Privacy policy

Updated: 2 October 2026. This policy covers the Madus showcase website, not the user areas of the B2B platform. This translation is provided for information only; the French version prevails.

Information marked “TO BE COMPLETED” or “TO BE VALIDATED” must be filled in before publication and before the form is opened to the public.

Data controller

MADUS, 634 chemin de la Bauquière, 13190 Allauch, France. Identity and address taken from the project: TO BE VALIDATED. Contact e-mail for data protection and, if a data protection officer has been appointed, their contact details: TO BE COMPLETED.

Your requests

We necessarily collect your e-mail address and the text of your request. You may add your first name, last name, company, telephone, profile and business sector; these fields are optional. Do not send sensitive data or personal data about your customers.

This information is used to respond to your request and, if you wish, to arrange a demonstration. Processing of B2B requests is based on Madus’s legitimate interest in responding to people who contact it (Article 6(1)(f) GDPR). Requests to exercise rights are processed to comply with a legal obligation (Article 6(1)(c)). No marketing subscription is triggered by this form.

Without an e-mail address or a message, we cannot process the request. The optional fields only help to put the response in context. The legitimate interest balancing test must be validated by the data controller.

Transmission and storage

The form sends the information by e-mail to the mailbox configured by Madus. This website’s code does not save messages in a database or in application files. They are nevertheless processed temporarily by the server and then kept in the recipient mailbox and possibly its backups.

Recipients: the people authorised to respond at Madus and the necessary hosting and e-mail service providers. Names of these providers, countries of processing, access by their teams and further sub-processors: TO BE COMPLETED.

Retention periods

Requests, replies and requests to exercise rights: TO BE COMPLETED for each purpose, with a precise period or criteria, starting point, any restricted archiving and deletion procedure. This website does not perform any automatic deletion from the mailbox.

The security session expires in the application after 30 minutes without access to the form. Its cookie is a session cookie. The actual time taken to delete session files, technical logs and backups depends on the hosting provider: TO BE COMPLETED. The session access period does not guarantee immediate deletion of server files.

Session and technical data

The form page uses a random session identifier, an anti-forgery token and timestamps to secure submission and limit repeated attempts in quick succession. This processing is based on the legitimate interest in securing the form. The fields entered are not kept in the session by the website’s code.

A connection necessarily sends an IP address and request information to the server. The hosting provider may record access or security logs (IP address, date, URL, browser, status). Their exact content, purpose, legal basis, recipients and retention are TO BE VALIDATED / INFORMATION MISSING. The audited code does not create any behavioural history or message log.

The technical cookie is described on the Cookies page. No analytics, advertising pixel, tracking local storage, third-party CAPTCHA or AI function receiving your data is built into this website’s code.

Transfers outside the EU/EEA

The location of the hosting, the e-mail service, their backups and support access is not specified. Whether there are transfers outside the EU/EEA and, where applicable, the countries, recipients and safeguards that apply (adequacy decision or appropriate contractual clauses, with access to a copy) are TO BE COMPLETED. We cannot assert that there are no transfers on the basis of the code alone.

Your rights and how to exercise them

Under the conditions set out in the GDPR, you have the rights of access, rectification, erasure and restriction. You may object to processing based on legitimate interest on grounds relating to your particular situation. Portability concerns automated processing based on consent or contract; it does not automatically apply to requests based on legitimate interest. If processing is based on your consent in the future, you will be able to withdraw it without affecting the lawfulness of prior processing.

Use the contact form, writing “GDPR rights request” and the right concerned, without filling in the optional fields. A dedicated e-mail address remains TO BE COMPLETED; the form requires an operational e-mail service. The postal contact is that of the data controller above, to be confirmed before publication.

We generally respond within one month; a justified extension of two months may be necessary depending on the complexity or number of requests, in which case you will be informed within the first month. Proof of identity should only be requested where there is reasonable doubt and in a proportionate manner. You can lodge a complaint with the CNIL.

External links and no automated decision-making

Links to other websites do not load their content before you click. Once you navigate there, their privacy rules apply. The audited code makes no automated decision with legal effect, carries out no profiling and sends no data to an AI service.