Privacy policy

Controller

For the data collected on this site, at signup and for managing customer accounts, subscriptions and invoicing, the controller within the meaning of Algerian Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data is the publisher of Maintelix, an auto-entrepreneur whose identity, address, registration number and NIF appear in the legal notice.

For the data your organisation records in its workspace — equipment, work orders, stock, and the people who do the work — your organisation is the controller: it decides the purposes and means. Maintelix then acts as a processor: it processes that data only on your organisation's instructions and to provide the service, and keeps it secure and confidential (terms of use, article 9).

Legal notice

Data we process

At signup: your name, your email address, your organisation's name, the workspace address you choose and your password — stored only as a one-way hash, never in a form anyone can read back. We also keep proof of your acceptance of the terms and of your consent to processing: the date, the terms version and the IP address.

On the site: the cookies described below, and technical connection data (IP address, browser, date and time) used to secure the service. When you write to us: your message and contact details.

In your organisation's workspace, on its behalf: user accounts (name, email, role, language), the maintenance data users enter — including photos, attachments and signatures where applicable — and access and audit logs (who did what, when, from which IP address).

With the mobile app: the workspace data needed to work offline is stored on the device and synchronised on reconnection; a technical device identifier (notification token) is used to send it notifications.

What we don't do

No advertising cookies, no ad trackers, and no sale of personal data. Audience measurement runs only if you accept it (see "Cookies" below).

Purposes and legal bases

We process this data to: create and run your workspace, trial and subscription (performance of the contract you accepted, and the express consent collected at signup); invoice and meet our accounting and tax obligations (legal obligation); secure the service — anti-bot check, login throttling, logs (legitimate interest in protecting the service and your data); answer your requests; and, only if you accept it, measure site traffic (consent).

You can withdraw a consent at any time — for audience measurement, for example, with "Manage cookies"; withdrawal does not affect processing already carried out. Your data is not used for marketing without your prior consent, nor for any automated decision about you.

Recipients and processors

Data is accessible only to the publisher's authorised staff, within the limits of their duties, and, for workspace data, to the users your organisation authorises. We use the following technical providers, who act as processors, on our instructions and only for the purposes of the service:

• Contabo GmbH — hosting of servers, databases and files, in its Portsmouth, Royaume-Uni data centre.
• Cloudflare, Inc. (United States) — routing and protection of the site's traffic, Cloudflare Turnstile anti-bot check and, only if you accept it, Cloudflare Web Analytics audience measurement.
• Google (Firebase Cloud Messaging, United States) — delivery of notifications to the mobile app; it receives the technical device identifier and the notification content.

We neither sell nor rent any personal data. Data may be disclosed to a public authority only where the law requires it, on a lawful request.

Hosting and transfers outside Algeria

The service is hosted by Contabo GmbH, in its Portsmouth, Royaume-Uni data centre. Attached files are kept in the same hosting infrastructure.

The publisher is established in Algeria, but the servers are in the United Kingdom, the host is established in Germany, and Cloudflare and Google are established in the United States. Using the service therefore involves a transfer of personal data outside Algerian territory. Law No. 18-07 makes such a transfer subject to conditions — in particular an adequate level of protection in the destination country — and to authorisation by the National Authority for the Protection of Personal Data (ANPDP), with which the publisher completes the required formalities.

If these transfers do not suit your organisation, Maintelix is also offered as a dedicated installation, hosted where you choose, including in Algeria.

Legal framework

This processing is governed by Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data. It follows the principles of lawfulness, fairness, specified purposes, data minimisation, accuracy and limited retention.

The processing for which the publisher is controller is subject to the prior formalities that law provides with the ANPDP — declaration or authorisation, as the case may be. The reference of the receipt or authorisation will be shown on this page once issued.

Where data subjects are in the European Union, Regulation (EU) 2016/679 (GDPR) may also apply; they then also have the rights it provides.

Retention periods

Workspace data: for as long as the workspace is open. When it is closed, the data is archived, then permanently deleted — records and files — 30 days later; a record of the deletion is kept.

Account data and proof of consent: for the duration of the contractual relationship, then for as long as needed to prove your rights and our obligations, within the statutory limitation periods.

Workspace access logs: 12 months, then deleted automatically.

Invoices and accounting records: for the period required by Algerian commercial and tax law.

Security

The publisher applies appropriate technical and organisational measures: each workspace has its own database, isolated from the others; traffic is encrypted (HTTPS); passwords are stored only as hashes; access is restricted by roles and permissions; login attempts are throttled; sensitive actions are logged; backups are made. In the event of a data breach, we inform the organisation concerned without delay and, where the law requires it, the ANPDP and the people concerned.

Cookies

This site sets two categories of cookies. Only the necessary cookies are set without your consent, because the site cannot work without them.

Necessary cookies (always on)

• Session cookie: keeps you signed in and holds your language choice during the visit.
• XSRF-TOKEN: protects forms against request forgery.
• Language: remembers the language chosen for the site.
• cookie_consent: remembers your cookie choices for 6 months.
• Cloudflare Turnstile: anti-bot check on the signup form, for the security of the service.
• Cloudflare security cookies (for example __cf_bm): may be set by the service that protects the site, to tell visitors from bots; they are not used for tracking.

Audience measurement (optional)

Cloudflare Web Analytics measures traffic to the public pages in aggregate, with no tracking cookie and no individual profile. It loads only if you accept it, and never inside workspaces.

You can change or withdraw your choice at any time with the "Manage cookies" link at the bottom of every public page. A withdrawal applies from your next visit.

Your rights

Under Law No. 18-07, you have the right to be informed about the processing that concerns you, the right of access to your data, the right to have inaccurate, incomplete or unlawfully processed data rectified — and, as the case may be, erased or locked — and the right to object, on legitimate grounds, to its processing, and to its use for marketing. You may also withdraw your consent at any time.

For data held in your organisation's workspace, contact your organisation first: it is the controller, and we help it answer your request. You may be asked to prove your identity.

If you believe your rights are not respected, you may refer the matter to the National Authority for the Protection of Personal Data (ANPDP).

To exercise these rights, or for any question about your data, write to [email protected].

Changes to this policy

This policy may be updated, in particular when the service, our providers or the law change. The last-updated date is shown at the top of the page; customers are told of significant changes by email or in the service.