Article 1 – Purpose and Scope
This Privacy Policy is intended to inform users of the Nation application about the methods of collection, processing, and protection of their personal data, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR), French Law No. 78-17 of January 6, 1978 as amended relating to information technology, files and freedoms, as well as the recommendations of the French Data Protection Authority (CNIL).
This Policy applies to all data processing carried out in connection with the use of the Nation mobile application and its associated services.
Article 2 – Data Controller
The data controller is NatScale, a simplified joint-stock company (SAS) registered with the Thonon-les-Bains Trade and Companies Register under number 941 471 492, with its registered office located at 306 route de l’Usine, 74140 Sciez, France.
The appointed Data Protection Officer (DPO) is Mr. Pierre Aliaga, Chief Executive Officer. He can be contacted at the following email address: interne@nation-startup.com.
Article 3 – Data Collected
The data collected and processed by the application are as follows:
Identification Data: first name, last name, email address, profile picture, banner, profile title, description.
Login Data: password (compliant with security requirements: minimum 13 characters including numbers, letters, uppercase letters, and special characters).
Location Data: geographic coordinates, subject to the settings chosen by the user.
Usage Data: posts, private messages, files, links, interactions with other users.
No sensitive data as defined in Article 9 of the GDPR (racial or ethnic origin, political opinions, health information, etc.) is collected by the application.
Article 4 – Purposes of Processing
Article 5 – Legal Basis for Processing
Data processing is based on the following legal grounds:
Performance of a contract (Article 6(1)(b) of the GDPR) for the provision of the service and the management of user accounts.
Compliance with a legal obligation (Article 6(1)(c) of the GDPR), particularly regarding the retention of login data.
Legitimate interest of the data controller (Article 6(1)(f) of the GDPR) to ensure security and prevent abusive behavior.
Article 6 – Recipients of Data
The data are accessible only to:
NatScale and its authorized teams.
Technical service providers acting as processors, namely:
Supabase (data and application database hosting).
Mapbox (provision of geolocation services).
Discord (community support via the official Nation server).
These providers are contractually required to maintain the confidentiality and security of the data.
Article 7 – Data Transfers Outside the European Union
Some processing activities may involve the transfer of data outside the European Union, notably to the United States. In such cases, these transfers are based on the Standard Contractual Clauses (SCCs) adopted by the European Commission, to ensure a level of protection in accordance with the GDPR.
Article 8 – Data Retention Period
Personal data are retained only for the period strictly necessary for the purposes for which they were collected:
Account data: until the user voluntarily deletes their account.
Login data and technical logs: for the legally required period, in accordance with Article L34-1 of the French Postal and Electronic Communications Code.
Content data (posts, messages): retained until account deletion or for the duration of the user’s activity on the platform.
At the end of these periods, data are securely deleted or anonymized.
Article 9 – Users’ Rights
In accordance with Articles 15 to 22 of the GDPR, the user has the following rights:
Right of access to their personal data.
Right to rectification of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”).
Right to restriction of processing.
Right to object to processing.
Right to data portability.
These rights can be exercised by submitting a request to interne@nation-startup.com, accompanied by a copy of an identity document.
In case of difficulty, the user may lodge a complaint with the CNIL (www.cnil.fr).
Article 10 – Data Security
NatScale implements all appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data. This includes, in particular, the encryption of passwords and communications, restricting access to authorized personnel only, and monitoring information systems.
Article 11 – Cookies and Trackers
The Nation application may contain links to affiliated partner websites. When you access these sites, cookies or trackers may be placed by these partners. Nation has no control over these trackers, and their processing is governed by the privacy policies of the third-party websites.
Article 12 – Changes to the Privacy Policy
This Policy may be updated to reflect any legal, regulatory, or technical changes. Users will be informed of any significant modifications through a notification within the application.
Article 13 – Applicable Law and Jurisdiction
This Privacy Policy is governed by French law. Any dispute regarding its interpretation or execution falls under the exclusive jurisdiction of the French courts.