Privacy Policy
Website: www.hit-mag.fr
Last updated: March 20, 2026
This privacy policy is intended to inform users of the website https://www.www.hit-mag.fr (hereinafter the “Website”) about how Hit Mag collects, uses and protects their personal data, in accordance with Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR), and amended French Law No. 78-17 of January 6, 1978.
This policy may be amended at any time to reflect legal, regulatory, case-law or technical developments. The applicable version is the one in force on the date the Website is consulted.
1. Identity of the Data Controller
The data controller is:
Hit Mag
The full contact details of the data controller — postal address, email and telephone number — are provided in the Website’s legal notice.
2. Personal Data Collected
In general, the Website may be browsed without providing any personal data.
However, certain data may be collected when the user:
- fills out a contact form,
- subscribes to a newsletter,
- downloads content — white paper, resource,
- takes part in a quiz or compliance assessment,
- communicates with Hit Mag as part of a business relationship.
The data that may be collected includes, in particular:
- identity — last name, first name,
- contact details — email address, telephone number,
- professional information — company, job title,
- any information voluntarily submitted via forms.
Data marked as mandatory is required in order to process the request. Without it, certain services cannot be provided.
3. Purposes and Legal Bases of Processing
Personal data is processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Responding to requests submitted via forms | Legitimate interest |
| Providing the requested services and content | Performance of pre-contractual measures |
| Sending newsletters and commercial communications | Consent |
| B2B commercial prospecting | Legitimate interest |
| Improving the Website and analyzing traffic | Consent — cookies |
| Managing the customer relationship | Performance of the contract |
Consent may be withdrawn at any time.
4. Data Recipients
Personal data is intended exclusively for Hit Mag.
It may be accessible to technical service providers acting as processors — hosting, emailing, analytics tools — strictly within the limits necessary for their assignments.
The data is not sold or transferred to any third party.
5. Retention Period
Personal data is retained for a limited and proportionate period:
- Contact / prospect data: 3 years from the last contact
- Customer data: duration of the contractual relationship + legal obligations
- Cookie data: 13 months maximum
- Prospecting-related data: until consent is withdrawn
6. Rights of Data Subjects
In accordance with the GDPR, you have the following rights:
- right of access,
- right to rectification,
- right to erasure — “right to be forgotten”,
- right to restriction of processing,
- right to object,
- right to data portability,
- right to withdraw your consent at any time.
You may exercise these rights by contacting Hit Mag via:
- the Website’s contact form, or
- the address provided in the legal notice.
Proof of identity may be requested in the event of reasonable doubt regarding the identity of the requester.
7. Response Times
Hit Mag undertakes to respond to any request within a maximum period of one (1) month from receipt, which may be extended by two months in the case of a complex request, in accordance with the GDPR.
8. Data Security
Hit Mag implements appropriate technical and organizational measures to ensure the security, confidentiality and integrity of personal data and to prevent unauthorized access, alteration or disclosure.
9. Transfers Outside the European Union
As a general principle, data is hosted within the European Union.
Where certain tools involve a transfer outside the EU, such transfer is governed by appropriate safeguards — European Commission standard contractual clauses or mechanisms recognized by the GDPR.
10. Cookies
The Website uses cookies and trackers.
For more information about their use, settings and consent management, users are invited to consult the Cookie Policy available on the Website.
11. Complaint to the CNIL
If, after contacting us, you believe that your rights have not been respected, you may submit a complaint to the:
Commission Nationale de l’Informatique et des Libertés (CNIL)
www.cnil.fr
