MG Tech corporate website privacy policy

3. WHAT PROCESSES ARE IMPLEMENTED ON YOUR PERSONAL DATA?

3.1. What Personal Data about you is processed by MG TECH?

The list of Personal Data processed for each of the purposes described above is provided in the table attached in Appendix 1.

Sensitive data, such as health or disability data, declared by an applicant, is collected and stored only if required by law, regulation, or court order, and is used and disclosed only to the extent necessary to fulfill these obligations.

3.2. How is your Personal Data collected?

We collect your Personal Data in the following ways:

• directly from you when you use our Website and services: request for commercial information via the contact form, request for customer service information, subscription to our newsletter, submission of an application for a job (CV and cover letter);
• automatically when you access or use the Website (technical data, IP address, browsing information, etc.).

3.3. Are you required to provide your data?

The data required by MG Tech to achieve the objectives described below is indicated by an asterisk on our forms. If you do not complete these mandatory fields, we will not be able to provide you with the requested services or process your request.

Data not marked with an asterisk is optional: it allows us to improve the services we offer.

3.4. What are the purposes and legal bases for processing your personal data?

In accordance with applicable data protection regulations, we only collect personal data when we have a legal basis for doing so.

The processing carried out is intended to enable:

1. The management of your requests and other questions submitted via the contact form, based on MG Tech's legitimate interest;
2. The management of your subscription to our newsletter, based on your consent;
3. The management of your applications for MG Tech job offers, based on the performance of pre-contractual measures and the establishment of the contractual relationship between MG Tech and candidates for employment, apprenticeships, or internships;
4. The management of the website's cybersecurity, in order to fulfill MG Tech's legitimate interest in ensuring the security of the website and its visitors;
5. The prevention of fraudulent activity, in order to fulfill MG Tech's legitimate interest in ensuring the security of our assets and content;
6. The management of MG Tech's defense of its interests in the event of a dispute or legal action.

3.5. Who has access to your personal data?

• Accessibility within MG Tech

A detailed list of individuals with access to your Personal Data is provided in the table attached in Appendix 1.

Generally, your Personal Data is accessible:

• Within the MG Tech group:
  • Marketing & Communication Department for managing your sales inquiries and newsletter subscriptions;
  • Sales and Sales Administration Department for managing your sales inquiries;
  • Human Resources Department for managing your applications for job openings related to MG Tech's activities;
  • Customer Service Department for managing your after-sales service requests.
     

• To third parties, including:
  • our subcontractors and service providers involved for technical and logistical reasons (website hosting, security, and maintenance providers; fraud management providers; technical providers responsible for sending emails and newsletters; anti-spam and anti-bot service providers; recruitment agencies that may advise us on managing our candidate databases and assist us in selecting profiles from these databases);
  • any authority, jurisdiction, or other third party when such disclosure is required by law, regulation, or court order, or if such disclosure is necessary to protect and defend our rights.

3.6. How long is your Personal Data kept?

Details of the retention periods for your Personal Data by MG Tech are provided in the table attached as Appendix 1.

Your Data is retained for the entire duration necessary for the purpose for which it was collected and, in any event, will be destroyed at the end of this period.

3.7. Transfers of Personal Data outside the European Economic Area

Your Data is processed in France by MG Tech. However, we may use certain service providers located abroad or who themselves use subcontractors located abroad, including outside the European Economic Area (“EEA”) in countries whose data protection regulations differ from those applicable within the EEA.

Any transfer of your personal data outside the European Economic Area (EEA) will be governed by appropriate technical and organizational measures, in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR).

When data, including application data, is likely to be transferred to entities located outside the EEA, MG Tech undertakes to implement appropriate safeguards, such as:

• standard contractual clauses approved by the European Commission, or
• Binding Corporate Rules (BCRs) where applicable.

A copy of the applicable warranties can be provided upon request.