Privacy Policy of Le Collectionist

This Application collects some Personal Data from its Users.

Personal Data processed for the following purposes and using the following services:

    • Advertising

      • Google AdSense

        Personal Data: Cookies; Usage Data

      • Google Ads conversion tracking, Microsoft Advertising, Meta ads conversion tracking (Meta pixel) and Hotjar Form Analysis & Conversion Funnels

        Personal Data: Trackers; Usage Data

      • Pinterest Ads

        Personal Data: device information; email address; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data; User ID

    • Analytics

      • Google Analytics (Universal Analytics)

        Personal Data: Cookies; Usage Data

      • Meta Events Manager

        Personal Data: Trackers; Usage Data

      • Google Analytics Advertising Reporting Features

        Personal Data: Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); various types of Data as specified in the privacy policy of the service

      • Google Analytics 4

        Personal Data: browser information; city; device information; latitude (of city); longitude (of city); number of Users; session statistics; Trackers; Usage Data

      • Amplitude Analytics

        Personal Data: browsing history; coarse location; device information; email address; first name; last name; login history; phone number; primary account information; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Universally unique identifier (UUID); Usage Data; User ID

    • Contacting the User

      • Contact form

        Personal Data: email address; first name; last name; phone number

      • Mailing list or newsletter

        Personal Data: city; company name; country; county; date of birth; email address; first name; gender; last name; phone number; physical address; profession; state; Trackers; Usage Data; ZIP/Postal code

    • Displaying content from external platforms

      • Google Fonts

        Personal Data: Trackers; Usage Data

    • Heat mapping and session recording

      • Hotjar Heat Maps & Recordings

        Personal Data: Trackers; Usage Data; various types of Data as specified in the privacy policy of the service

    • Hosting and backend infrastructure

      • Amazon Web Services (AWS), Heroku and Algolia

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Interaction with data collection platforms and other third parties

      • Hotjar Recruit User Testers

        Personal Data: Trackers; Usage Data; various types of Data

    • Interaction with online survey platforms

      • Hotjar Poll & Survey widgets

        Personal Data: Trackers; Usage Data; various types of Data

    • Managing contacts and sending messages

      • Postmark

        Personal Data: email address; first name; last name; various types of Data

      • Twilio

        Personal Data: phone number

    • Managing data collection and online surveys

      • Hotjar surveys

        Personal Data: company name; country; Data communicated while using the service; date of birth; email address; first name; gender; last name; password; phone number; physical address; Tax ID; Trackers; Usage Data

    • Registration and authentication provided directly by this Application

      • Direct registration

        Personal Data: email address; first name; gender; last name; phone number

    • Remarketing and behavioral targeting

      • Meta Custom Audience

        Personal Data: Cookies; email address

      • LinkedIn Website Retargeting

        Personal Data: Trackers; Usage Data

    • Tag Management

      • Google Tag Manager

        Personal Data: Trackers; Usage Data

    • Traffic optimization and distribution

      • Cloudflare

        Personal Data: various types of Data as specified in the privacy policy of the service

    • User database management

      • HubSpot CRM

        Personal Data: company name; country; Current City; email address; first name; gender; last name; phone number; physical address; profession; purchase history; Trackers; Usage Data; username; various types of Data as specified in the privacy policy of the service

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Further information about the processing of Personal Data

    • Appendix 1 to the General Conditions “Personal Data”

      As part of its activities, Le Collectionist collects personal data relating to managing its clientèle, i.e. all personal data required to set up, manage, and monitor the files of lessors and lessees (hereinafter referred to as the "Lessors", "Lessees" or "Guests").

      1. Data Controller
      The person responsible for collecting and processing data on the Website is Le Collectionist, 65 rue de la Victoire, 75009 Paris, SIREN no.: 789370152, contact@lecollectionist.com.

      2. Data Protection Officer
      The person responsible for collecting and processing data on the Website is Le Collectionist, 65 rue de la Victoire, 75009 Paris, SIREN no.: 789370152, myprivacy@lecollectionist.com.

      3. Data collected from our Guests

      3.1. Data collected from our Guests
      As part of its contractual relationship, Le Collectionist may collect and process information from:
      • Lessees, including: first and last names, dates of birth, copies of ID cards, telephone numbers, postal addresses, email addresses, copies of passports, marital status, information on family members, bank details, history of the contractual relationship, behavioral and web browsing data, food allergies, disability status
      • Lessors, including: first and last names, dates of birth, copies of ID cards, telephone numbers, postal addresses, email addresses, contractual relationship history, behavioral and web browsing data.

      3.2. Purposes for collecting personal data
      The data collected during the contractual relationship are subject to automated processing for the purpose of:
      • performing the contractual commitments;
      • contacting the Guests;
      • avoiding any illicit or illegal activity;
      • enforcing the general conditions;
      • filing legal proceedings;
      • vetting the Guests ID.

      3.3. Legal basis for processing
      The legal basis for the data collected is a contractual relationship.

      3.4. Data recipients
      The data collected may only be consulted by Le Collectionist within the limits strictly necessary for performing its contractual obligations.
      This data, whether in individual or aggregated form, is never made freely accessible to a third party.

      3.5. Personal data retention period
      The personal data collected is kept for the duration of the contractual relationship and for the time during which Le Collectionist may be liable.
      Once the retention period has expired, Le Collectionist agrees to permanently delete the data subject’s data without keeping a copy.

      3.6. Personal data security and confidentiality
      Personal data is stored in secure conditions, according to current technical means and in compliance with the provisions of the General Data Protection Regulation and the current national laws.
      Access to Le Collectionist's facilities is also secured.

      3.7. Data minimization
      Le Collectionist may also collect and process any data voluntarily submitted by its Guests.
      Le Collectionist advises its Guests to provide personal data that is strictly necessary for managing its customer base.
      Le Collectionist agrees to only store and process data that is strictly necessary for managing its customer base and will delete any data received that is not useful for its activities as soon as possible.

      3.8. Respecting rights
      Guests have the following rights concerning their personal data, which they can exercise by writing to the following address: legal-information@lecollectionist.com.

      3.8.1. Right to information, access and communication of data
      Le Collectionist's Guests have the right to access their personal data.
      Due to Le Collectionist's obligation of security and confidentiality when processing personal data, requests will only be processed if Guests provide proof of their identity, in particular by submitting a scan of their valid ID (in the case of a request submitted via the dedicated electronic form) or a signed photocopy of their valid ID (in the case of a written request), both of which must be accompanied by the words "I hereby certify on my honor that the copy of this ID is a certified true copy of the original. Drawn up in … on … ”, followed by their signature.
      To help them with this, here, Guests will find a template letter prepared by the CNIL (French Data Protection Authority).

      3.8.2. Right to rectify and delete data and right to be forgotten
      Le Collectionist's Guests have the right to request the rectification, updating, blocking, or erasure of their personal data that may be inaccurate, erroneous, incomplete, or obsolete.
      Guests of Le Collectionist may also specify general and specific instructions regarding the fate of their personal data after their death. Where applicable, the heirs of a deceased person may request that the death of their loved one be taken into consideration and/or that the necessary updates be made.

      3.8.3. Right to object to data processing
      Le Collectionist's Guests have the right to object to the processing of their personal data.

      3.8.4. Right to data portability
      Le Collectionist's Guests have the right to receive the personal data they have provided to Le Collectionist in an open, readable, portable format.

      3.8.5. Right to limit processing
      Le Collectionist's Guests have the right to request that the processing of their personal data by Le Collectionist be limited. Thus, their data can only be stored and not used by Le Collectionist.

      3.8.6. Response Times
      Le Collectionist agrees to respond to every request to access, rectify, oppose, or any other additional request for further information within a reasonable time period which may not exceed 1 month from receipt of the request.

      3.8.7. Complaints to the Supervisory Authority
      If Guests believe that Le Collectionist is not complying with its obligations with regard to their personal data, they can send a complaint or a request to the supervisory authority. In France, the relevant authority is the CNIL to which requests can be sent here.

      3.9. Data transfer

      3.9.1. Transfer to partners
      Le Collectionist uses authorized service providers to assist in the processing of data for its services. These service providers may be located outside the European Union.
      Le Collectionist has previously ensured that its service providers have implemented adequate guarantees and comply with strict rules regarding confidentiality, use, and data protection.
      As data controller, Le Collectionist uses the following subcontractors to manage the personal data of its guests:

      • OVH, France, Website hosting, https://ovhcloud.com/legal/privacy-policy
      • Stripe, USA, Online payment software. Standard contractual clause (https://stripe.com/privacy-center/legal#data-transfers)
      • Google +, USA, Managing people's reviews of products, services, or content. Standard contractual clause: https://policies.google.com/privacy/frameworks
      • Gmail, USA, Email service. Standard contractual clause: https://policies.google.com/privacy/frameworks
      • Google Calendar, USA, Online calendar management service. Standard contractual clause: https://policies.google.com/privacy/frameworks
      • Google Drive, USA, Cloud service for storing and sharing files. Standard contractual clause: https://policies.google.com/privacy/frameworks
      • Google Sheets, USA, Cloud-based spreadsheet software. Standard contractual clause: https://policies.google.com/privacy/frameworks
      • Amazon Web Services, USA, Cloud data storage service, hosting company. Standard contractual clause: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_French_2020-08-15.pdf
      • Box.com, USA, Cloud service for storing and sharing files. Binding Corporate Rules: https://www.box.com/fr-fr/legal/regionalnotice
      • Apple, USA, Sending email messages. Standard contractual clause: https://www.apple.com/fr/legal/privacy/fr-ww/
      • Heroku, USA, Cloud data storage service, hosting company. Binding Corporate Rules: https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/EU-Data-Transfer-Mechanisms-FAQ.pdf
      • Slack, USA, Internal communications web services. Standard contractual clause: https://slack.com/intl/fr- fr/privacy-shield-notice

      3.9.2. Transfer upon request or a court order
      The Guest also agrees that Le Collectionist may disclose the data collected to any person upon request by a governmental authority or a court order.

      3.9.3. Transfer in connection with a merger or acquisition
      If Le Collectionist is involved in a merger, sale of assets, financing transaction, liquidation or bankruptcy or in an acquisition of all or part of its business by another company, the Guest consents to the data collected being transferred by Le Collectionist to that company and to that company processing personal data as described herein.

Contact information

    • Owner and Data Controller

      Le Collectionist
      65 rue de la Victoire,
      75009 Paris

      Owner contact email: contact@lecollectionist.com