Privacy Policy (GDPR Compliance)

1. Introduction

We attach great importance to the protection of our users' personal data and are committed to complying with the regulations in force, in particular the General Data Protection Regulation (GDPR – EU 2016/679). This privacy policy aims to inform you transparently about the collection, use, and protection of your personal data.

Data controller:

SARL LEATI – Europarc de Pichaury Bât. B5 – 1330 avenue G. de la Lauzière – 13856 AIX-EN-PROVENCE cedex 3 – FRANCE. The company can be reached using the contact form.

2. Data Collected and Purposes of Processing

We only collect the data strictly necessary for the proper functioning of our services. Below are the types of data collected and their purposes:

  • Registration and User Account Data: First name, last name, email, city, password. This data enables account management and access to services.
  • Transaction Data: If you purchase paid services, we collect the information necessary to process your payment via our secure provider.
  • Browsing and Connection Data: IP address, connection logs, data related to site usage, cookies (see dedicated section).
  • Geolocation: We only request access to your GPS if you explicitly ask for it when entering a city upon registration or to filter results in the directory or activity feed. No other sensors (camera, microphone, altimeter, gyroscope, etc.) are utilized.

3. Legal Basis for Data Processing

We process your personal data on the following legal bases:

  • Your consent (e.g., subscription to a newsletter, GPS activation).
  • Performance of a contract (e.g., account management, transactions).
  • Compliance with a legal obligation (e.g., invoice retention).
  • Our legitimate interest (e.g., service improvement, fraud prevention).

4. Data Retention Period

We apply strict data retention policies:

  • Deletion of Inactive Accounts: If you do not log in for 2 years, your account and all associated personal data will be deleted.
  • Deletion of Connection Logs: Your connection logs are automatically deleted after 12 months.
  • Other Data: They are retained only for the time necessary for the purpose for which they were collected.

5. Data Deletion

In accordance with the General Data Protection Regulation (GDPR), you may request the permanent deletion of your personal data at any time.

To exercise this right, simply contact us using this form and specify your deletion request.

We will process your request as quickly as possible and confirm in writing once all of your data has been deleted.

6. User Rights

In accordance with the GDPR, you have the following rights:

  • Right of Access: You can request a copy of your personal data.
  • Right to Rectification: You can correct inaccurate information.
  • Right to Erasure: You can request the deletion of your data.
  • Right to Object: You can refuse the use of some of your data.
  • Right to Data Portability: You can retrieve your data in a usable format.
  • Right to Restrict Processing: You can temporarily restrict the use of your data.
  • Right to Withdraw Consent: When processing is based on your consent, you can withdraw it at any time.

To exercise your rights: For any request, contact us.

7. Security and Data Protection

We implement technical and organizational measures to ensure the security of your data and to prevent any unauthorized access, loss, or alteration.

8. Data Sharing and Transfers Outside the EU

We only share your data with third parties in the following cases:

  • Service Providers: Hosting, secure payments, analytics.
  • Legal Obligations: When required by law.
    If a data transfer outside the European Union is necessary, we ensure that it is governed by appropriate safeguards (e.g., European Commission's standard contractual clauses).

9. Cookies and Similar Technologies

We use cookies to improve the quality of our services, mainly to maintain your login session in the management interface of your portfolio and to store your display preferences.

By default, most web browsers accept cookies. You can change this setting and refuse cookies. However, you should be aware that by refusing cookies, you prevent the execution of certain functions.

10. Data Breach Notification

In the event of a personal data breach, we undertake to inform the competent authority and, if necessary, the affected users, in accordance with the applicable regulations.

11. Contact and Complaints

If you have any questions about our privacy policy, you can contact us.

If you believe your rights are not being respected, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) via www.cnil.fr.

12. Policy Update

We may update this privacy policy to reflect legal or technical changes. The last update was made on March 18, 2025. We will inform you of any significant modifications.