Information Notice

Reading Time: 4 minutes

As of 17/06/2026

Contact details of the data controller:

Mailinblack – 4 place Sadi-Carnot – 13002 Marseille, France

Contact details of the Data Protection Officer (DPO):

PINT Avocats – 297 AV du Mistral – 13600 La Ciotat, France – dpo@mailinblack.com

 

As a cybersecurity provider, MAILINBLACK is committed to protecting individuals’ privacy.

The purpose of this information notice is to inform and present to the users of our PROTECT solution, as well as to the email senders contacting our users, how MAILINBLACK processes personal data collected as a data controller in connection with the development and operation of its PROTECT solution.

1. Description of the processing

Purpose of the processing

Development of a high-performance cybersecurity software solution

Personal data collected

Copied and aggregated data

Protect users:

  • Identity (surname and/or first name)
  • Professional email address
  • IP addresses used to connect to the interfaces (in log files only)
  • Sender whitelist and blacklist
  • Date and time, subject of exchanged emails
  • Content of received emails, and emails sent if SMTP OUT is used (not accessible via the interface, automated process)
  • Data resulting from remediation operations carried out in Users’ mailboxes

Senders of emails addressed to Protect users:

  • Email address
  • IP addresses used to connect to the authentication request interface (in log files only)
  • Date and time, subject, and content of exchanged emails

Recipients of emails sent by Protect users through the SMTP OUT feature:

  • Email address
  • Identity (surname and/or first name)
  • Email content

Optionally: Customer name and logo, title, Customer address (postcode, country, state), mobile phone, fax, personal phone number, pager, title, description, nickname, initials, web page, social media pages, as well as any other data included by the Customer in the customization of emails and authentication pages.

Associated metadata: information relating to description, structure or quality.

Annotations and characteristics extracted from data: descriptions assigned to data in the case of annotations, or measurable properties extracted from data for characteristics.

Purposes of the processing

Management of the development and operation of the system for detecting unsolicited or malicious emails.

Creation of new models and algorithms for the PROTECT solution for the research, development and operation of a product adapted to threats and their evolution.

Legal basis

Mailinblack’s legitimate interests in providing a high-performance and scalable anti-spam product for cybersecurity purposes and to combat fraudulent, unlawful and/or unsolicited emails.

Retention and archiving period
  • Addresses, metadata, first 135 characters of the content, sender category: maximum 2 years (until 31/12 of year n+1)
  • Full email content: 2 months

2. Recipients of personal data

Data controller: the data controller for this data is MAILINBLACK, whose full contact details are provided above.

Recipients: in accordance with the purposes set out above, the personal data of the sender or recipient of emails may be disclosed to the members of MAILINBLACK’s Cyber Threat Research & Defense team responsible for developing the PROTECT cybersecurity solution, and to MAILINBLACK’s technical providers acting as processors.

The data may be transferred outside the European Union by MAILINBLACK’s processors. Such transfers are based on an adequate level of protection or sufficient safeguards, including the European Union Standard Contractual Clauses of 4 June 2021 (documents available upon written request to MAILINBLACK).

 

3. Rights of the data subjects

Individuals whose data is collected by MAILINBLACK may exercise the following rights over their personal data at any time:

  • Right of access: to obtain confirmation that their personal data is being processed, as well as certain information about the processing operations, it being understood that such information is in any event provided in this information notice;
  • Right to rectification: to obtain the correction of their personal data when it is inaccurate or incomplete;
  • Right to erasure (“right to be forgotten”): to obtain the deletion of their personal data when it is no longer necessary for the purposes for which it was collected, or in the event of an objection to the processing of their personal data. The right to erasure does not apply in the cases provided for in Article 17.3 of the GDPR;
  • Right to restriction of processing: to obtain restriction of the processing of their personal data, in particular where the accuracy of the data is contested, or where the data retention period has expired but the data subject still needs to retain the personal data for the establishment, exercise or defense of legal claims;
  • Right to data portability: to obtain the personal data provided to MAILINBLACK in a readable format, or to request that MAILINBLACK transmit the personal data provided to another data controller;
  • Right to object: any person has the right to object to the processing of their data based on the legitimate interests of the data controller, unless there are compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims;
  • Right to lodge a complaint: to lodge a complaint with the French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés, if the person whose data is being processed considers that the processing carried out by MAILINBLACK constitutes a violation of their personal data;
  • Right to define instructions regarding the fate of their personal data after death.

 

These rights may be exercised at any time with MAILINBLACK:

  • By email at the following address: dpo@mailinblack.com
  • By post at the following address: 4 Place Sadi Carnot – 13002 Marseille
  • Our Data Protection Officer: PINT Avocats – dpo@mailinblack.com