1. Data controller
Pursuant to EU Regulation 2016/679 (GDPR), the data controller is: MAGNAF SAS – 112 rue de Rochopt, 91800 Boussy-Saint-Antoine, France
GDPR contact: contact@magnaf.eu
2. Data collected
| Category | Data collected | Purpose |
|---|---|---|
| Identification | Name, surname, company name, SIRET, VAT number | Contract performance, legal obligations |
| Contact | Email, phone, postal address | Commercial communication, invoicing |
| Banking | IBAN (for payments) | Payment execution |
| Browsing | IP address, technical cookies | Website operation |
We do not collect any sensitive data within the meaning of Article 9 of the GDPR.
3. Legal bases
- Contract performance (Art. 6.1.b GDPR)
- Legal obligation (Art. 6.1.c GDPR): accounting, tax and AML obligations
- Legitimate interest (Art. 6.1.f GDPR): service improvement, B2B prospecting
- Consent (Art. 6.1.a GDPR): non-essential cookies
4. Retention periods
| Data type | Retention period |
|---|---|
| Transaction / invoicing data | 10 years (accounting obligation) |
| Commercial contact data | 3 years after last contact |
| Banking data | Duration of contract + 5 years |
| Connection logs | 12 months |
5. Your rights
Under the GDPR (Articles 15 to 22), you have the right of access, rectification, erasure, restriction, portability and objection. To exercise these rights, contact us at contact@magnaf.eu. You may also lodge a complaint with your national supervisory authority.
6. Data security
We implement appropriate technical and organisational measures to protect your data in accordance with Article 32 of the GDPR, including HTTPS/TLS encryption and hosting with OVHCloud (ISO 27001 certified).