Privacy Policy

1. Data controller

The controller of personal data is:

2. Scope

This policy covers two distinct services:

• The maisonmajellan.com website : presentation, shop, customer account and subscription tracking.
• The Majellan mobile app (iOS and Android): activating and setting up your card, shareable profiles, contact directory, usage statistics and the member map.

Processing is not the same from one service to the other. Each section states which one it concerns.

3. Data collected on the site

• First name and surname
• Billing and delivery address
• Email address and telephone number
• Payment details, processed directly by Stripe: we neither receive nor store your bank card number
• Order history and the status of your subscription
• IP address, browser and device type, pages viewed

4. Data collected in the app

• Account : email address, user ID, and where applicable the identifier of the authentication provider used (Apple or Google)
• Shareable profiles : the information you choose to enter, in particular name, role, company, contact details, links to your social networks and website, photograph
• Directory : the contact details of the people you have exchanged with, together with the date of the exchange
• Usage statistics : the number of times your card has been shared and the number of views of your profile link
• Technical data : device model, system version, installation identifier, error logs
• Approximate location : see section 5, which is devoted entirely to it

The app never asks for your precise location. Nor does it ask for access to your phone’s address book: the contacts in your Majellan directory come solely from exchanges made with your card.

5. Approximate location and the member map

The app offers a member map : a world map on which verified members who have agreed to it appear to one another. This is the only purpose for which we ask for your location. This section sets out precisely what that involves, as it is the most sensitive processing we carry out.

What we collect

Only an approximate location, at neighbourhood scale or wider. We do not collect, transmit or store precise GPS coordinates. On Android, the app declares only the approximate location permission. On iOS, it requests reduced accuracy.

Who your position is shown to

If, and only if, you switch on the member map, your approximate position becomes visible to other verified members of Majellan, inside the app. It is never made public, never accessible without an account, never indexed by search engines, and never sold.

Your control

• The member map is optional and switched off by default. Nothing is collected until you have switched it on.
• You can switch it off at any time from the app settings. You then disappear from the map immediately.
• You can also withdraw the location permission from your phone’s settings.
• All other functions of the app remain fully usable if you decline: card sharing, profiles, directory, statistics, notifications. Declining places no limit on the service you subscribed to.

Legal basis

Your consent, within the meaning of Article 6(1)(a) of the GDPR, and of Article 82 of the French Data Protection Act, which governs access to information stored on your device. This consent is freely given: you may refuse or withdraw it with no consequence for the rest of the service.

Retention period

Your approximate position is kept for as long as you take part in the member map. As soon as you switch it off, or at the latest thirty days after it is switched off or your account is deleted, it is erased from our servers.

We also produce aggregated statistics by city or by region, which cannot identify you. These statistics are not erased, since they no longer constitute personal data.

6. Purposes and legal bases

• Processing your orders, your subscription and your payments — performance of the contract
• Activating and running your card, your profiles and your directory — performance of the contract
• Showing you on the member map and showing you the other members — consent
• Sending you notifications related to your card — performance of the contract, or consent for non-essential notifications
• Sending you our newsletter — consent, revocable through the unsubscribe link
• Measuring audience and correcting technical faults — legitimate interest, or consent where trackers are placed
• Preventing fraud and securing the service — legitimate interest
• Meeting our accounting and tax obligations — legal obligation

7. Recipients

We do not sell any personal data. It is disclosed only to:

• Other verified members, for your approximate position if you have switched on the member map, and for the profile information you choose to share during an exchange
• Stripe (Stripe Payments Europe Ltd, Ireland) for payment and subscription management
• IONOS (Sarreguemines, France) for hosting the site
• OVH (Roubaix, France) for hosting our application servers
• Brevo (Sendinblue SAS, Paris, France) for sending our messages
• The map tile provider used by the app, which receives the requests needed to display the map
• Apple and Google for distributing the app and, where applicable, authentication and notifications
• Any authority legally entitled to obtain disclosure of it

8. Transfers outside the European Union

Some of our providers, in particular those involved in distributing the mobile apps and displaying the map, are established in the United States. These transfers are governed by the European Commission’s Standard Contractual Clauses or by the EU–US Data Privacy Framework, depending on the provider. You may write to us for details of the safeguards that apply.

9. Retention periods

• Account and profiles : for the whole duration of your subscription, then three years after your last contact with us
• Contact directory : until you delete it, or when your account is closed
• Approximate location : see section 5
• Accounting records and invoices : ten years, in accordance with the French Commercial Code
• Technical logs : twelve months at most

10. Security

Exchanges between the app, the site and our servers are encrypted in transit. Access to data is restricted to those who need it. Payments are processed by Stripe, which is PCI-DSS certified: no bank card number passes through our servers or is stored on them.

11. Cookies

The site places cookies necessary for it to work, together with audience measurement cookies subject to your consent. You can change your choices at any time from the Cookie Preferences page. The mobile app uses no advertising cookies.

12. Your rights

Under the General Data Protection Regulation, you have the following rights:

• Access to your data
• Rectification
• Erasure
• Objection to processing
• Restriction of processing
• Portability
• Withdrawal of your consent at any time, in particular for the member map
• Setting instructions on what becomes of your data after your death

To exercise them, write to contact@maisonmajellan.com. We reply within one month. Deleting your account is also possible directly from the app and from your customer area.

If our reply does not satisfy you, you may refer the matter to the CNIL, the French data protection authority, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or lodge a complaint at cnil.fr.

13. Changes

We may amend this policy to reflect legal, regulatory or technical developments. If there is a significant change concerning the member map or location, you will be informed in the app before that change takes effect, and your consent will be sought again if necessary.