Privacy Policy

Maha Private Office SARL

The present policy, edited on 13/10/2023, has been updated on 4/10/2024.

 

Article 1 – Preamble

The purpose of this privacy policy is to inform site users, customers and suppliers :

  • how their personal data is collected. Personal data is any information that can be used to identify an individual. This may include, but is not limited to: first and last names, age, postal or e-mail address, location or IP address;
  • the rights they have concerning this data;
  • who is responsible for processing the personal data collected and processed;
  • the recipients of this personal data;
  • the site’s cookie policy.

This policy supplements the legal notice and the Terms of Service, which can be consulted by users on the dedicated page: see the legal notice page.
 

Article 2 – Compliance with the law and legal basis

This privacy policy describes the manner in which the personal data of website users, customers and suppliers is collected and used, in accordance with European standards on the protection of privacy and personal data, in particular European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, known as the RGPD.

The legal bases for data processing are:

  • consent: cookies, purchasing goods and services, sending newsletters and creating customer accounts;
  • performance of the contract: purchase of goods or services;
  • legitimate interest: customer service management, relations with suppliers, prospecting, use of necessary cookies, business development, IT security management;
  • legal obligations: invoicing, bookkeeping.

 

Article 3 – Personal data collected and processed

3.1 Data collected and purposes of data processing

Personal data collected as part of the company’s activities Maha Private Office SARL are as follows :

  • Name
  • Email address
  • My website navigation data (cookies)

This data is collected and processed for the following purposes:

  • Access to and use of the site by the user
  • Managing site operation and optimization
  • Statistics, analysis and audience measurement
  • Verification, identification and authentication of data transmitted by the user
  • Prevention and detection of fraud, malware and security incident management
  • Contacting us and requesting information
  • Improving and optimizing the quality of our offers and website
  • The sending of newsletters and free information
  • Customer file follow-up and customer relationship management
  • Carrying out or supplying subscribed offers
  • Billing and quotation management
  • Satisfaction survey on my offers
  • Managing people’s rights and requests to exercise them
  • Managing any disputes with users

 

3.2 Data collection mode

Personal data is automatically collected and processed for commercial, statistical and forward-looking purposes during :

  • create a customer account
  • making an appointment
  • use of the contact form
  • drawing up an estimate or invoice

Personal data will not be processed according to unlawful discriminatory criteria and will comply with the laws in force.

Personal data will be stored by the data controller in reasonable conditions of security:

  • Commercial data is kept for a period of 3 years from the end of the contractual relationship;
  • Payment details are kept for the duration of the transaction, or 13 months in the case of payment in instalments;
  • Data relating to invoices over €120 is kept for 10 years, and for invoices under €120 for 5 years.

These periods are maximums; data may be deleted or modified at the request of the website user, customer or supplier.

The retention of certain personal data may exceed the above-mentioned periods in order to meet certain legal, regulatory or judicial obligations.

 

3.3 Transmission of data to third parties

Personal data may be shared with third-party companies for the purposes of providing, distributing, advertising and executing services and selling products.

For example, data may be passed on to our partners, listed below:

  • WordPress
  • Google Analytics

 

3.4 Cookie policy

Cookies and other tracers may be installed and read on the user’s terminal when visiting the website. The cookies placed on the website enable us to personalize content, analyze traffic, compile usage statistics and improve the user experience.

Some cookies, such as :

  • Technical and functional cookies which are necessary for the operation of the website;
  • Certain audience measurement cookies or cookies that enable us to test different versions of the website for the purpose of optimizing editorial choices.

The free acceptance or refusal of the cookies listed below is subject to the user’s express consent:

  • Advertising, social networking and content personalization cookies
  • Audience analysis cookies.

The user’s choice to accept or refuse cookies will be kept for a period of six (6) months.

Users are free to withdraw their consent and, more generally, to modify their preferences at any time by contacting the data controller.

Your consent applies to the following areas: mahaprivateoffice.ch

The list of cookies used is available by clicking on the floating consent review button at the bottom left of the site pages during your visit.

Browser settings :

You can set your browser to accept or reject certain cookies.

By way of illustration, each browser offers different configuration options:

  • Chrome: go to the “Settings” menu, then to “Privacy and Security” and finally to “Authorization” and “Cookies and site data”;
  • Safari: go to “Settings”, then Safari, then “Privacy and Security” and finally “Block all cookies”;
  • Iphone: go to the “Settings” menu, then “Safari”, then “Cookies” and finally “Block all cookies”;
  • Android: go to the “Chrome” menu, then to the tab at the top right of the screen, then to “Site settings” and then to “Cookies”. You can then choose to accept or block cookies.

In accordance with CNIL recommendations, cookies are kept for a maximum of thirteen (13) months after they are first deposited in the website user’s terminal, as is the period of validity of the website user’s consent to the use of these cookies. The lifetime of cookies is not extended with each visit. The website user’s consent must therefore be renewed at the end of this period.

 

Article 4 – Recipients

The company Maha Private Office SARL is the recipient of personal data.

No personal data is sold, rented or passed on to third parties. The company Maha Private Office SARL does not outsource personal data.

However, certain personal data is transmitted to third-party partners mentioned in Article 3.3, for the purposes of providing and executing services and product sales.

 

Article 5 – Consent

Website users, customers and suppliers must give their consent to the collection and processing of their personal data in order to benefit from the services and products of Maha Private Office SARL.

The rights of the website user, customer and supplier with regard to the collection and processing of personal data are specified in Article 7.

 

Article 6 – The data controller

Personal data are collected byMaha Private Office SARL, whose IDE number is CHE-265.263.333.

The data controller can be contacted as follows:

  • By post to : Stéphanie Monier – Maha Private Office SARL – Chemin de la montagne, 120 – 1224 Chêne-Bougeries (Switzerland)
  • By telephone, on +41 78 222 16 87
  • By Email : [email protected]

 

Article 7 – The rights of website users, customers and suppliers with regard to data collection and processing

All website users, customers or suppliers concerned by the processing of their personal data may avail themselves of the following rights:

  • Right of access, rectification and right to erasure of data (laid down respectively in Articles 15, 16 and 17 of the RGPD);
  • Right to data portability (Article 20 RGPD);
  • Right to limit (Article 18 of the GDPR) and object to data processing (Article 21 of the GDPR);
  • Right not to be subject to a decision based exclusively on an automated process;
  • Right to determine the fate of data after death ;
  • Right to refer the matter to the competent supervisory authority (Article 77 of the RGPD).

To exercise these rights, the request should be addressed to the data controller mentioned in Article 6.

In order for the data controller to process the request, the website user, customer or supplier may be required to provide certain information, such as first and last names, e-mail address and account, personal space or subscriber number.

Visit cnil.fr for more information on your rights.

 

Article 8 – Security and confidentiality

The site implements organizational, technical, software and physical digital security measures to protect personal data against alteration, destruction and unauthorized access. However, it should be noted that the Internet is not a completely secure environment, and the site cannot guarantee absolute security for the transmission or storage of information over the Internet.

 

Article 9 – Conditions for modifying the privacy policy

The company Maha Private Office SARL reserves the right to modify these terms and conditions at any time in order to ensure compliance with applicable law for website users, customers and suppliers.

The user of the website, the customer and the supplier are invited to take cognizance of the present each time they use the services and products of the company Maha Private Office SARL, without it being necessary to formally notify them.

 

Sample Privacy Policy provided by Adam Strangelaw and translated via Deepl