Privacy Policy

Introduction

In the context of using its services, and in particular the services accessible on its website, mobile site, online store and mobile applications, Api & You, acting as data controller, may collect and process personal data concerning you.

We are committed to respecting the privacy of prospects and visitors of our sites: website, mobile site, online store and mobile applications. All processing of personal data carried out within the framework of the accessible services complies with the applicable local regulations on personal data protection, and in particular with the provisions of the French Data Protection Act (“loi informatique et libertés”) of 6 January 1978 as amended, and the General Data Protection Regulation (Regulation EU 2016/679), or “GDPR”.

1 – What are our commitments regarding the protection of personal data?

Api & You is committed to ensuring a high level of protection for the personal data of its customers, prospects, users of its sites (website, mobile site, online store and mobile applications), and any other person whose personal data it processes.

Api & You undertakes to comply with the regulations applicable to all the personal data processing operations it carries out:

• Your personal data is processed in a lawful, fair and transparent manner.
• Your personal data is collected for specified, explicit and legitimate purposes, and is not further processed in a manner incompatible with those purposes.
• Your personal data is kept in an adequate and relevant manner and is limited to what is necessary in relation to the purposes for which it is processed.
• Your personal data is accurate, kept up to date, and all reasonable measures are taken to ensure that inaccurate data, having regard to the purposes for which it is processed, is erased or rectified without delay.

Api & You implements appropriate technical and organisational measures in order to guarantee a level of security suited to the risk inherent in its processing operations, to meet regulatory requirements and to protect the rights and the data of the persons concerned from the design stage of the processing operations onward.

Furthermore, Api & You contractually imposes the same level of personal data protection on its subcontractors (service providers, suppliers, etc.).

2 – What personal data do we collect?

A – Depending on the purpose of the collection

The personal data we collect varies depending on the purpose of the collection and the Service we provide to you.

Generally, we may collect the following categories of personal data directly:

a) personal contact details, such as your last name, first name, email address, postal address and your telephone number(s);

b) the credentials used to access your online account, i.e. username and password. This is necessary for us to create a personal user account;

c) exchanges with us, which may include details of conversations via chat or customer service;

d) demographic information, such as your age, your gender and your lifestyle preferences (including, among other things, your favourite products and the interest you take in them);

e) browsing history, such as the pages visited, the date of the visit, the location during the visit, or your IP address;

f) payment-related information when a purchase or reservation is made on one of our sites, online stores or applications. The invoice is generally issued in your name, with your billing address and payment data such as your credit card or bank account details.

We may also collect personal data concerning you indirectly when you share content on social media, websites, stores or applications relating to our products and services, or when you respond to our posts and promotional announcements on social media.

B – Personal data concerning minors

Api & You does not collect or process personal data relating to children under the age of 18 without the prior consent of the parents or holders of parental responsibility for the child.

If personal data concerning children is collected via our sites (website, mobile site, online store and mobile applications), the parents or holders of parental authority have the option to object to this by contacting us at the address indicated at the bottom of this page.

3 – How is personal data collected?

A – Means of collecting your data

In the context of our relationship, you may communicate your personal data to us through various means, and in particular on our sites (website, mobile site, online store and mobile applications) during your internet browsing, purchases or reservations, by filling in the various collection forms, when subscribing to the e-newsletter, when creating an account, when submitting a job application, when posting comments on our social media pages, when establishing any contact with our establishment, or when you transmit your personal data to us in any other way.

B – IP address

The IP address is a series of numbers automatically assigned to your computer by your internet service provider each time you connect. With each of your requests on the site, our servers record the trace of your visit. We collect IP addresses for the purpose of analysing trends on the site. We do not transmit any information that would allow you to be identified, which means that your session will be recorded but will remain anonymous to us. We may use your IP address in cooperation with your internet service provider to identify you in the event that we need to enforce the terms of use in order to protect our services or customers, or in compliance with applicable laws.

C – Cookies

In order to constantly improve the quality of the services offered on our sites (website, mobile site, online store and mobile application) and their alignment with your expectations, Api & You may use “cookies”, text files used to identify your device when you connect to one of our services. The placing of a cookie or tracker on your device (computer, tablet, smartphone, etc.) allows Api & You to collect information and personal data, according to the settings you have chosen on your device.

Types of cookies used:

a) Cookies essential to the use of the site. These allow you to use the main features of the site, such as the purchase or reservation of services. By disabling the use of cookies, you will no longer be able to benefit from these features. The information retained cannot be used for commercial purposes.

b) Site performance cookies. Performance cookies allow us to optimise our website and to detect any technical problems you may encounter. They allow us to gather information on how you use the site, in particular the number of visits per page, the number of error messages displayed, the time spent on a page, or the number of clicks on an area of the site. The information retained cannot be used for commercial purposes.

c) Functionality cookies. These cookies allow the site to remember the choices you have made (such as your username, the language chosen or the region you are in) and to provide more precise and personalised features. These cookies can also be used to remember changes made by the user, such as text size or font. They can also be used to provide services you have requested, such as watching a video or leaving a comment on a blog. The information collected by these cookies may be anonymised and cannot track your browsing activity on other sites. By using our website, you agree to receive this type of cookie on your device.

d) Advertising marketing cookies. These cookies collect information about your internet browsing habits in order to offer you advertisements tailored to you and matching your interests. They also allow us to limit the number of times you see an advertisement and help us assess the effectiveness of our advertising campaigns. They are generally installed by advertising networks with the authorisation of the website operator. They remember the visits made to a site and share this information with other companies (advertisers, for example). Targeted or advertising cookies are often linked to the site features provided by the partner company. The information is collected and shared with third parties to offer audience targeting and optimisation solutions for advertisers and publishers. No personal data is gathered, and an individual cannot be identified via the data collected.

e) Cookies from third-party websites and social media. Our website contains links and/or content directing to other sites and social media, and we do not know which cookies are used by these. To find out more, please consult the information provided by these third-party sites and social media on their own cookies.

D – Respect for your privacy

We are committed to protecting your privacy and adhere to the following two principles:

• We do not associate your cookies with any information that would allow you to be directly and personally identified. Cookies cannot in any way reveal your address, your date of birth, your telephone number or any other information that would identify you.
• We do not provide any personal information to advertisers or to third-party sites that display our interest-based advertisements.

If your computer or mobile device is used by several people, or if it has several browsing programs, it is possible that the content displayed to other users may correspond to your preferences. If you wish, you can change your browser settings.

For more information on how cookies and targeted advertising work, you can consult the website of the CNIL (the French data protection authority): https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

E – Links to third-party sites

Our sites (website, mobile site, online store and mobile applications) may contain links redirecting to third-party websites.

We decline all responsibility for the collection, use, management, sharing or disclosure of data and information by these third parties.

The communication of information on third-party sites is governed by the privacy policy and terms of use of those sites. We recommend that you read the privacy policies of these websites before submitting any personal information.

4 – What are the data likely to be collected used for?

Your data is mainly used for the purposes of reservation and purchase (provision of services, specific services and products), prospecting, customer loyalty, engagement, commercial information, satisfaction surveys, organisation of prize competitions, new services and products intended to improve your customer experience within our establishment, statistical studies, recruitment, after-sales service, and the handling of your requests and/or complaints. Apart from cases where your consent has been obtained (in particular to send you personalised offers), the processing of your data for the various purposes mentioned above is in particular necessary:

• To ensure the performance of the service contract;
• To comply with a legal obligation;
• For the purposes of the legitimate interests pursued by our establishment (in particular developing new services and offers, improving customer service, etc.).

More specifically, your data is used:

• To enable you to benefit from all the services or offerings available on our establishment’s website, mobile site, store and mobile applications: creation of a user account, e-newsletter, management of reservations, assistance and complaints, management of loyalty programmes, etc.
• To enable you to browse our websites;
• To best match our information, notifications, offers and other forms of service to your interests;
• To facilitate the completion of administrative formalities relating to reservation and purchase.

5 – How long is your data kept?

Api & You undertakes to retain your personal data for a period not exceeding that necessary for the purposes for which it is processed.

Retention periods are defined according to the processing purposes implemented by Api & You and take into account, in particular, the applicable legal provisions imposing a specific retention period for certain categories of data, any applicable limitation periods, as well as the recommendations of the CNIL concerning certain categories of data processing.

6 – Who is likely to access your personal data?

A – Recipients of your data

The data collected on our website, mobile site, online store and mobile applications may be communicated to our internal staff, or to its ancillary service providers (subcontractors, service providers, banks), in the context of the performance of all or part of the services referred to above. We remind you that, in this context, Api & You asks its service providers to put in place strict measures for the confidentiality and protection of this data.

B – Transfers of data outside the European Union

Personal data may be processed outside the European Economic Area (EEA). If this is the case, Api & You will do everything possible to ensure that this international data transfer has an adequate level of security and safeguards.

7 – How to exercise your rights?

In accordance with the applicable regulations on personal data protection, you may, at any time, exercise your rights of access, rectification and erasure of the data concerning you, as well as your rights to restriction of and objection to processing and to the portability of your personal data.

In addition, you are legally entitled to define instructions regarding the fate of your personal data after your death.

Furthermore, any person who is a minor at the time their personal data is collected may obtain its erasure as soon as possible.

These rights are exercised by post at the following address:

Api & You 27 grande rue 39800 Poligny France contact@console-secretbox.fr

In this context, we kindly ask you to accompany your request with the elements necessary for your identification (last name, first name, email) as well as any other information necessary to confirm your identity. You also have the right to lodge a complaint with the CNIL (the French Data Protection Authority) in the event of a breach of the applicable regulations on the protection of Personal Data, and in particular of the GDPR.

8 – IT security / Securing transactions

Ensuring the security and confidentiality of the personal data you entrust to us is a priority for Api & You. We therefore implement all useful technical and organisational measures, having regard to the nature, scope and context of the personal data you communicate to us and the risks presented by its processing, to preserve the security of your personal data and, in particular, to prevent any destruction, loss, alteration, disclosure, intrusion or unauthorised access to this data, whether accidental or unlawful.

We offer you a secure online payment system using the latest technologies in force.

Api & You strives to combat identity theft practices on the internet. This is why we use, for example, a system for detecting fraudulent payments made by bank card. This system is intended to protect you in the event of the loss or theft of your bank card.

The security and confidentiality of personal data rely on everyone’s good practices. This is why we invite you not to share your passwords with third parties, to systematically log out of your profile and your social account (in particular in the case of linked accounts), and to close your browser window at the end of your working session, particularly if you access the internet from a computer shared with others. This will prevent other users from accessing your personal information.

9 – Contact us

For any further questions relating to this policy or to the way Api & You processes your personal data, we invite you to contact us at the following address: contact@console-secretbox.fr

10 – Modifications to the statement

Api & You reserves the right to adapt the personal data protection policy. When we make substantial changes to this Statement, we will publish a link to the Statement on the home page of our site.

11 – Opposition to telephone solicitation

Users have the option to register on the opposition list for telephone solicitation by visiting the following link: https://www.bloctel.gouv.fr/