Who we are
Abstract Machines is a French company specializing in IoT infrastructure and security solutions. We are registered in France with headquarters at 141 Quai de Valmy, 75010 Paris, France (SIRET: 95203303300012). We act as the data controller for your personal data when you use our Services, including our software products (Magistrala, SuperMQ, Propeller), hardware solutions (A0 and A1 Gateways), consulting services, and websites.
What data we collect
Depending on how you interact with our Services, we may collect the following categories of personal data:
2.1 Information you provide
- Contact information (name, email address, phone number, company name, job title)
- Account credentials and authentication data
- Payment and billing information
- Communications with our support team
- Information submitted through forms, surveys, or feedback
2.2 Information we collect automatically
- Technical data (IP address, browser type, device information, operating system)
- Usage analytics (pages visited, features used, session duration)
- Performance and diagnostic data
- Cookies and similar tracking technologies
2.3 Product-specific data
- Software products: Configuration data, API usage metrics, system logs
- Hardware products: Device telemetry, performance metrics, maintenance logs
- Consulting services: Project requirements, technical specifications, deliverables
How we use your data
We process your personal data for the following purposes:
3.1 Service delivery
- Provide, operate, and maintain our products and services
- Process transactions and manage billing
- Deliver customer support and technical assistance
- Authenticate users and maintain account security
3.2 Communication
- Send service-related notifications and updates
- Respond to inquiries and support requests
- Provide product announcements and security alerts
- Send marketing communications (with your consent)
3.3 Business operations
- Analyze usage patterns to improve our Services
- Conduct research and development
- Ensure security and prevent fraud
- Comply with legal and regulatory obligations
- Protect our rights and interests
Legal basis for processing
Under GDPR, we process your personal data based on the following legal grounds:
- Contract performance (Article 6(1)(b)): Processing necessary to perform our contractual obligations to you
- Legitimate interests (Article 6(1)(f)): Processing for our legitimate business interests, such as improving our Services, security, and fraud prevention
- Legal obligation (Article 6(1)(c)): Processing required to comply with legal or regulatory requirements
- Consent (Article 6(1)(a)): Processing based on your explicit consent, such as for marketing communications
- Vital interests (Article 6(1)(d)): Processing necessary to protect vital interests in emergency situations
Data retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Account data: Retained while your account is active and up to 3 years after account closure
- Transaction records: Retained for 10 years as required by French accounting law
- Support communications: Retained for 3 years after case closure
- Marketing data: Retained until you withdraw consent or 3 years of inactivity
- Technical logs: Retained for 12 months for security and operational purposes
After the retention period, data is securely deleted or anonymized for statistical purposes.
International data transfers
We primarily process data within the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place:
- Adequacy decisions: Transfers to countries with an adequacy decision from the European Commission
- Standard Contractual Clauses (SCCs): EU-approved contractual terms for data transfers
- Binding Corporate Rules: For transfers within multinational organizations
- Certification schemes: Such as Privacy Shield successors or equivalent frameworks
You may request information about specific safeguards by contacting us at privacy@absmach.eu.
Your privacy rights
Under GDPR and French data protection law, you have the following rights:
8.1 Access and information
- Right of access (Article 15): Request a copy of your personal data and information about how we process it
- Right to information: Receive clear information about our data processing activities
8.2 Correction and deletion
- Right to rectification (Article 16): Correct inaccurate or incomplete personal data
- Right to erasure (Article 17): Request deletion of your personal data ("right to be forgotten")
8.3 Processing control
- Right to restrict processing (Article 18): Limit how we process your data in certain circumstances
- Right to object (Article 21): Object to processing based on legitimate interests or for direct marketing
- Right to data portability (Article 20): Receive your data in a structured, machine-readable format
8.4 Consent and complaints
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
- Right to lodge a complaint: File a complaint with the CNIL (French data protection authority) or your local supervisory authority
How to exercise your rights: Contact us at privacy@absmach.eu. We will respond within one month of receiving your request.
Data security
We implement comprehensive security measures to protect your personal data:
9.1 Technical safeguards
- Encryption of data in transit and at rest
- Multi-factor authentication and access controls
- Regular security assessments and penetration testing
- Secure software development practices
- Network security monitoring and intrusion detection
9.2 Organizational measures
- Employee training on data protection and security
- Strict access controls and need-to-know principles
- Regular security audits and compliance reviews
- Incident response and breach notification procedures
- Vendor security assessments and contractual obligations
While we strive to protect your data, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and keep your account information confidential.
Changes to this policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will:
- Post the updated policy on our website with a new effective date
- Notify you via email for material changes that affect your rights
- Provide notice through our Services for significant updates
- Maintain previous versions for your reference
Your continued use of our Services after the effective date constitutes acceptance of the updated policy.
Contact information
For questions, concerns, or requests related to this Privacy Policy or our data processing practices, please contact us:
- Data Protection Officer
- privacy@absmach.eu
- Company
-
Abstract Machines SAS
141 Quai de Valmy
75010 Paris, France - info@absmach.eu