Privacy Policy

Version updated on July 03, 2025

I. Personal Data Processing

Article 1 – Legal Information

The online Platform CASTFOLIO https://castfolio.com is published by the Dubai Company MEDIASLIDE WORLD, located FZLLC Arjaan Office Tower, Office # 908, Al Sufouh – Al Sufouh 2 – Dubaï - UAE.

E-mail address of the Company: contact@mediaslide.com

Host: Google Cloud Platform.

The Company is the controller of the personal data processing on the Platform.

For such processing, the Company complies with the EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).

Contact of the Company for any question regarding the personal data processing: contact@mediaslide.com.

All terms of these personal data processing policy (“Privacy Policy”) are defined in the General Terms and Conditions (“GTC”) of the Platform. In this document, “data” means “personal data”.

Article 2 – Controller of the processing

The Company is the controller of the personal data processing of the Platform. For any question or for the exercise of the rights as listed in Article 9 here below, the User can contact the Company to the address mentioned in preamble.

The provision by the User of his personal data is based on the User’s subscription of the Platform. The User is informed the provision of such information is necessary to use the Platform, otherwise the Company shall not be able to provide access to the Platform as the Company which will not be able to verify the User’s identity.

Article 3 – Purposes of the data processing

The Company collects, stores and processes the User personal data only for the purpose of the Platform, based on the User’s subscription and the User’s acceptance of the GTC and this Privacy Policy.

Purposes of the data processing are:

  • management of the Platform;
  • management of the Users – customer relationship management;
  • newsletter;
  • commercial, prospecting, and marketing purposes, including sending promotional offers, special deals, and other commercial communications.

Article 4 – Data subjects and personal data processed

Categories of data subjects : Users who subscribed to the Platform and to the Services.

Categories of personal data processed:

  • first and last name;
  • post address;
  • electronic address;
  • phone number;
  • date and place of birth;
  • nationality;
  • gender;
  • profession;
  • IP address;
  • geolocation data;
  • connexion hours on the Platform;
  • username and password of the User account

Article 5 – Recipients, processors and transfers of personal data to third parts

Recipients of data: the Company and all the Users of the Platform.

The User is also informed that all or part of his personal data may be communicated by the Company to the following processors:

  • Data are hosted by Google Cloud Platform https://cloud.google.com on the EU territory.
  • In addition, data are entirely stored and processed on the platform Google Firebase, for which data processing security measures are indicated: https://firebase.google.com/support/privacy/.
  • Platform Sendgrid https://sendgrid.com is recipient of the processing for newsletter and emailing purposes; it complies with EU-US Privacy Shield dispositions regarding personal data protection.

Article 6 – Technical and organisational protection measures

Any person who accesses the processing has committed to strictly respect its confidentiality. The access is nominative and controlled by access codes (software) or keys (premises).

The User has access to the Platform through the User’s personal and nominative account, accessible with personal and confidential username and password.

This authentication process guarantees a traceability and a restricted access, complying with security and confidentiality rules and applicable legislation.

The User commits to take all necessary measures to ensure strict confidentiality for its identifying codes and password uses and warrants to not communicate, assign nor make them available to a third party.

Article 7 – Transfer of personal data outside EU

The Company may transfer personal data to third parties outside the EU, specifically to the premises of the Company located in the UAE. Data may also be shared with the processors and recipients listed above, who may be located outside the EU.

Article 8 – Storage period

Personal data processed by the Company on the Platform are stored for the whole duration of the User’s subscription on the Platform.

The Company may store the User’s personal data beyond the aforementioned period if necessary to establish proof or to exercise or defend the Company’s rights.

Article 9 – Data subject rights

9.1. Personal management of data

The User can access and update its information through the User account on the Platform.

Where personal information is processed for direct marketing purposes, the User can, at any time, ask the Company to stop processing its data by sending an electronic mail or via the online contact form.

9.2. GDPR data subject rights

The User can exercise any rights described under GDPR Chapter III:

Right of access : The User can obtain from the Company all information regarding the data processing.

The User has the right to obtain from the Company one copy of personal data undergoing processing, provided it does not affect rights and freedoms of third parties.

Right of rectification : The User has the right to obtain from the Company the rectification of its processed personal data if they are inaccurate or incomplete. The Company may ask for substantiating documents if need be.

Right of erasure – right to be forgotten : The User has the right to obtain from the Company to erase its personal data when (i) they are no longer necessary for the processing in relation to its purposes; (ii) when the User has withdrawn its consent for the processing and there is no legal grounds for the processing; (iii) when the User has exercised its right to object and there is no overriding legitimate grounds for the processing; (iv) when the User personal data have been unlawfully processed; or (v) the User personal data must be erased due to legal obligations. The Company may however store the User personal data if the Company has to comply with a legal obligation or in case it appears necessary to establish proof or to exercise or defend its rights.

Right to restriction of processing : The User has the right to exercise its restriction right of processing. In such case, the Company will not process the personal data without the User’s consent except for the establishment, exercise or defence of legal claims or for public interests.

Right to data portability : The User has the right to receive from the Company the personal data processed in a structured format which can be transmitted to another controller, when technically feasible and provided it does not affect rights and freedoms of third parties.

Right to object : The User has the right to object processing of personal data for prospecting purposes.

Contact: to exercise these rights, the User shall write to the Company at the addresses indicated in Article 1.

Article 10 – Supervisory authority

Any claim or complaint regarding the processing of personal data can be addressed to the supervisory authority of France: CNIL (Commission Nationale Information et Libertés).

II. Cookies

Article 1 – Definitions

The User is informed that cookies may be installed on the User’s terminal equipment while using and accessing the Platform.

Cookies are information placed in the User’s terminal equipment by the Platform server. They are used by the Platform to send information to the User’s browser and receive information back to the Platform (for instance a session identifier or the choice of a language). Only the issuer of a cookie can read or modify the information contained.

The different types of cookies are:

  • session cookies which disappear as soon as the User leaves the Platform;
  • permanent cookies that remain on the User’s device until the expiration of their lifetime or until the User deletes them.

Article 2 – Consent

During the User’s first access to the Platform, the User is asked to accept or refuse the use of cookies.

If the User does not want cookies to be installed on its terminal equipment, an opt-out cookie will be placed on the equipment. If the User deletes this opt-out cookie, it will no longer be possible for the Company to identify the User. Likewise, when the User accepts the use of cookies, a consent cookie is installed.

Consent or rejection cookies must remain on the User’s terminal equipment. The User can change its preferences at any time as indicated in Article 4.

While using of cookies, the Company may process personal data of the User in the condition of I. Personal Data Processing as stated hereabove.

Article 3 – Cookies purposes

Cookies are used by the Company for the sole purpose of enabling or facilitating electronic communication (detection of connection errors, identification of connection points, etc.).

Other cookies are strictly necessary for the provision of online communication services at the User’s express requests (for instance screen display preferences).

Other cookies are used for the purpose of:

  • analyse the traffic and the use made of the Platform, in order to be able to change it in the direction of improving the browsing experience;
  • improve the relevance of the advertisements on the Platform;
  • improve the use of the Platform.

The cookies used on the Platform are:

  • Company cookies;
  • third-party cookies chosen by the Company for the purpose of achieving specific objectives.

The cookies placed by the Platform’s tools are:

  • consent cookies: retention period 13 months;
  • User's session ID cookies: lifetime equal to the session duration;
  • technical cookies: their purpose is to facilitate the User’s navigation on the Platform: retention period retention period 13 months;
  • audience measurement cookies: intended to measure the Platform traffic; the Company uses among other things the services of Google Analytics, this is a statistical tool that allows the Company to improve the Platform by taking into account the needs of Users; the data generated by these cookies are the use of the Platform (pages visited, etc.) or the User’s IP address: retention period 13 months;
  • targeted advertising cookies: their objective is to allow the promotion of content adapted to the User’s use of the Platform: retention period retention period 13 months.

To allow the access to certain features of the Platform, the Company uses services offered by third parties, such as:

  • sharing buttons (Facebook, Tik Tok, Instagram, Twitter, LinkedIn, Google+);
  • videos posted on its Instagram, Tik Tok, Vimeo or Youtube channels;

These features rely on third-party cookies that are directly placed by these service providers.

Article 4 – Cookies preferences

The User has several options to manage cookie preferences.

Browser settings:

Most browsers are set by default and accept the installation of cookies. The User can choose to accept all cookies, to reject them systematically or to choose those them specifically. Cookies can also be deleted the User’s terminal via the browser of the various devices (tablets, smartphones, computers, etc.).

The User is however informed that setting the browser to refuse cookies may block the access to certain features, pages and areas of the Platform, for which the Company cannot be held responsible.

Opposition platforms:

Several platforms of advertising professionals also offer the possibility of refusing or accepting cookies used by the companies.

Cookie management module on the Platform:

A dedicated module of the Platform allows the User to choose its preferences between the cookies accepted and those refused, at any time.