Privacy Policy

1. Introduction 

Protecting your Personal Data is a priority at Malt. 

Malt is a marketplace that connects businesses (“Users”) through a platform (“Marketplace”). More specifically, it operates as a platform where companies (“User-client”) may select and work with independent professionals (“User-freelancer”) for various projects. 

At Malt, we are committed to collecting Personal Data in compliance with the data protection laws applicable to us such as the European Union Data Protection Regulation 2016/679 ("GDPR"), to provide you with the best possible service, and to ensure its confidentiality and security.

2. Purpose and scope

This Policy sets out important information about how the Company manages your Personal Data in connection with the use of our Marketplace, and our website where Malt acts as a Data controller, and your rights with regards to the processing of your personal information.

This Policy applies to individuals that have created a Malt account (“User Account”) on the Marketplace with the purpose to use the Marketplace, and individuals that have visited the Marketplace without creating a User Account (“Visitors”). In addition, this Policy applies to our subcontractors, external consultants, clients, prospects (“Third-Party Partners”) whose Personal Data we process in the course of business. 

If you are a candidate for a position at Malt, please refer to Malt’s Candidate Privacy Policy available HERE. 

3. General provisions

"Malt", "we" or “us” refer to Malt Group which includes Malt Community, SA registered with the Paris Trade and Companies Register under number 791 354 871, whose registered office is located at 18 rue Godot de Mauroy, 75009 Paris, and its subsidiaries, namely the following companies: Malt Community SL (Spain), Malt Community GmbH (Germany), Malt Community BV (Netherlands), Malt Community Belgium (Belgium), Malt Community Ltd (United Kingdom), M a l t Software Design LLC (United Arab Emirates) (“Affiliates”). “Data Subject” or “you” refers to the individuals to whom this Policy is applicable to. 

We reserve the right to modify, update this Policy at any time to take into consideration any legal, or technical change. In the event of a substantial change to this Policy, you will be notified via the email address provided when you registered. If you continue to use the Marketplace, or visit the Site, after such changes are made, you will be deemed to have accepted such changes, and the most up-to-date Policy is the only Policy applicable. The most current version of the Policy governs your use of your Personal Data and will be available at: https://www.malt.fr/about/privacy/policy.

Capitalized terms are defined in this Policy, in the Marketplace’s Terms and Conditions available HERE, or in the GDPR. 

We strive to make our policies understandable to all users. If you require a version of this policy in a language other than English, please contact us at [email protected]. We will endeavor to provide you with a translation or the necessary assistance in a reasonable timeframe. Please note that in the event of any discrepancy or conflict between the English version and any translated version, the English version shall prevail.

4. How do we collect Personal Data? 

We may collect Personal Data directly, or indirectly. We collect Personal Data notably when: you reach our Marketplace to visit or to create a User Account; you get in touch with us or are put in touch with us through a third-party; you use our Marketplace; our partners – duly authorized by you – transfer to us your Personal Data. 

5. What Personal Data do we collect, what are the purpose and lawful basis of Personal Data collection, and how long do we retain information for?

You will find below is a list of the data we may collect: 

6. What about our Cookies? 

We use authentication cookies, security cookies and cookies relating to the integrity of the site, location cookies, cookies related to the functionality of the site and services, analytics and search cookies and cookies to deliver advertising messages.

You can accept, decline or set your cookie choices when you first visit the Marketplace and you can change your choices at any time by visiting the cookie section of our Data Protection Center available HERE. You will also find a more detailed description of the cookies we set there.

7. Who do we transfer your Personal Data to?

We are Data Controller of the Personal Data collected through the Marketplace and only use it for the purposes detailed above. 

Malt is a global marketplace with Users all around the world. We may share information relating to Users to facilitate their interaction, to provide them with business opportunities that may correspond to the User-freelancer’s professional skills and the commercial needs of User-client, and to enable the contracting of assignments.

To operate the Marketplace, Malt relies on vetted Third-Party Partners that act as processors such as software providers, hosting providers, document verification services, accountants, lawyers a detailed list of whom can be found in Appendix 1. 

We may disclose your information if it is reasonably necessary to comply with a legal or regulatory obligation, legal process or governmental request from a public administration (“Authorized Third-Parties”), to protect the safety of any person, to address any fraudulent, security or technical issues, or to protect the rights of Users.

We may share information relating to Users to respond to requests for information from our investors (including buyers), accountants and auditors, in the context of possible fundraising or verification of the use of funds raised, in compliance with the regulations in force.

We share Personal Data within the Malt Group on an “as-necessary” basis.

8. Do we transfer your Personal Data internationally? 

Some Users may be established outside the European Union for example in countries subject to an adequacy decision by the European Commission. For third countries that are not located in the European Economic Area (“EEA”) and that do not benefit from an adequacy decision, Users located in those countries accessing Personal Data of Users residing in the European Union,  agree to be bound by the standard contractual clauses for the transfer of Personal Data to third countries pursuant to  DECISION (EU) 2021/914 of 4 June 2021, module 1 Controller to Controller. 

To facilitate our global operations, we may transfer information that may include Personal Data to other Malt Affiliates or our Third-Party Partners, where we have operations for the purposes described in this Policy. This Policy applies even if we transfer Personal Data to other countries. We have taken appropriate safeguards to require that your Personal Data will remain protected wherever it is transferred. We may rely on Standard Contractual Clauses (approved by the European Commission), the UK International Data Transfer Addendum (approved by the UK authorities), European Commission’s adequacy decisions, where required.  We also have additional safeguards where appropriate such as transfer impact assessments, as well as technical and organization measures.

9. How do we ensure your Personal Data’s security?

We attach great importance to the security and confidentiality of our Users' Personal Data. We therefore implement appropriate technical and organisational measures to ensure the constant security, confidentiality, integrity, availability and resilience of our information system and your Personal Data to protect the Personal Data we process, against destruction, loss, alteration, unauthorized disclosure or access to such Personal Data. 

In particular:

• We encrypt most of our services using SSL technology;

• We verify your email address when you create your User Account;

• We conduct internal audits on Personal Data collection, storage, and processing, including physical security measures, to prevent unauthorized access to our systems;

• Access to Personal Data is strictly restricted to Malt employees and contractors who need to access it under the principle of minimization to process it on our behalf. These individuals are subject to strict confidentiality obligations and are subject to disciplinary action up to and including dismissal in the event of non-compliance.

10. What are your rights?

You have the following rights:

• Rights of access: you have the right to access your Personal Data processed by Malt. You can access such Personal Data directly from your User Account, we reserve the right to charge a reasonable fee for excessive requests. 

• Rights to rectification: you may request that Malt rectify any Personal Data concerning you that is inaccurate, outdated or incomplete. If you need to update your User Account, we invite you to make these changes and additions directly from your User Account. If you feel that Personal Data generated by Malt concerning you needs to be modified or supplemented and you are unable to make this change on your own, we invite you to make a request by writing to us at [email protected].

• Rights to erasure: you have the right to obtain from us the erasure, without undue delay, of Personal Data concerning you subject to our legitimate interest or any legal obligation requiring us to retain it. For security reasons, and to avoid unwanted deletion of the account, we invite you to do this by yourself once logged in to your User Account by following this link: www.malt.fr/account/cancellation. Search engines may still retain copies of your public profile information for up to a month after you have deleted your Personal Data from the Marketplace. Malt is not responsible for such processing of your Personal Data by third-parties.

• Right to restriction of processing: you can request that Malt restrict the processing of your Personal Data (e.g. temporarily making your profile unavailable on the site), when one of the following applies: you contest the accuracy of the Personal Data concerning you (in this case, we will hide your Personal Data for a period of time that allows us to verify its accuracy); you consider that the processing of your Personal Data is unlawful and you object to its deletion and demand instead the restriction of its use; we no longer need the Personal Data concerning you for the purposes of the processing, but it is still necessary to enable you to establish, exercise or defend legal claims; you have exercised your right to object (we will restrict the processing of your Personal Data, while we are verifying whether the legitimate grounds we pursue outweigh your right). If we decide to lift the restriction of the processing of your Personal Data, we will inform you.

• Right to object: you may object to the use of your information if both of the following conditions are met: (i) you can justify reasons relating to your situation and (ii) the legal basis for our use is the pursuit of a legitimate interest. Malt will then discontinue the processing unless compelling legitimate grounds exist to justify the continuation of the processing, or for the establishment, exercise or defense of legal claims.

• Right to portability: you can request, under certain circumstances, the portability of your Personal Data at any time. By exercising this right, we undertake to transmit to you, within a reasonable time and in a machine-readable format, the Personal Data you have provided to us, whether declared by you or generated by your activity on the Marketplace.

• Right to withdraw consent: insofar as the processing of your Personal Data is based on your consent, you have the right to withdraw your consent at any time. However, this does not affect the validity of your consent for the past.

• The right to lodge a complaint with a supervisory authority: if necessary and if a possible dispute does not lead to an amicable resolution, you always have the option of contacting the competent Personal Data protection authority to lodge a complaint. The competent supervisory authority to hear any request concerning us, including, where applicable, a complaint from a user, is the Commission Nationale de l'Informatique et des Libertés (CNIL). Website: https://www.cnil.fr/fr You can always refer the matter to any data protection authority, in your country of residence, the country where you work, or in the country of which you are a citizen, and the latter will take care of forwarding your request to the CNIL.

11. How do you contact us? 

You may address any questions regarding the protection of Personal Data at Malt, or send a request to exercise your rights to access, rectify, oppose, delete, limit, transport to our Data Protection Officer:

• by email at: [email protected]

• by post, addressed to: DPO, Malt Community, 18 rue Godot de Mauroy, 75009 Paris

12. Appendix 1: List of Third-Party Partners

Last update: 22/10/2025