com website requiring the transmission of Personal Data.

In general, the Personal Data collected via the website https://earthobservation.magellium.com are necessary for the following purposes :

• enabling MAGELLIUM SAS to respond to your messages/requests for information
• the legitimate interest of MAGELLIUM SAS in order to ensure the security of the website https://www.earthobservation.magellium.com

WHAT IS THE LEGAL BASIS FOR THE PROCESSING CARRIED OUT?

The legal basis for each Processing of Personal Data is specified under each heading of the https://earthobservation.magellium.com website requiring the transmission of Personal Data.

In general, the Processing of Personal Data communicated via the website https://earthobservation.magellium.com is based on the following legal grounds :

• the legitimate interest of MAGELLIUM SAS, which consists in an appropriate communication and exchange of information between you and MAGELLIUM SAS
• your consent, which you may withdraw at any time, without affecting the lawfulness of processing based on this consent prior to its withdrawal
• the legitimate interest of MAGELLIUM SAS in order to ensure the security of the site https://earthobservation.magellium.com

HOW LONG IS MY PERSONAL DATA KEPT?

The length of time Personal Data is kept is specific to each Processing.

For example :

• In the context of requests for information via the contact form, your Personal Data will be kept for a maximum period of 12 months from the last contact with you
• Connection data is kept for a maximum of 1 year

In general, your Personal Data will only be kept for the time necessary to achieve the purpose for which it was collected or to comply with the legal obligations of MAGELLIUM SAS.

IN WHICH COUNTRIES ARE MY PERSONAL DATA PROCESSED ?

The https://earthobservation.magellium.com website is hosted in France on the internal servers of MAGELLIUM SAS located at 1 rue Ariane – 31520 Ramonville Saint-Agne (France).

If your Personal Data is transferred outside the European Union, you will be informed of this and organizational and technical measures will be taken to ensure an adequate level of protection for your Personal Data, in particular by setting up Standard Contractual Clauses approved by the European Commission.

WHO HAS ACCESS TO MY PERSONAL DATA?

The recipients of your Personal Data are mainly authorized employees of MAGELLIUM SAS based in France and subject to an obligation of confidentiality.

Your Personal Data is intended for internal use within MAGELLIUM SAS. Any MAGELLIUM SAS employee who accesses this information is informed of its confidential nature.

If necessary, your Personal Data may also be shared with the other companies making up MAGELLIUM ARTAL GROUP, namely :

• FINANCES GESTION & DEVELOPPEMENT SAS (R.C.S. TOULOUSE 528 808 561)
• ARTAL TECHNOLOGIES SAS (R.C.S. of TOULOUSE 419 472 493)
• MAGELLIUM SAS (R.C.S. TOULOUSE 450 550 991)
• ACT21 SARL (R.C.S TOULOUSE 497 716 191)

In certain cases, MAGELLIUM SAS may call upon external suppliers and partners with whom MAGELLIUM SAS may share Personal Data for specific purposes that are indicated to you at the time of collection of your Personal Data.

MAGELLIUM SAS pays particular attention to the choice of its subcontractors.

MAGELLIUM SAS implements the necessary means to ensure that its subcontractors present appropriate guarantees to ensure the security and confidentiality of Personal Data.

WHO IS THE DATA CONTROLLER ?

The Data Controller is MAGELLIUM, a Société par Actions Simplifiée (simplified joint stock company), whose registered office is located at 1 rue Ariane – 31520 Ramonville Saint-Agne, registered in the Toulouse Trade and Companies Register under number 450 550 991.

WHAT IS THE POLICY OF MAGELLIUM SAS REGARDING COOKIES?

The website https://earthobservation.magellium.com does not generate cookies or use technologies that perform functions similar to those of cookies, such as web beacons.

HOW ARE MY PERSONAL DATA PROTECTED ?

MAGELLIUM SAS implements all reasonable measures under the principles of privacy by design and privacy by default in order to implement the necessary safeguards and to secure the Processing of Personal Data.

MAGELLIUM SAS implements adequate technical and organizational measures to protect Personal Data against accidental or unlawful alteration or loss or against unauthorized use, disclosure or access. To this end, MAGELLIUM SAS has drawn up an Information Systems Security Policy, an IT charter as well as internal provisions and procedures relating to the processing of Personal Data.

WHAT ARE MY RIGHTS?

In accordance with the applicable Data Protection Legislation, you have rights to your Personal Data, which you can exercise at any time and free of charge.

You are entitled to access all your Personal Data, and in some cases to have them corrected (inaccurate, incomplete data), deleted, or to ask to temporarily limit their use, to object to being the subject of an automated individual decision (including profiling). You also have the right in certain cases to the portability of the Personal Data you have provided.

Requests should be addressed to the Data Protection Officer of MAGELLIUM SAS: magelliumartalgroup.rgpd@magellium.fr

You may also file a complaint with the CNIL (online https://www.cnil.fr/fr/ plaintes or by mailing address CNIL – service des plaintes – 3 place de Fontenoy – TSA 80715 – 75334 Paris cedex 07) or any relevant personal data protection authority.

HOW TO CONTACT THE DATA PROTECTION REFERENT OF MAGELLIUM SAS ?

If you have any questions or would like further information about the Processes implemented, you can contact the MAGELLIUM SAS Data Protection Officer at the following address: magelliumartalgroup.rgpd@magellium.fr.

UPDATES

These provisions may be updated at any time. MAGELLIUM SAS invites you to consult them regularly.