Charter of personal data of the company MAHDI HOLDING sro Slovakia
-
How is the data collected?
MAHDI HOLDING sro collects, through its activities, data, some of which make it possible to identify or make identifiable natural persons.
1.1. The legal basis of the collection
The legislation lists the legal bases for the collection of personal data, in other words the legitimate justifications for a data collection. These legal bases are explained and/or recalled in the context of the collections made by MAHDI HOLDING sro.
As such, MAHDI HOLDING sro is likely to collect personal data on the basis of: -
the consent of the person concerned ;
.in business-to-business relationships, the prior consent of the data subject is not required for commercial solicitations sent to the business email address as soon as these solicitations are related to the profession of the person in question. This tolerance is called the "BtoB exception". As the activities of the MAHDI HOLDING sro. are mainly carried out between professionals, the collections are often made following prior information.
.Prior consent is also not required for any solicitation sent to a data subject for services/products similar to those that this person would have already acquired from the same organisation. -
the performance of obligations under a contract ;
N.B.: The collection of personal data of our customers and users is necessary in order to execute the terms of the contract (e.g. subscription, subscription to an online service - free or paying,....) and to ensure the provision of the subscribed service or the product acquired by the natural person concerned. Thus, in this context, the consent of the individual is not necessary since the processing operations carried out are linked to the performance of the contract. The same applies to the transmission to identified third parties of personal data following a request for contact (recruitment, request for a quote or information, visitors to stands at a trade fair, participation in a webinar, etc.).
♦ the legitimate interest¹ of the data controller ;
N.B.: In order to develop its business, MAHDI HOLDING sro may offer you commercial offers on behalf of itself or its customers. In certain circumstances, the very nature of the service provided by MAHDI HOLDING sro implies the collection of personal data from its customers and users and the transmission of this information to third parties (e.g.: professional directories, targeted contact files). Of course, MAHDI HOLDING sro regularly assesses whether its legitimate interest is not counterbalanced by the interest of the person concerned or by the respect of his/her fundamental rights and freedoms and you can in any case oppose this type of use. -
a legal obligation making the processing mandatory.
N.B.: The regulatory context of an activity may make certain processing and transfer of data mandatory: e.g. for invoicing of products or services, training activities (attendance sheet), etc...
1.2. Methods of collection :
1.2.1. Collection through forms
Accessing, using, downloading, purchasing or subscribing to certain services or products implies the collection of personal data concerning the prospective client or user. In these cases, when filling in paper or electronic forms, people transmit information about themselves. These forms systematically specify
the name of the data controller,
the purposes associated with the collection made,
whether the collection is made necessary by the subscription to the service concerned or by the purchase of the product envisaged,
any other uses envisaged;
a reference to the relevant pages of this charter on the procedures for exercising rights by individuals, the contact details of the DPO, the rules concerning the duration of data retention, the procedures for lodging a complaint with the supervisory authority, etc...
1.2.2. collection through cookies
The term "cookies" is to be understood in the broadest sense: all traces deposited and/or read, for example, when consulting a website, reading an e-mail, installing or using software or a mobile application.
Cookies based on a file that can be stored on the user's computer during browsing are intended to simplify browsing on the sites (automatic authentication, personalisation of certain information, etc.) or to personalise the advertising that appears during users' browsing.
Some cookies are deposited by MAHDI HOLDINGsro directly during navigation on one of its sites. The user of the site may at any time oppose the use of these cookies by setting the parameters of his or her browser, it being specified that such settings may modify the conditions of access to products, content and services requiring the use of cookies.
Instructions on how to configure your browser are given in Appendix 2 of this policy.
In addition, other cookies are deposited by companies outside the MAHDI HOLDING sro company in order to collect users' navigation data during their navigation on different sites. MAHDI HOLDING sro works with some of these companies.
To help users detect the cookies that may be installed on their computers, some sites such as Your Online Choices offer tools to list and set your cookies.
The MAHDI HOLDING sro website mainly uses the following cookies:
Cookies for audience measurement :
Google Analytics (in classic or anonymous mode)
AT Internet (in classic mode and in anonymous mode without consent)
ACPM (official audience certification)
Mediametrie (official audience certification)
Hotjar (anonymous visualization tool of Internet users' navigation)
Kameleoon (AB testing tool to identify and test multiple versions of pages and measure their performance)
New Relic (Website monitoring tool to identify bugs, ...)
Advertising cookies :
Bing ads
Google ads
Facebook ads
Appnexus / Xandr
Smart Adserver
Zemanta / Outbrain
Video streaming cookies :
Chat / Instant messaging cookies :
Social network cookies :
For Facebook
For Twitter
For Linkedin
For Yahoo / Verizon
For Youtube / Google
Cookies and tracers that are strictly necessary for the provision of a service expressly requested by the user do not require the prior consent of users. Thus, for example, the following cookies do not require user consent:
shopping cart" cookies for a commercial site;
session ID cookies, for the duration of a session, or persistent cookies limited to a few hours in some cases;
authentication cookies;
session cookies created by a multimedia player;
load balancing session cookies;
certain audience measurement analysis solutions in anonymous mode, these cookies make it possible to obtain anonymous statistics on the number of visitors to our sites in order to optimise them and to detect any malfunctions. For this purpose we use AT Internet / Xiti and/or Google Analytics set to anonymous mode. If you wish to keep these data anonymous, block these audience measurement tools, for AT Internet / Xiti, see https://www.xiti.com/fr/optout.aspx and to deactivate Google Analytics, see https://tools.google.com/dlpage/gaoptout
persistent cookies for personalising the user interface (choice of language or presentation);
Chat cookies to respond to requests from users.
All other cookies require prior information and a request for consent, for example
cookies related to advertising operations;
social network cookies generated by social network sharing buttons when they collect personal data without the consent of the persons concerned;
certain audience measurement cookies (such as Google Analytics when not set to anonymous mode).
In accordance with the recommendations of the CNIL and, where applicable, the IAB Europe (for advertising purposes), by default, refusal of consent is assumed and these cookies and/or tracers are not deposited. The collection of consent is done by the appearance of a banner / popup visible on the website which must contain the following information
the precise purpose of the cookies used ;
the possibility of objecting to these cookies and changing the parameters by clicking on a link of the type "learn more" present in the banner/popup (with a reference to the present text and the appendix below);
the fact that only his consent is valid for the deposit of Cookies on his terminal.
In general, if the user shares his computer with other people, he must ensure that he deletes the cookies installed on his computer via the settings of his browser.
This banner/popup appears on your first visit to the site concerned, or when significant new players are introduced who collect personal data, or after one year after you have given your consent, or earlier if you have refused to give your consent (the time limit for the reappearance of this banner/popup depends on the type of site and the characteristics of its content and the traffic it generates)
Refusing to deposit cookies does not mean that you will no longer be solicited by advertising. It is just that advertisements cannot be chosen according to your interests or profile.
In addition, refusal may also prevent the website from providing all of the features normally offered, for which we cannot be held responsible.
At any time on our site, you can review and change your consent choices by clicking on the link at the bottom of each page of the relevant site. This link is usually called "cookie settings".
-
Collection by telephone
MAHDI HOLDING sro performs certain services by telephone and on this occasion may collect personal data. Where possible, telephone contact is confirmed by sending an email, thus allowing the person concerned to keep a written record of the conversation and to be able to exercise their rights at any time.
1.2.4. Indirect collection
MAHDI HOLDING sro may obtain personal data from public information or from deductions related to information already known, or from third parties. In such a case, MAHDI HOLDING sro :
2. What kind of information is collected?
Some of the information collected constitutes "Personal Data", i.e. data relating to individuals that allows them to be identified.
In accordance with the legislation in force, MAHDI HOLDING sro has adopted the principle of minimisation in the collection and only collects data that is strictly necessary for the objective pursued and explained to the natural persons concerned, leaving them full capacity to exercise their rights.
The personal data that may be requested, depending on the nature of the services or products provided, are the following:
Mainly :
Your name and contact details, including e-mail and postal addresses,
your job title,
your telephone and fax numbers,
where applicable for certain products and services :
the computer equipment used during browsing,
information relating to your professional background (CV, professional training, awards, etc.), your location data,
your connection and navigation data (IP addresses, logs) etc....
3. What is the purpose of the data collected?
3.1. Use of the data collected
MAHDI HOLDING sro may use the personal data in its possession, within the strict limits defined by the legislation in force, in order to
send commercial information relating to its products, promotions, offers, and other information relating to its products or services adapted to the interests of the persons concerned;
to transmit information on products and offers of third parties - customers or commercial partners of MAHDI HOLDING sro, in relation to the function and/or with regard to an interest identified in relation to the activity of the person concerned or that of the organisation to which he/she belongs;
publish paid directories of professionals and decision-makers in order to propose products and offers in relation to their functions and/or with regard to an interest identified in relation to the activity of the person concerned or that of the organisation to which they belong.
3.2 Methods of sending information
According to the coordinates which will have been collected, the MAHDI HOLDING sro company and its partners will be able to transmit information by the following means:
Text message sent to a person (SMS or MMS, notification, email, and/or any other form of electronic message);
Message via social networks;
Telephone ;
Postal mail;
Web promotional banner;
Internet search engine.
3.3 Purposes of the collection
The purpose of the collection is systematically indicated when it is directly carried out by MAHDI HOLDING sro and recalled at the time of the transfer of the data when the collection was carried out by a third party.
MAHDI HOLDING sro is likely to use a person's personal data in particular for the following purposes
In order to register him/her on its websites and/or information systems and to manage the delivery and invoicing of services/products provided by any MAHDI HOLDING sro company (including the processing of any searches or requests for information about us or about its products or services)
e.g. processing of orders or registration
In order to be able to carry out its obligations under any contract with the data subject and in the context of the management of such a contract:
E.g.: management of user access identifiers for software, access badges for a trade fair etc.
For the purpose of complying with its legal obligations;
E.g.: management of participation in a training session: keeping an attendance sheet
For the purpose of monitoring, critically examining and improving its product and service offering;
For the purpose of analysing connection and browsing data in order to deduce browsing behaviour and/or to adapt the content offered according to the affinities observed;
In order to keep files for internal administrative use (customer complaints, loyalty, etc.);
For commercial prospecting purposes on its behalf or on behalf of its commercial partners and advertisers, under the conditions defined below in the section "Use of collected data";
For the purposes of participation in competitions, lotteries or promotions.
4. How and for how long is the data stored?
Processing actions are carried out on the data contained in MAHDI HOLDING sro's databases, applying strict control rules, in accordance with the state of the art technology and the recommendations of the competent control authority.
4.1. Storage of personal data
MAHDI HOLDING sro takes all necessary precautions to preserve the security and confidentiality of personal data and in particular to prevent them from being distorted, damaged or accessed by unauthorised third parties.
The recommendations of the Commission Nationale Informatique et Liberté are taken into account in the management of security for the whole company.
4.2. Data retention and archiving
The period of retention depends on the activity concerned, the nature of the contact (customer, user or prospect) and the practices of the sector.
-
MAHDI HOLDING sro retains certain mandatory documents (invoices, etc.) for the legal retention period.
-
The retention period for the personal data of customers and users is set by default for the entire company MAHDI HOLDING sro for a period of 6 years after the last interaction between the person and us (Order, connection to their account, click on an email, …). Regarding the activities in the Automotive sector of MAHDI HOLDING sro, due to the specific lifespan of vehicles and the need to monitor the life of a vehicle over time (maintenance, repair, sale, etc.), the personal data related to vehicles (license plate, VIN, vehicle owner, etc.) are kept for 20 years.
-
Some data is retained for a shorter retention period:
Cookies expire thirteen months after their last update.
Prospect data is deleted beyond a period of 3 years without response to any request.
The CVs of candidates are kept for a period of 2 years.
-
The duration is sometimes linked to the relevance or the need for its processing: customer data is kept for the duration of the commercial relationship or the data present in the directories is kept for the duration of the mandates of the persons concerned.
4.3. Data relating to minors
Obviously, the activities of the company MAHDI HOLDING sro do not target minors as a public (trade fair, professional press, business software, job search, commercial prospecting).
Our products and services are aimed at major professionals, capable of entering into contractual obligations.
However, access to the site is not reserved for adults because it does not present any content prohibited to minors under the age of eighteen (18).
Therefore, we do not control whether our customer is a minor or not.
Overall, MAHDI HOLDING sro respects the recommendations of the CNIL (French Data Protection Authority) at the following address: .
4.4. Data relating to deceased persons.
You have the right to define directives concerning the fate of your Personal Data after your death.
To exercise this right, we invite you to send us an email:
With the subject "Post-mortem rights";
Indicate the person(s) who can act on your behalf in the event of your death, as well as the instructions you wish us to follow.
In the event that a user has died without having left instructions regarding the fate of his or her Personal Data after his or her death, the heirs of the deceased, providing proof of their identity, may request the closure of the deceased's User Account at infomhtrads@gmail.com.
To justify the validity of your request, you may be required to send us documents proving your identity and the legality of your request.
. Who should I contact for information?
MAHDI HOLDING sro has adapted its organisation in order to meet the requirements of the European Data Protection Regulation and to provide any person with any information on the personal data collected and on the processing carried out on these data.
6.1 exercising the rights of access, opposition, rectification and deletion
Any request related to the exercise of your rights must be sent to the address infomhtrads@gmail.com. This request must include as much information as possible (in particular the company, brand or service concerned by your request), so that it can be processed on receipt within a maximum period of one month (with some exceptions): for example, people must specify the e-mail address requested and for which they are sending the request in order to facilitate searches.
6.2 exercising the right to be forgotten
Any request concerning a personal data appearing in an article from a magazine published by MAHDI HOLDING sro must be sent to the following address: infmhtrads@gmail.com.
This request must indicate the reasons for the request so that we can balance your right to privacy with the right to freedom of expression, in accordance with Article 17.3.a of the GDPR. Once the deletion of data has been processed, any request to remove an article from a search engine must be made directly to the search engine by the person concerned.
7. Is the data transferred outside the EU?
If the company MAHDI HOLDING sro communicates the Personal Data to a MAHDI HOLDING sro or to a third party located outside the European Union, measures are taken to ensure that the said data will benefit from the same level of protection as that imposed by the European Union in terms of data protection.
As such, MAHDI HOLDING sro will ensure that the processing is carried out in accordance with this charter and that it is framed by the standard contractual clauses of the European Commission which make it possible to guarantee a sufficient level of protection of privacy and fundamental human rights.