Terms relating to the processing of personal data - Facture.mu

I. Purpose

These clauses set out the conditions under which Facture.mu (the "Processor") undertakes to carry out, on behalf of its clients (the "Controllers"), processing operations on personal data as part of the provision of its services. This includes any operation, whether automated or not, applied to the personal data required to perform the service, in particular the hosting, management and provision of the platform.

Facture.mu and the Client undertake to comply with the applicable regulations on the protection of personal data, including the principles of transparency, lawfulness, security and purpose limitation.

II. Description of the processing

The Processor is authorised to process, on behalf of the Controller, the personal data required to provide the service subscribed to by the Client. Depending on requirements, this processing includes:

• the collection, recording and retention of data relating to users of the service;
• the performance of technical and operational functions of the service;
• the analysis and correction of data as part of maintenance and support.

The categories of data processed and the purposes are defined according to the features used by the Client within the service.

III. Obligations of the Processor

The Processor undertakes to:

1. process the data solely for the agreed purposes and in accordance with the documented instructions of the Controller;
2. ensure the security and confidentiality of the personal data processed, by implementing appropriate technical and organisational measures to protect the data against any unauthorised access, alteration, disclosure or destruction;
3. respect the principles of data protection by design and by default in the tools, products and services used;
4. inform the Controller in the event of a personal data breach or a third-party request involving data transfers;
5. ensure the traceability of processing operations, including keeping an up-to-date record of the categories of processing activities carried out for the Client.

The Processor may use sub-processors for certain activities, such as hosting, provided that it informs the Controller beforehand. In the absence of a reasoned objection from the latter within the stipulated period, the addition or change of sub-processor is deemed accepted.

IV. Assistance with the exercise of individuals' rights

As far as possible, Facture.mu assists the Controller in responding to requests made by data subjects to exercise their rights (access, rectification, erasure, restriction, objection, portability), in accordance with applicable laws.

V. Duration and retention of data

Personal data is retained only for the time necessary to perform the services subscribed to by the Client or in accordance with applicable legal obligations. At the end of the service or at the Client's request, Facture.mu undertakes to destroy or return the personal data, unless required otherwise by law.

VI. Liability

Facture.mu implements reasonable technical and organisational measures to ensure the protection of personal data. However, its liability cannot be engaged in the event of loss resulting from use that does not comply with the Client's instructions or from circumstances beyond its control.

VII. Information and contacts

For any question relating to the protection of personal data, or to exercise individuals' rights, controllers or data subjects may contact Facture.mu at the email address designated for this purpose or at the official address of the data protection officer, where applicable.