Privacy policy — Business prospecting

Dadycar, a French simplified joint-stock company (SAS) with share capital of €1,000, registered with the Nanterre Trade and Companies Register under number 920 955 366, whose registered office is at 36 rue Raspail, 92300 Levallois-Perret, France, trading under the brand MovX, is the controller of the processing described below.

Contact: contact@movx.com

You received a message from us because your role within your company involves managing or overseeing a vehicle fleet, an activity our software directly relates to. Your contact details were not collected from you: they come from the sources listed in section 5.

Your business data is processed to:

• identify and qualify companies likely to be interested in our fleet management solution;
• send you business prospecting messages related to your professional activity;
• follow up on our exchanges (replies, meetings, objection requests).

This processing is based on our legitimate interest in developing our business (Article 6(1)(f) GDPR).

We have weighed this interest against your rights and freedoms. The factors we took into account are: we only process business data, excluding any data relating to your private life and any sensitive data; we only contact people whose role relates directly to our offer; the volume and frequency of our messages are limited; no data is transferred or sold to third parties; and you can object at any time, without giving a reason and free of charge.

Categories of data: last name, first name, job title, employer, business email address, business phone number, and the history of our exchanges.

Sources:

• the French public company directory, Annuaire des Entreprises (annuaire-entreprises.data.gouv.fr), a publicly accessible source, to identify your company (name, SIREN, NAF code, headcount, municipality);
• your public LinkedIn professional profile, a publicly accessible source, for your name, your job title and to check your current position;
• FullEnrich, a business data enrichment provider, for your business email address.

We also use the following public registers, at company level only and without processing any data about you personally, to assess whether contacting a company is relevant: the national electronic register of road transport companies (RENTR), fleet greening declarations (French Mobility Orientation Act, LOM) and ADEME's register of greenhouse gas emission reports.

Your data is accessible to our sales team and to our technical providers, acting as processors:

• Instantly
  Message sequencing and sending
• Google Workspace (Google Ireland Limited)
  Business email
• MillionVerifier
  Technical validation of email addresses
• FullEnrich
  Business contact enrichment

Your data is never transferred, rented or sold to third parties.

Where our providers are established outside the European Union, notably in the United States, these transfers are governed by the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914 of 4 June 2021).

Your data is kept for three years from our last contact with you. After that period, it is deleted.

If you object to any prospecting from us, we keep your email address on a suppression list, for the sole purpose of not contacting you again, including if a new prospecting file is compiled later. This list only contains the data strictly necessary for that purpose.

You have the rights of access, rectification, erasure and restriction of processing, as well as the right to object to business prospecting at any time, without having to justify your request.

To exercise them: click the unsubscribe link included in each of our messages, or write to us at contact@movx.com. We reply within one month of receiving your request. Proof of identity may be requested if there is reasonable doubt about your identity.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — or at www.cnil.fr.

Your data is not subject to any automated decision-making or profiling that produces legal effects concerning you.

We implement appropriate technical and organisational measures to protect your data, including encryption of communications, access control and limiting the number of authorised people.

This policy may be updated to reflect legal changes or changes in our practices. The date of the last update is shown at the top of the page.