Meelo’s personal data protection policy

We are a company specializing in the development of IT tools to combat fraud and the risk of unpaid debts. We offer our clients scoring solutions that meet their risk management needs, hereinafter the “Clients”.

As such, we are required to process the personal data of their customers.

In this context, we can use the services of subcontracting partner companies, hereinafter the “Partners”. It is specified that the Partners may have access to certain personal data of said customers.

We also process the personal data of users of our website.

Persons whose personal data are processed by Meelo, or its Partners, are hereinafter referred to as “Persons”.

As part of our activity, we act as a subcontractor of our Clients when the processing of personal data is carried out exclusively on their instructions and according to the purposes they have defined.

We also act as Data Controller for the processing of personal data for which we determine the purposes and means implemented for these purposes, in the context of certain processing carried out in connection with the requests of our Clients, processing made on our website, as well as in our relations with our Partners.

(Download Meelo’s GDPR Policy )

Purpose of the Policy

The purpose of this personal data protection policy, hereinafter the “Policy”, is to describe our commitments to protect the confidentiality of the personal data that we process in the course of our activity.

It explains how we collect, use and protect People's data in connection with applicable data protection laws, and particularly European Regulation 2016/679 on data protection of April 27, 2016 as well as law 78-17 relating to it. to computing, files and freedoms of January 6, 1978 amended.

“Personal data” or “personal data” is defined in Article 4 of the General Data Protection Regulation as any information likely to allow the identification of a natural person directly or indirectly.

Scope

The Policy applies to Persons whose data is subject to data processing, by Meelo or, where applicable, by its Partners. 

The use of our website as well as the use of our services implies acceptance by Individuals of the terms of the Policy.

Processing implemented by Meelo as Data Controller 

When carrying out an operation from our website (request for information on the services we offer, request to exercise rights, response to a job offer or spontaneous application, etc.) the data of the People is subject to processing by Meelo.

  • Data collected

The data collected by Meelo in the contact form is as follows:

Name, First name, Email, Telephone number, company name, and the subject of the request. You also have the possibility to contact us via Chat, we undertake to collect in the context of exchanges the data strictly necessary for the objective pursued.

  • Purposes

The personal data collected is used to respond to your requests.

  • Legal basis

The legal basis for processing is defined in Article 6 (1) of the General Data Protection Regulation, namely the consent of Individuals when they contact us directly.

  When carrying out processing in connection with our Clients' requests, when we jointly, or where applicable, separately define the purposes and means of processing People's data. 

When carrying out an operation from our Clients' computer systems, People's data are processed by Meelo in order to reinforce the level of security of the operation, to protect their personal data against possible attempts at fraud, to support them in their decision-making.

In this context, we only collect the data necessary to provide our anti-fraud and scoring services, to meet the needs of our Customers. In this context, the means and purposes can be defined jointly with our Clients. 

Our Customers undertake to inform People of the collection of their data by Meelo, the purposes of the processing and the rights they have by referring to the Policy. The data collected by Meelo is stored securely and is only used for the specified purposes.

  • Data collected 

As part of our relationships with our Customers, the data collected by Meelo is as follows:

-Name, first name, email address and telephone number of the Persons, if applicable;

-Information relating to their company or organization if applicable;

-Information relating to the use of our services, including connection data, usage statistics and information relating to the devices you use to access our services.

  • Purposes

The personal data collected is used for the following purposes:

– To meet the needs of our Customers in order to strengthen the level of security of the operation, to protect the personal data of People against possible fraud attempts, to support them in their decision-making.

– To improve and personalize our services;

– To communicate with our Customers about our services;

– To respond to requests and questions addressed to us;

– To resolve problems and disputes relating to the use of our services.

  • Legal basis

The legal basis for processing is defined in Article 6 (1) of the General Data Protection Regulation, namely the legitimate interest pursued by Meelo and its Clients in the context of the use of anti-fraud solutions. and the risk of non-payments.

Processing implemented by Meelo as subcontractor of its Clients

When carrying out an operation from our Clients' computer systems, People's data are processed by Meelo in order to reinforce the level of security of the operation, to protect their personal data against possible attempts at fraud, to support them in their decision-making.

In this context, we act exclusively on the instructions of our Clients and according to the purposes they have defined.

We only collect data necessary to provide our anti-fraud and scoring services, in accordance with our Clients' instructions.

Our Customers undertake to inform People of the collection of their data by Meelo, the purposes of the processing and the rights they have by referring to the Policy. The data collected by Meelo is stored securely and is only used for the specified purposes.

  • Data collected

As part of our relationships with our Customers, the data collected by Meelo is as follows:

– Name, first name, email address and telephone number of the Persons, if applicable;

– Information relating to their company or organization if applicable;

– Information relating to the use of our services, including connection data, usage statistics and information relating to the devices you use to access our services.

  • Purposes

The personal data collected is used for the following purposes:

– To meet the needs of our Customers in order to strengthen the level of security of the operation, to protect the personal data of People against possible fraud attempts, to support them in their decision-making.

– To improve and personalize our services;

– To communicate with our Customers about our services;

– To respond to requests and questions addressed to us;

– To resolve problems and disputes relating to the use of our services.

  • Legal basis

The legal basis for processing is defined in Article 6 (1) of the General Data Protection Regulation, namely the legitimate interest pursued by Meelo and its Clients in the context of the use of anti-fraud solutions. and the risk of non-payments.

  • Data source

Information is collected from People through the Client, as well as from Meelo Partners in the case of data enrichment services, where applicable. 

Information exchange

We do not sell the processed personal data. We may nevertheless share certain information with third parties in the following cases:

– When necessary or legitimate to provide the services requested by our Customers;

– When we have obtained the consent of the people whose data is processed in order to share them with third parties;

– When we are required to disclose the processed data pursuant to a court order, subpoena or other similar legal request.

In such cases, we ensure that these third parties also comply with the confidentiality and data security obligations in accordance with the provisions of the General Data Protection Regulation.

Data transfers

In the event of data transfer outside the European Union, or to countries without an adequacy decision by the European Commission, we undertake to apply the standard data protection clauses adopted by the European Commission.

Data security

We implement appropriate security measures to protect personal data against unauthorized access, loss, disclosure or destruction. These measures include the use of security protocols, firewalls and data encryption, as well as restricting access to only authorized persons who need to access the data.

Liability and subcontracting

We undertake as a Subcontractor to respect the rights of Individuals concerning their personal data and to put in place appropriate technical and organizational measures to ensure compliance with the General Data Protection Regulation.

As Data Controller, we may use Partners to facilitate our operations and provide our services. These Partners act as subcontractors, and as such may have access to personal data as part of their services.

We undertake to carefully select our Subcontractors and take appropriate measures to ensure that they comply with the confidentiality and data security obligations in accordance with the provisions of the General Data Protection Regulation.

Before sharing personal data with a subcontractor, we will ensure that a data processing contract is in place, including specific clauses to ensure compliance with the General Data Protection Regulation and the protection of rights of the people concerned.

We will ensure that our Subcontractors process personal data only in accordance with our instructions, and that appropriate measures are put in place to protect such data and ensure its confidentiality and security.

In the event of a data breach by one of our subcontractors, we will take the necessary measures to remedy the situation as quickly as possible and will inform the persons concerned and the competent supervisory authority in accordance with the legal obligations in force. .

People 's Rights

We recognize the rights of Individuals over their personal data, such as:  

  • The right of access:

Individuals can obtain a copy of all of their data processed by Meelo, as well as information relating to the characteristics of the processing carried out on their data.

  • The right of rectification:

Individuals may obtain the rectification and/or completeness of their inaccurate and/or incomplete data.

  • The right to erasure:

People can obtain the erasure of their data when:

– these data are no longer necessary for the purposes for which they were collected,

– in the event of exercising the right to object to the processing concerned,

– if the processing concerned is unlawful. However, this right does not apply when the retention of data is necessary for Meelo to comply with a legal obligation or for the exercise of legal rights;

  • The right to restriction of processing:

Individuals can obtain a limitation of the processing of their data when they contest its accuracy

  • The right to portability:

Individuals can obtain the data they have communicated to Meelo, in a structured, commonly used and machine-readable format, as well as their transmission by Meelo to another service provider when technically possible.

  • The right to object:

Individuals may ask Meelo, for reasons relating to their particular situation, to cease processing of their data for the purposes of pursuing its legitimate interests. Meelo will then cease this processing unless it can justify that its legitimate and compelling interests take precedence over the rights and freedoms of People.

Contact

If you have any questions or concerns regarding this Privacy Policy, or would like to exercise your rights with Meelo, please contact our DPO, at dpo@getmeelo.com .

Shelf life

We keep personal data for a period of 90 days from their collection, at the end of this period they are then deleted.

Our Clients have the option of deleting said data before 90 days from the moment one of their clients requests it, in accordance with regulations.

Modification of the Policy

We reserve the right to modify this Policy at any time. Changes will be effective immediately after they are posted on our website.

Updated 12/26/2024