Confidentiality policy
and data protection

Version of 11/12/24

This Privacy Policy is intended for users of the MYM Corporate site accessible at the following address: https://corporate.mym.com/ (hereinafter “the site”) and aims to inform them about how their personal information may be collected and processed.
‍
Respect for privacy and personal data is a priority for AIR MEDIAS SAS, which is why we are committed to treating them in the strictest compliance with the Data Protection Act of January 6, 1978 (hereinafter “IEL law”) as amended and the amended (EU) General Data Protection Regulation (EU) and the General Data Protection Regulation (EU) of April 27, 2016 (hereinafter “GDPR”).

01

Who are we?

The entity responsible for processing your personal data is AIR MEDIAS, a simplified joint-stock company with a capital of 502,000 euros, registered with the Lyon Trade and Companies Register under number 809 565 906. Our headquarters is located at 16 rue Cuvier, 69006 Lyon, France ("AIR MEDIAS," "MYM," "we").

02

Key definitions

To help you better understand this Privacy Policy, here are some key definitions:

  • Data: Refers to the personal data covered under this Privacy Policy.
  • Personal Data: Any information that can directly (e.g., name, first name) or indirectly (e.g., email, postal address) identify an individual.
  • GDPR: The General Data Protection Regulation (EU) 2016/679, which governs the processing of personal data and its free movement.
  • Processor: A natural or legal person, public authority, or service that processes personal data on our behalf.
  • Site: Refers to https://corporate.mym.com/.
  • Data Controller: The entity that determines the purposes and means of processing personal data.
  • User: Any person visiting the Site.
  • Processing: Any operation performed on personal data as defined by the GDPR.

03

Why we collect your data and how we use it

We collect only the data necessary for the purposes described below:

  • Managing GDPR and Data Protection Rights Requests
    • This includes handling and responding to user rights requests (investigations, technical operations, etc.).
    • Legal basis: Compliance with legal obligations under GDPR (Articles 15 and following) and the Data Protection Act (Articles 48 and following).
  • Managing Requests via the "Press Corner" Section
    • This includes receiving and responding to requests submitted through the "Press Corner" section.
    • Legal basis: Legitimate interest in responding to inquiries.
  • Ensuring the Proper Functioning and Improvement of the Site
    • This includes website maintenance, performance monitoring, and feature enhancement through cookies.
    • Legal basis: Legitimate interest in providing an optimized user experience; user consent when required.

04

What data we collect and retention periods

At MYM, we collect only the data strictly necessary for our operations and retain it only as long as needed.

  • Managing GDPR and Data Protection Rights Requests
    • Data collected: Email address, name, request details.
    • Retention: 6 years from resolution of the request.
  • Managing Press Corner Requests
    • Data collected: Email address, name, phone number, request details.
    • Retention: 3 years from the last contact.
  • Ensuring the Site’s Functioning and Improvement
    • Data collected: User logs, connection data, device information.
    • Retention: Cookies are deleted after 13 months; data collected via cookies is stored for 25 months; logs are kept for 13 months.

05

Automatically collected data

When you browse the Site, we automatically record certain information, including:

  • IP address
  • Operating system and browser type
  • Visited pages

For more details, please refer to our Cookie Policy.

06

Who has access to your data?

Only authorized persons have access to your personal data, including:

  • Our internal staff
  • Our service providers responsible for website management, hosting, and IT systems
  • Third parties placing cookies on your device (with your consent)
  • Legal authorities if required by law
    Your data is never sold, exchanged, or rented to third parties.

07

Exercising your rights

In accordance with GDPR and the Data Protection Act, you have the right to:

  • Access and rectify your personal data
  • Request deletion of inaccurate or outdated data
  • Withdraw your consent to data processing
  • Restrict or object to data processing where legally permitted
  • Data portability (if processing is based on consent or contract)
  • Define instructions for handling your data after your death

You can file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) at: https://www.cnil.fr/fr/plaintes.

To exercise your rights, contact us at:

  • Email: dpo@mym.fans
  • Mail: AIR MEDIAS (MYM) — 16 rue Cuvier, 69006 Lyon, France

If required, we may ask for proof of identity to process your request.

08

How we secure your data

We implement strict technical and organizational measures to protect your personal data, including:

  • Secure access controls (password encryption, authentication processes)
  • Physical security measures for data storage locations
  • Regular audits of our systems and service providers
  • Compliance with contractual obligations in agreements with our subcontractors

09

International data transfers

We primarily process your data within the European Union. However, if a transfer outside the EU is necessary, we ensure that appropriate safeguards are in place, in line with legal requirements. You can request details about these safeguards at: dpo@mym.fans or by post to AIR MEDIAS (MYM) - 16 rue Cuvier 69006 LYON.

10

Updates to this privacy police

This Privacy Policy may be updated due to regulatory changes. The latest version will always be available on the Site.