Privacy policy

Data controller

[Nom du responsable du traitement], [Adresse postale]. Contact: [email de contact pour les données personnelles].

Data we process

• Account: first name, last name, email address, password (stored as an irreversible hash), preferred language, date and version of your consent.
• Profile: photo, country, city, job title, organizations, roles, sectors, expertise, bio, goals and partners you are looking for.
• Contact details: contact email, phone, WhatsApp, LinkedIn, website, social media.
• Documents: pitch deck, company presentation, portfolio.
• Activity on the platform: favorites, availability, meeting requests and meetings, activities added to your agenda.
• Technical data: IP address and browser linked to your login sessions, for security purposes.

Purposes and legal bases

• Organizing the event and networking between participants (registrations, directory, meetings, program): your consent, given when you sign up.
• Sending emails about your account and meetings: necessary for the service you requested.
• Keeping the platform secure (login attempt limits, technical logs): the organizer's legitimate interest.

Who can see your data

• Participants whose registration has been approved can see your profile: identity, photo, professional information, documents, contact email, LinkedIn, website and social media.
• Your phone and WhatsApp are only visible to participants with whom you have an accepted meeting.
• Until your registration is approved, your profile is not visible to any other participant.
• The organizing team (three administrators) can access all data to manage registrations and the event.
• Our technical processors, only to run the service: hosting and file storage by Hetzner Online GmbH (Germany, European Union) and an email delivery service [to be specified].
• Your data is never sold or used for advertising.

Retention

Account, profile and meeting data is kept for the duration of the event and then [period to be specified, e.g. 12 months] after it ends, unless you delete your account earlier. Refused registrations are deleted [period to be specified]. Login sessions expire after 30 days.

Cookies

Matchini uses no advertising or analytics cookies. Two strictly necessary cookies are set: a session cookie to keep you logged in, and a cookie that remembers your language. They do not require consent.

Security

Traffic is encrypted (HTTPS), passwords are stored hashed, files are only accessible to logged-in users, and data is hosted in the European Union with automatic backups.

Your rights

Under the GDPR, you can access, correct or delete your data, request its portability, object to or restrict its processing, and withdraw your consent at any time (which deletes your account). You can update most of your information directly from your profile. For any other request, write to [email de contact pour les données personnelles].

If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country.