This Application collects some Personal Data from its Users.
Personal Data: Cookies; Usage Data
Personal Data: Trackers; Usage Data
Personal Data: device information; email address; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data; User ID
Personal Data: Cookies; Usage Data
Personal Data: Trackers; Usage Data
Personal Data: Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); various types of Data as specified in the privacy policy of the service
Personal Data: browser information; city; device information; latitude (of city); longitude (of city); number of Users; session statistics; Trackers; Usage Data
Personal Data: browsing history; coarse location; device information; email address; first name; last name; login history; phone number; primary account information; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Universally unique identifier (UUID); Usage Data; User ID
Personal Data: email address; first name; last name; phone number
Personal Data: city; company name; country; county; date of birth; email address; first name; gender; last name; phone number; physical address; profession; state; Trackers; Usage Data; ZIP/Postal code
Personal Data: Trackers; Usage Data
Personal Data: Trackers; Usage Data; various types of Data as specified in the privacy policy of the service
Personal Data: various types of Data as specified in the privacy policy of the service
Personal Data: Trackers; Usage Data; various types of Data
Personal Data: Trackers; Usage Data; various types of Data
Personal Data: email address; first name; last name; various types of Data
Personal Data: phone number
Personal Data: company name; country; Data communicated while using the service; date of birth; email address; first name; gender; last name; password; phone number; physical address; Tax ID; Trackers; Usage Data
Personal Data: email address; first name; gender; last name; phone number
Personal Data: Cookies; email address
Personal Data: Trackers; Usage Data
Personal Data: Trackers; Usage Data
Personal Data: various types of Data as specified in the privacy policy of the service
Personal Data: company name; country; Current City; email address; first name; gender; last name; phone number; physical address; profession; purchase history; Trackers; Usage Data; username; various types of Data as specified in the privacy policy of the service
In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.
As part of its activities, Le Collectionist collects personal data relating to managing its clientèle, i.e. all personal data required to set up, manage, and monitor the files of lessors and lessees (hereinafter referred to as the "Lessors", "Lessees" or "Guests").
1. Data Controller
The person responsible for collecting and processing data on the Website is Le Collectionist, 65 rue de la Victoire, 75009 Paris, SIREN no.: 789370152, contact@lecollectionist.com.
2. Data Protection Officer
The person responsible for collecting and processing data on the Website is Le Collectionist, 65 rue de la Victoire, 75009 Paris, SIREN no.: 789370152, myprivacy@lecollectionist.com.
3. Data collected from our Guests
3.1. Data collected from our Guests
As part of its contractual relationship, Le Collectionist may collect and process information from:
• Lessees, including: first and last names, dates of birth, copies of ID cards, telephone numbers, postal addresses, email addresses, copies of passports, marital status, information on family members, bank details, history of the contractual relationship, behavioral and web browsing data, food allergies, disability status
• Lessors, including: first and last names, dates of birth, copies of ID cards, telephone numbers, postal addresses, email addresses, contractual relationship history, behavioral and web browsing data.
3.2. Purposes for collecting personal data
The data collected during the contractual relationship are subject to automated processing for the purpose of:
• performing the contractual commitments;
• contacting the Guests;
• avoiding any illicit or illegal activity;
• enforcing the general conditions;
• filing legal proceedings;
• vetting the Guests ID.
3.3. Legal basis for processing
The legal basis for the data collected is a contractual relationship.
3.4. Data recipients
The data collected may only be consulted by Le Collectionist within the limits strictly necessary for performing its contractual obligations.
This data, whether in individual or aggregated form, is never made freely accessible to a third party.
3.5. Personal data retention period
The personal data collected is kept for the duration of the contractual relationship and for the time during which Le Collectionist may be liable.
Once the retention period has expired, Le Collectionist agrees to permanently delete the data subject’s data without keeping a copy.
3.6. Personal data security and confidentiality
Personal data is stored in secure conditions, according to current technical means and in compliance with the provisions of the General Data Protection Regulation and the current national laws.
Access to Le Collectionist's facilities is also secured.
3.7. Data minimization
Le Collectionist may also collect and process any data voluntarily submitted by its Guests.
Le Collectionist advises its Guests to provide personal data that is strictly necessary for managing its customer base.
Le Collectionist agrees to only store and process data that is strictly necessary for managing its customer base and will delete any data received that is not useful for its activities as soon as possible.
3.8. Respecting rights
Guests have the following rights concerning their personal data, which they can exercise by writing to the following address: legal-information@lecollectionist.com.
3.8.1. Right to information, access and communication of data
Le Collectionist's Guests have the right to access their personal data.
Due to Le Collectionist's obligation of security and confidentiality when processing personal data, requests will only be processed if Guests provide proof of their identity, in particular by submitting a scan of their valid ID (in the case of a request submitted via the dedicated electronic form) or a signed photocopy of their valid ID (in the case of a written request), both of which must be accompanied by the words "I hereby certify on my honor that the copy of this ID is a certified true copy of the original. Drawn up in … on … ”, followed by their signature.
To help them with this, here, Guests will find a template letter prepared by the CNIL (French Data Protection Authority).
3.8.2. Right to rectify and delete data and right to be forgotten
Le Collectionist's Guests have the right to request the rectification, updating, blocking, or erasure of their personal data that may be inaccurate, erroneous, incomplete, or obsolete.
Guests of Le Collectionist may also specify general and specific instructions regarding the fate of their personal data after their death. Where applicable, the heirs of a deceased person may request that the death of their loved one be taken into consideration and/or that the necessary updates be made.
3.8.3. Right to object to data processing
Le Collectionist's Guests have the right to object to the processing of their personal data.
3.8.4. Right to data portability
Le Collectionist's Guests have the right to receive the personal data they have provided to Le Collectionist in an open, readable, portable format.
3.8.5. Right to limit processing
Le Collectionist's Guests have the right to request that the processing of their personal data by Le Collectionist be limited. Thus, their data can only be stored and not used by Le Collectionist.
3.8.6. Response Times
Le Collectionist agrees to respond to every request to access, rectify, oppose, or any other additional request for further information within a reasonable time period which may not exceed 1 month from receipt of the request.
3.8.7. Complaints to the Supervisory Authority
If Guests believe that Le Collectionist is not complying with its obligations with regard to their personal data, they can send a complaint or a request to the supervisory authority. In France, the relevant authority is the CNIL to which requests can be sent here.
3.9. Data transfer
3.9.1. Transfer to partners
Le Collectionist uses authorized service providers to assist in the processing of data for its services. These service providers may be located outside the European Union.
Le Collectionist has previously ensured that its service providers have implemented adequate guarantees and comply with strict rules regarding confidentiality, use, and data protection.
As data controller, Le Collectionist uses the following subcontractors to manage the personal data of its guests:
• OVH, France, Website hosting, https://ovhcloud.com/legal/privacy-policy
• Stripe, USA, Online payment software. Standard contractual clause (https://stripe.com/privacy-center/legal#data-transfers)
• Google +, USA, Managing people's reviews of products, services, or content. Standard contractual clause: https://policies.google.com/privacy/frameworks
• Gmail, USA, Email service. Standard contractual clause: https://policies.google.com/privacy/frameworks
• Google Calendar, USA, Online calendar management service. Standard contractual clause: https://policies.google.com/privacy/frameworks
• Google Drive, USA, Cloud service for storing and sharing files. Standard contractual clause: https://policies.google.com/privacy/frameworks
• Google Sheets, USA, Cloud-based spreadsheet software. Standard contractual clause: https://policies.google.com/privacy/frameworks
• Amazon Web Services, USA, Cloud data storage service, hosting company. Standard contractual clause: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_French_2020-08-15.pdf
• Box.com, USA, Cloud service for storing and sharing files. Binding Corporate Rules: https://www.box.com/fr-fr/legal/regionalnotice
• Apple, USA, Sending email messages. Standard contractual clause: https://www.apple.com/fr/legal/privacy/fr-ww/
• Heroku, USA, Cloud data storage service, hosting company. Binding Corporate Rules: https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/EU-Data-Transfer-Mechanisms-FAQ.pdf
• Slack, USA, Internal communications web services. Standard contractual clause: https://slack.com/intl/fr- fr/privacy-shield-notice
3.9.2. Transfer upon request or a court order
The Guest also agrees that Le Collectionist may disclose the data collected to any person upon request by a governmental authority or a court order.
3.9.3. Transfer in connection with a merger or acquisition
If Le Collectionist is involved in a merger, sale of assets, financing transaction, liquidation or bankruptcy or in an acquisition of all or part of its business by another company, the Guest consents to the data collected being transferred by Le Collectionist to that company and to that company processing personal data as described herein.
Le Collectionist
65 rue de la Victoire,
75009 Paris
Owner contact email: contact@lecollectionist.com