Privacy policy

What is the purpose of our Privacy Policy?

Flatchr International, which manages the www.flatchr.io website, attaches great importance to the protection and confidentiality of your personal data, which we consider to be a mark of reliability and trust.

As such, our Personal Data Confidentiality Policy precisely reflects our desire to ensure that, within Flatchr International, the rules applicable to the protection of personal data and, more specifically, those of the General Data Protection Regulation ("GDPR") are respected.

In particular, our Privacy Policy aims to inform you about how and why we process your personal data as part of the services we provide to you.

Who is our Privacy Policy aimed at?

Our Privacy Policy is addressed to you, regardless of where you live, as long as you are at least 15 years old, whether you are one of our customers or "just" a visitor to www.flatchr.io.

If you are under the legal age detailed above, you are not authorized to use our services without the prior and explicit consent of one of your parents or the holder of parental authority, which must be sent to us by e-mail at dpo@flatchr.io.

If you believe that we are holding personal data about your children without your consent, please contact us at the dedicated address detailed above.

Why do we process your personal data and on what basis?

We process your personal data mainly for the following reasons:

• to browse our website, to benefit from our services and so that we can respond to your requests (e.g. requests for information, complaints, etc.) on the basis of our general terms of use and our legitimate interest in providing you with the best possible service.
• to manage our customer service on the basis of contract performance and our legitimate interest in responding to your requests and complaints.
• keep you informed of our latest offers and events by e-mail, based on our legitimate interest in building customer loyalty and prospecting potential new customers.
• keep you informed of our latest offers and events by telephone, based on our legitimate interest in building customer loyalty and prospecting potential new customers.
• record the conversations we have with you during our sales prospecting calls, based on your prior consent and our legitimate interest in proving the performance of a contract and training our staff.
• to manage billing and any unpaid invoices, on the basis of our legitimate interest in obtaining consideration for the provision of our service and on the basis of our general terms and conditions.
• follow us and comment on our publications on social networks on the basis of our legitimate interest in having a dedicated page on social networks.
• use our instant messaging service on the basis of our legitimate interest in exchanging easily with you.
• receive our newsletter, which informs you of all the latest news concerning our services, on the basis of our legitimate interest in building customer loyalty.
• operate the videos on our site on the basis of our legitimate interest in offering you content in video format.
• to make appointments with our teams on the basis of our legitimate interest in offering you an easy way to make an appointment with us.
• send satisfaction surveys based on our legitimate interest in improving our services.

How do we obtain your personal data?

Your data is collected directly from you when you are a customer of our services or a "simple" visitor to our www.flatchr.io website, and we undertake to process your data only for the purposes described above.

Your personal data may also be processed indirectly in the context of trade fairs or social networks (e.g. LinkedIn).

However, when you voluntarily publish content on our social networking pages, you acknowledge that you are entirely responsible for any personal information you may transmit, regardless of the nature and origin of the information provided.

What personal data do we process and for how long?

We have summarized below the categories of personal data and their respective retention periods:

• Professional identification data (e.g. surname, first name, position, company, etc.) and contact details (e.g. e-mail address and business telephone number, etc.) retained for the duration of the service provided, plus the statutory limitation periods, which are generally 5 years.
• When there is confusion between the name of your organization and your personal name (e.g.: self-employed entrepreneur, very small business, etc.), economic and financial data (e.g.: bank account number, verification code, etc.) retained for the duration necessary for the transaction and the management of invoicing and payments, plus the statutory limitation periods, which are generally 5 to 10 years.
• Telephone number used in our telephone prospecting campaigns, kept for a maximum of 3 years from the last contact we had with you.
• Email address, kept for a maximum of 3 years from the last contact we had with you as part of our email prospecting campaigns, and kept until the end of your newsletter subscription to receive our newsletter.
• Statistical data relating to the viewing of our videos, which are anonymized and stored indefinitely.
• Connection data (e.g. logs, IP address, etc.), which is kept for 1 year.
• Cookies, which are generally stored for a maximum of 13 months. For more details on how we use your cookies, please consult our cookies policy, which is available at all times on our website.
• Voice recorded during telephone conversations and kept for a maximum of 6 months, with the exception of calls used to justify the conclusion of a contract, in which case they are kept for the statutory limitation period, which is generally 5 years.
• Video-protection images collected by our video-protection cameras and kept for a maximum of one month.

Once the applicable retention periods have expired, the deletion of your personal data is irreversible and we will no longer be able to communicate it to you after this period. At most, we can only keep anonymous data for statistical purposes.

Please also note that in the event of litigation, we are obliged to retain all your personal data for the duration of the case, even after the expiry of the retention periods described above.

What rights do you have to control the use of your personal data?

The applicable data protection regulations grant you specific rights that you can exercise, at any time and free of charge, to control the use we make of your data.

• The right toaccess and copy your personal data, provided this request does not conflict with business secrecy, confidentiality or the confidentiality of correspondence.
• The right to rectify any personal data that may be erroneous, obsolete or incomplete.
• The right to object to the processing of your personal data for the purposes of commercial canvassing, as well as to processing based on our legitimate interests, unless there are compelling legitimate grounds for such processing which override your interests, rights and freedoms.
• The right to request the deletion ("right to be forgotten") of personal data that is not essential to the proper functioning of our services.
• The right to restrict the use of your personal data in the event of a dispute over the legitimacy of processing.
• The right to data portability, which enables you to retrieve part of your personal data so that it can be easily stored or transmitted from one information system to another.
• The right to give instructions on what to do with your data in the event of your death, either through yourself, a trusted third party or a beneficiary.

For a request to be taken into account, it must be made directly by you or your representative at dpo@flatchr.io.

Requests cannot be made by anyone other than you or your representative. We may therefore ask you to provide proof of identity if there is any doubt about the identity of the applicant, as well as proof of representation.

We will respond to your request as quickly as possible, subject to a maximum of one month from receipt, unless the request is technically complex or we receive many requests at the same time. In this case, the maximum response time is three months.

Please note that we can always refuse to respond to any excessive or unfounded request, particularly in view of its repetitive nature.

Who can access your personal data?

Your personal data is processed by our teams and by our technical service providers for the sole purpose of operating our service.

We check all our technical service providers before recruiting them, to ensure that they comply scrupulously with the rules applicable to the protection of personal data.

WE ALSO GUARANTEE THAT WE WILL NEVER TRANSFER OR SELL YOUR DATA TO THIRD PARTIES OR BUSINESS PARTNERS.

Can your personal data be transferred outside the European Union?

Personal data processed by our website is exclusively hosted on servers located within the European Union.

Furthermore, we do our utmost to use only technical tools whose servers are also located within the European Union. However, if this is not the case, we take great care to ensure that they implement the appropriate guarantees required to ensure the confidentiality and protection of your personal data.

How do we protect your personal data?

We implement all the technical and organizational means required to guarantee the security of your personal data on a day-to-day basis and, in particular, to combat any risk of destruction, loss, alteration or disclosure.

Do we use cookies when you browse our website?

We inform you that we use cookies when you browse our website. For more information, please consult our Cookie Policy.

Who can you contact to obtain more information about the use of your personal data?

To best guarantee the protection and integrity of your data, we have officially appointed an independent Data Protection Officer ("DPO") with our supervisory authority.

You can contact our DPO at any time, free of charge, at dpo@flatchr.io to obtain further information or details on how we process your data.

How can you contact the CNIL?

You can contact the "Commission nationale de l'informatique et des libertés" or "CNIL" at any time using the following details: CNIL Complaints Department, 3 place de Fontenoy - TSA 80751, 75334 Paris Cedex 07 or by telephone at 01.53.73.22.22.

Can the Privacy Policy be modified?

We may modify our Privacy Policy at any time to adapt it to new legal requirements and to new processing operations that we may implement in the future.

Certified by Dipeeo ®