Protection of your personal data
At Mify, the protection of your personal data is an absolute priority. We are committed to respecting the strictest international standards, including the European GDPR and applicable Malagasy legislation, to ensure the security and confidentiality of your information.
GDPR Compliance
The General Data Protection Regulation (GDPR) is the European reference text regarding personal data protection. Mify is fully compliant with GDPR requirements:
- Explicit and informed user consent
- Data minimization
- Privacy by design and by default
- Data breach notification within 72 hours
- Appointment of a Data Protection Officer (DPO)
Malagasy Legislation
Madagascar has its own data protection legislation: Law N° 2014-038 of July 10, 2014, relating to the protection of personal data. This law transposes international principles into the Malagasy legal framework:
- Creation of the Malagasy Data Protection Commission (CMPD)
- Prior declaration obligation for data processing
- Rights of data subjects (access, rectification, opposition)
- Prohibition of data transfer to countries without adequate protection
- Criminal and administrative sanctions in case of violation
Your Rights
In accordance with international standards and Malagasy legislation, you have the following rights regarding your personal data:
Right of access
You can obtain confirmation that your data is being processed and access this data.
Right to rectification
You can request the correction of inaccurate or incomplete data concerning you.
Right to erasure
You can request the deletion of your data in certain cases (right to be forgotten).
Right to object
You can object to the processing of your data for legitimate reasons.
Right to data portability
You can receive your data in a structured format and transfer it to another service.
Right to restriction
You can request the suspension of the processing of your data.
Security Measures
Mify implements robust technical and organizational measures to protect your data:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- Authentication: Strong authentication with two-factor authentication (2FA) available.
- Access control: Principle of least privilege and multi-factor authentication for the team.
- Backups: Encrypted daily backups with geo-redundant storage.
- Audit: Regular security audits and annual penetration tests by independent third parties.
Contact DPO
For any questions regarding the protection of your data or to exercise your rights, contact our Data Protection Officer:
Email: dpo@mifyyy.com
Response within 48 business hours