Legal Notice

DATA PROTECTION POLICY

MODALIS attaches the greatest importance to the protection of personal data in accordance with the amended Data Protection Act and the General Data Protection Regulation. (GDPR).

This document presents the data protection policy implemented within the organisation both for the collection, storage and processing of data and for exchanges with third business parties.

MODALIS is committed to collecting, processing and retaining personal data for specific, legitimate and relevant purposes, in accordance with the applicable legal bases.

MODALIS keeps an up-to-date register of the processing activities carried out under its responsibility, describing :

• The name and contact details of the data controller,
• The purposes of the processing,
• The description of the categories of data subjects,
• The categories of recipients,
• The time limits for the deletion of the various categories of data,
• A general description of the technical and organisational security measures.

MODALIS fulfils its obligations relating to the right to information and access to data in accordance with articles 13 to 21 of the General Data Protection Regulation. (GDPR).

The persons concerned may exercise their rights by writing to MODALIS 345 rue Louis de Broglie 13100 Aix-en-Provence or by sending an e-mail to rgpd@modalis.com with proof of identity.

MODALIS staff are regularly made aware of the principles of data protection as well as the risks linked to freedoms and privacy. Our company has an IT policy and our staff, subject to professional secrecy, has signed a confidentiality agreement.

Each user is authenticated; the complexity of the passwords complies with the recommendations of the CNIL as well as the procedure and frequency of modification.
Authorisation profiles are set up to limit access to only the data that a user needs.
The internal computer network as well as the servers and workstations are secured by passwords and are equipped with firewall software as well as regularly updated anti-virus software.
Data backups are regularly carried out on NAS and in the cloud, enabling data to be restored as part of a formalised disaster recovery plan.

MODALIS only uses subcontractors with sufficient guarantees.
Exchanges of data with subcontractors are governed by an agreement describing the obligations in accordance with the General Data Protection Regulation.

Access to the premises is protected by access control and anti-intrusion alarm. The premises are protected by smoke detectors and have fire-fighting equipment.