Privacy Policy

1. Who we are

The controller of your data is MUZISECUR, a French SAS with share capital of €43,550, registered with the Quimper Trade and Companies Register (RCS) under number 890 493 885, whose registered office is at 11, rue des Jacinthes, 29720 Plonéour-Lanvern, France, represented by its President, Tarik Hamiche.

For any question about your data or to exercise your rights: contact@muzisecur.fr. Tarik Hamiche is the contact person for data protection.

This policy applies to the memodeal.fr site. The account you create there is a MUZISECUR account: the privacy policy of www.muzisecur.fr applies to any other MUZISECUR services you may use with this account.

2. The data we process

• Your account: your login email address, your first and last name, the version of the terms accepted when the account was created, together with its date and your IP address;
• Login codes: a 6-digit code sent by email, kept for 10 minutes in hashed form (never in plain text), then deleted;
• The content of your Memo Deals: title and genre of the track, studio, date of the session and, for each rights holder, their identity and contact details (first name, last name, email, phone number), their roles and their share;
• Signatures: each rights holder's signature, collected by DocuSeal using a code sent by email, and the signature log (dates, IP addresses) attached to the signed document;
• Payments: for a paid Memo Deal, the transaction ID and amount, as well as proof of your acceptance of the terms and conditions of sale (the version accepted, the exact wording of the box ticked before paying, its date and your IP address), kept with that payment; payment, by bank card or PayPal, is processed by Stripe (and by PayPal if you choose it), and we never see your card number or your PayPal login details;
• Technical data: connection logs and errors and, only if you accept it, the browsing data collected by the Meta pixel (section 8).

A Memo Deal draft started before you log in stays in your browser (the device's local storage): it only reaches us when you create the Memo Deal.

The people you register: by entering the rights holders of a track, you undertake to inform them and to enter only what is necessary for the Memo Deal. They receive an email asking them to sign, and have the same rights as you with regard to us.

3. Why, and on what basis

We never sell your data.

4. Who receives your data

Our team, to the extent required by their duties.

The other rights holders of the Memo Deal: each signatory sees the document, and therefore the identity, roles and shares of all the rights holders listed in it.

Our service providers (processors), who act on our instructions and are contractually bound to protect your data:

The authorities, only where required by law or by a court decision.

5. Transfers outside the European Union

Stripe, PayPal and Meta may transfer data to the United States (see section 4). These transfers are covered by the EU-US Data Privacy Framework where the provider participates in it, and otherwise by the European Commission's standard contractual clauses. You can ask us for a copy of these safeguards at contact@muzisecur.fr.

6. How long we keep it

At the end of these periods, the data is deleted or anonymised. It may be kept for longer in archives, with restricted access, where a legal obligation or a dispute requires it.

7. Security

Encrypted connections (HTTPS), passwordless login using a one-time code stored in hashed form and limited to 5 attempts, files stored privately and accessible through temporary links, daily backups, and team access restricted to authorised persons. In the event of a data breach presenting a risk, we notify the CNIL within 72 hours and, where the risk is high, the persons concerned.

8. Cookies and trackers

The site uses strictly necessary cookies and local storage (login, security, draft in progress, remembering your choice), which do not require consent.

The Meta pixel (Facebook / Instagram), which measures the effectiveness of our advertising, is only loaded after you give your consent in the banner. It then records the pages viewed, the creation of an account and the creation of a Memo Deal, and sets the "_fbp" and "_fbc" cookies. Refusing is as easy as accepting, and you are asked for your choice again after 6 months.

You can change your mind at any time using the Cookies link at the bottom of each page. If you withdraw your consent, the pixel cookies are deleted and the page reloads without it.

9. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time, and the right to give instructions on what happens to your data after your death.

These rights may be exercised by email only, at contact@muzisecur.fr. A Memo Deal that has already been signed is an agreement between several people: it cannot be erased at the request of a single signatory for as long as the law requires it to be kept (section 6), but any data that is not necessary to prove it will be.

We respond within one month, which may be extended by two months for a complex request (we will let you know). We may ask you to prove your identity if we have reasonable doubts.

If you consider that your rights have not been respected, you can lodge a complaint with the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).

10. Changes

We update this policy when our processing changes; the date is shown at the top of the page. In the event of a significant change, we notify users by email.