Preamble
Moby Analytics prioritizes protecting personal data in accordance with GDPR (2016/679) and French Law 78-17 (1978). This Privacy Policy transparently explains how the company collects, uses, and shares personal data to provide quality services.
Article 1 – Definitions
- Informed Consent: free, specific, voluntary acceptance.
- Sensitive Data: racial/ethnic origin, political opinions, religious beliefs, union membership, genetic/biometric data, health information.
- Data Subject: identified or identifiable person.
- Processing: any operation on personal data.
- Third Parties: external partners.
- You/User: person whose data is collected.
Article 2 – Company Information
Moby Analytics is a simplified joint-stock company (RCS Paris 912 082 500), headquartered at 149 avenue du Maine, 75014 Paris. Contact: contact@mobyanalytics.com
Article 3 – Data Collection Methods
Data is collected directly when users visit the website, contact the company, create accounts, or use services. Indirect collection occurs through third-party partners (with authorization) and public databases (compliant with regulations).
The company acts as data controller for website visits and prospecting; as processor when clients use the Solution per general terms.
Article 4 – Personal Data Categories
Personal Data Collected
- Prospect/Client identification (name, email, images from demos)
- Solution user data (name, email, phone, photo, financial data, login logs)
- Information processed for clients (name, email)
User Administration Data
- First name, email address, preferred language
Article 5 – Legal Basis for Processing
Processing relies on: contract execution, legal obligation, legitimate interest (service improvement, client communication), or consent when required. The company conducts impact assessments for high-risk processing and does not perform fully automated decision-making with significant legal effects. Cookies are used with user consent.
Article 6 – Data Retention
Data is retained only as long as necessary for stated purposes. Processors maintain data only for defined purposes, legal compliance, and litigation defense (until prescription periods expire). Users are encouraged to keep data accurate through rights exercised for access and correction.
Article 7 – Data Security
Moby Analytics implements rigorous protection measures preventing accidental/illegal destruction, alteration, unauthorized access, and illicit use. Privacy-by-design principles are integrated; only authorized persons access data. Third-party processors are rigorously selected for security compliance. Data breaches trigger notification to affected persons and competent authorities within legal timeframes.
Article 8 – Data Subject Rights
- Right of Access: users can request access to personal information concerning them.
- Right to Portability: data can be provided in structured, machine-readable format for transfer to another controller.
- Right to Rectification: users may correct inaccurate or outdated data.
- Right to Erasure: deletion can be requested when data is no longer necessary, consent is withdrawn, processing is unlawful, or legal obligation requires it.
- Right to Restrict Processing: processing can be limited when accuracy is disputed, processing is unlawful, data is needed for legal claims, or opposition to processing is pending.
- Right to Withdraw Consent: consent can be withdrawn anytime without affecting lawfulness of prior processing.
- Right to Object: users may oppose processing, particularly for marketing or third-party sharing.
- Digital Legacy: users may establish directives for post-mortem data management.
To exercise your rights, contact Moby Analytics at contact@mobyanalytics.com or file a complaint with CNIL.
Article 9 – Data Sharing
Personal data is accessible only to Moby Analytics employees with legitimate need-to-know, under strict confidentiality.
Processors / Vendors
- Hosting and infrastructure: Azure Microsoft and GCP (EU servers)
- Authentication: Auth0
- CRM: Microsoft
- Database/analytics: Amplitude
- Communication: Microsoft, Slack
International Transfers: no data transfers occur outside the European Union.
Article 10 – Complaint Handling
Moby Analytics seriously addresses data protection complaints and examines potential policy/regulation violations, implementing reasonable measures to limit impact. Full cooperation with data protection authorities occurs; corrective measures address non-compliance.
Article 11 – Policy Application and Modifications
Moby Analytics reserves the right to modify this Policy for legal, regulatory, jurisprudential, and technological changes. Major modifications affecting legal bases, processing purposes, or user rights require written notice 30 days before implementation; continued solution use constitutes acceptance.
Acceptance: using the website, creating accounts, or using the solution constitutes acceptance of this Policy.