Introduction – Who are we?
This privacy policy (the “Privacy Policy”) applies to the use of the mySilae digital platform (hereinafter “mySilae”) accessible via a website (the “Website”) and an application (the “Application”).
The mySilae platform is published and marketed by SILAE (hereinafter “SILAE”), a simplified joint-stock company (SAS) with share capital of €100,000.00, whose registered office is located at Bâtiment D5, Zone Industrielle des Milles, 1330 avenue JRG Gauthier de la Lauzière, 13290 Aix-en-Provence, registered with the Aix-en-Provence Trade and Companies Register under number 518 892 211.
Concerned about respecting your privacy and your fundamental right to the protection of personal data (the “Personal Data” or “Data”), SILAE informs you through this Policy how your Data is processed and of the rights you have in relation to it, in accordance with the EU General Data Protection Regulation of 27 April 2016 (“GDPR”) and the French Data Protection Act of 6 January 1978, as amended (“French Data Protection Act”) (hereinafter the “Regulations”).
mySilae is a human resources management solution offering its users the following services:
- mySilae EVP: simplified transmission and validation of variable payroll elements via the mySilae application, with direct integration into payroll;
- mySilae: centralised management of schedules and leave requests via the mySilae application;
- mySilae Remote Work Day Management: centralised management of remote work day requests;
- mySilae: provision of dematerialized payslips.
- mySilae: review management
- mySilae: Employee Enrollment/Termination
(hereinafter the “Services” or the “mySilae Services”).
The MYSILAE Services are provided to you through your Employer or its accountancy firm (collectively referred to as the “Clients”).
What is our role regarding the processing of your Personal Data?
SILAE processes your Personal Data exclusively in accordance with the instructions and authorisations provided by the final Client (your employer or you).
The terms beginning with a capital letter that are not defined in this Privacy Policy shall be interpreted in accordance with the mySilae GTCs/Terms of Use.
Changes to the Privacy Policy
This Privacy Policy may be amended to take account of changes to the Services and the applicable Regulations.
SILAE will notify you of changes to the Privacy Policy at least thirty days before they come into force, using the e-mail address provided on mySilae or by any other means via the Application and Website interface.
SILAE invites you to review it regularly.
This Privacy Policy was last updated on 1 April 2025.
Definitions
Lead Administrator: Means the person appointed by the Partner as the user responsible for administering mySilae Entreprise accounts at the employer’s organisation.
Employees: Means the persons authorised by the Partner within the accountancy firm to manage the Final Client’s payroll.
User Account: Means the personal account opened by the User on the Website and the Application.
Contacts: Means the persons authorised by an Employee or by a Contact within the employer company (Final Client) to carry out operations on the payroll file relating to employees.
Final Client: Employer company and Data Controller.
Data Recipients: Means SILAE’s internal departments or third-party entities that may access the Data for a given purpose.
Personal Data: Means, within the meaning of the GDPR, any information relating to an identified or identifiable natural person (an identifiable person being a person who can be identified, directly or indirectly).
Employer: Means a company that uses the mySilae Services for its payroll and human resources management needs. It is also qualified as the Final Client and Data Controller.
Partner: Accountancy firm, payroll service provider or integrator of the mySilae GP solution providing the Employer with access to the Services. It acts as the link between the Final Client and SILAE.
Data Controller: The data controller is a natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data, in accordance with Article 4(7) of the GDPR.
First-tier Processor: Means the Partner acting on behalf of the employer.
Second-tier Processor: Means SILAE acting as the publisher of software used by the accountancy firm.
Processing: The processing of personal data under the GDPR means any operation performed on personal data, such as collection, recording, organisation, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, erasure or destruction of such data.
User: Means the Employee and Contact with access to the mySilae Entreprise platform and using the Services.
Silae’s role in processing your Personal Data
As stated in the introduction, when you use the mySilae Entreprise Application and Website, SILAE processes your Personal Data on behalf of and for the account of your Employer or its accountant, in its capacity as Processor.
SILAE processes your Personal Data in compliance with the Regulations and the instructions of the Data Controllers.
SILAE takes measures to ensure the protection and confidentiality of your Personal Data. To this end, it has all the required expertise and uses further Processors that have all the necessary guarantees for processing your Personal Data in compliance with the GDPR.
Categories of Personal Data, legal bases and purposes
SILAE undertakes to ensure that your Personal Data is processed in accordance with the applicable Regulations. No Personal Data is collected without your knowledge or processed for purposes of which you have not been informed.
| Purpose | Data collected | Retention period | Legal basis |
| Account creation |
Identity (Last name, First name); Employee number; Login ID: Password; IP address and log; |
Time required to activate the account 6 months for connection logs (security measure) |
Contract (acceptance of the Terms of Use) |
| Preparation, validation, distribution and provision of dematerialized payslips |
Identity (Last name, First name); Contact details; Occupation and position held; Salary; Salary elements (expressed): Social security number |
Duration of employment with the company | Legal obligation |
| Schedule management and absence requests |
Reasons for absence; Proof of absence; Remote work. |
According to your employer’s instructions | Employment contract |
| Review-related Data |
Review summary Your comments written during the review preparation phase |
6 years | Legal obligation |
| Personnel management |
Identity (Last name, First name) Supporting documents required before recruitment Degree Exit documents Driving licence number |
Duration of employment with the company Supporting documents will be retained for the time required to verify the Data and will then be deleted |
Employment contract |
To use the Application and access the Services, you may be identified via your telephone’s biometric system (fingerprint and facial recognition). This system improves the security of your documents while simplifying your navigation within the Application. Biometric information is stored securely on your device and is never transmitted to SILAE, thereby ensuring the confidentiality and protection of your Personal Data. The system is activated when you have accepted it on your device.
Silae is not responsible in the event of unlawful collection.
Downloaded documents are also not Silae’s responsibility, and documents requested by the employer must comply with the applicable regulations; Silae does not carry out any compliance checks.
Managing permissions (Application)
The mySilae Entreprise mobile application requires certain permissions to enable you to download and manage documents securely. These permissions are essential to ensure the proper operation of features related to HR document management.
Access to files and storage
The application requires access to your device’s files and storage so that you can download documents from your telephone and add them to your personal space in the application.
Camera and gallery
If you wish to add documents in image format, the application may request access to your camera and gallery in order to:
- Capture documents in image format to add them to your personal file.
- Select image files from your gallery to upload them to the application.
Access to these permissions is used solely for the proper operation of the application. You can change these permissions at any time in your device settings.
Your rights regarding your Personal Data
In accordance with the Regulations, you have the following rights regarding your Personal Data: the right of access, rectification, restriction, erasure, objection and portability.
These rights must be exercised directly with your employer. Silae will never respond directly to requests and will systematically invite you to contact your employer, who is the Data Controller. To find out how to exercise your rights, please refer to your company’s privacy policy.
If you believe that your rights regarding the protection of Personal Data have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL).
Recipients of your Personal Data
These Personal Data may be processed by the following persons:
- SILAE’s internal teams;
- Authorised Third Parties, as defined below.
Internal recipients of your Personal Data
Our support and technical departments may access the Data in connection with your support requests in order to resolve technical problems or assist you in using mySilae Entreprise.
SILAE implements authorisation measures to restrict access to your Personal Data to employees for whom such access is essential.
Recipients of your Personal Data
Your Personal Data may also be transferred to certain entities with access expressly authorised by law, including the following entities (hereinafter the “Authorised Third Parties”):
- Judicial authorities, particularly in connection with a judicial investigation or preliminary investigation;
- Administrative authorities, particularly duly authorised tax or financial authorities; and
- Where applicable, further Processors, namely persons processing your Personal Data on behalf of and on SILAE’s instructions, whose details are provided in the table below.
| Further Processor | Purpose | Server location |
| Azure | Hosting provider | Europe |
| SENGRID | E-mailing | Europe |
Security of your Personal Data
SILAE takes appropriate technical and organisational measures to guarantee the availability, integrity and confidentiality of your Personal Data.
SILAE also ensures that the further Processors it uses to process your Personal Data implement appropriate protection measures to guarantee its availability, integrity and confidentiality.
Use of Cookies
11.2. Cookies
11.2.1. What is a cookie?
Cookies are Data files temporarily stored on your device through the browser in order to retain the status of your activity on the Website or Application. Cookies contain a unique code that enables your device to be recognised during your visit to the Website (the session Cookie), during a subsequent visit or during subsequent use (the persistent Cookie).
They remain on the device until their lifespan expires, unless you exercise your right to object.
11.2.2. Use of Cookies
Cookies make it easier to simplify, complete and personalise your use of the Website and/or Application. No cookies are placed on your device by third-party partners (the “Third-Party Cookies”).
We use various trackers/cookies on the Website. For the purposes of operating the Website and Application, SILAE uses Cookies to measure audience figures and integrate services that improve the interactivity of the mySilae service.
In accordance with the Regulations, placing these Cookies on your device is not subject to your consent.
These audience measurement Cookies are used solely to produce anonymous statistics and for general monitoring of your browsing, for a lifespan not exceeding thirteen (13) months.
Transfer of your Personal Data outside the European Economic Area
SILAE endeavours to keep your Personal Data within the European Economic Area (EEA).
Your Personal Data is stored on servers located in the EEA.
However, should your Personal Data be transferred outside the EEA, SILAE undertakes to transfer your Personal Data only within a framework compliant with Chapter V of the GDPR, namely on the basis of:
- An adequacy decision by the European Commission;
- Standard contractual clauses for the protection of Personal Data adopted by the European Commission or the competent authorities;
- Binding corporate rules in accordance with Article 47 of the GDPR.
In any event, SILAE undertakes to inform you of any Processing involving the transfer of your Personal Data outside the EEA.