Privacy notice

Privacy notice

Translated from french by DeepL

Identification

The company Postaly, a sole proprietorship, whose head office is located at Wework Coeur Marais, 64-66 Rue des Archives, 75003 Paris, France, registered with the Paris RCS under number 884***********14, specialises in sending postcards online.

Preamble

The company Postaly processes personal data concerning you within the framework of the use of its website "Postaly", accessible via the following address: https://postaly.org.

The main objective of this document is to bring together in a concise, transparent, comprehensible and easily accessible format information concerning the data processing implemented to enable you to understand the conditions under which your data is processed.

Fair and transparent collection of your data

In a concern of loyalty and transparency towards its customers, its members and its service providers, Postaly takes care to inform the persons concerned of each processing that it implements through information notices.

These data are collected fairly. No collection is made without the knowledge of the persons and without them being informed.

A legitimate and proportionate use of your data

When Postaly has to process data, it does so for specific purposes: each data processing implemented pursues a legitimate, determined and explicit purpose.

For each of the implemented processing, Postaly commits to collect and use only adequate, relevant and limited to what is necessary with regard to the purposes for which they are processed.

Postaly ensures that the data is, if necessary, updated and implements procedures to allow the deletion or rectification of inaccurate data.

The personal data we process

In the context of the processing of personal data, the purposes of which are presented below, Postaly collects and processes the following categories of data

  • identification data of the persons concerned such as your first name and surname;
  • data relating to the personal life of the persons concerned such as your e-mail address, your postal address or your date of birth;
  • the identification data of the persons to whom you send the card or letter via Postaly;
  • data relating to the personal life of the persons concerned such as the postal address of the person to whom you are writing;
  • the identifying images that you send via the Postaly service.

Legal basis and purpose of our data processing

Some of the processing implemented by Postaly is necessary for the execution of a contract or for the execution of pre-contractual measures taken at your request. This is the case for the processing of data for the following purposes

  • the sending of Postaly letters and cards;
  • access to services;

The processing that pursues the following purposes is implemented to achieve the legitimate interests of Postaly, in particular the development of its activity.

  • management of the relationship with its customers and prospects;

The recipients of your data

The personal data that we collect, as well as those that are collected subsequently, are intended for us in our capacity as data controller.

The following categories of recipients are also entitled to receive your data

  • the competent authorities or courts;

We ensure that only authorised persons have access to this data.

Transfer of data abroad

Postaly does not transfer your data outside the European Union except in situations where this is necessary for the execution of the contract we have concluded.

How long are the data kept?

Postaly ensures that data is only kept in a form that allows the identification of the data subjects for a period of time that is necessary for the purposes for which it is processed.

Data

DataConversation
Sending Postaly letters and postcards
5 years from the use of the service offered by Postalie
Information to its customers
3 years from the end of the use of the service offered by Postaly
Billing
For 10 years for accounting obligations under the Commercial Code
Customer relationship management
For customers: duration of service use

Security of personal data

Postaly attaches particular importance to the security of personal data.

It has put in place technical and organisational measures adapted to the degree of sensitivity of the personal data, in order to ensure the integrity and confidentiality of the data and to protect them against any malicious intrusion, loss, alteration or disclosure to unauthorised third parties.

Nevertheless, the security and confidentiality of personal data depend on the good practices of each individual, and the data subject is invited to remain vigilant on this issue.

Subcontracting

When Postaly resorts to a service provider, it communicates personal data only after having obtained from the latter a commitment and guarantees on its capacity to meet these security and confidentiality requirements.

We conclude contracts with our subcontractors in compliance with our legal and regulatory obligations, which precisely define the terms and conditions for the processing of personal data by the latter.

What are your rights?

In accordance with the provisions of the General Data Protection Regulation ("RGPD"), you have the right to access, question and rectify data concerning you.

The right to information

Through this policy, you are informed of the identity of the data controller, the purposes, the legal bases, the legitimate interests pursued by our company, the recipients or categories of recipients with whom personal data are shared, and the possibility of transferring personal data to a third country, the duration of the retention of personal data or, where this is not possible, the criteria used to determine this duration and the rights detailed above.

The right of access and rectification

You also have the right to access and rectify your personal data by us or on our behalf.

If you have a customer account, you can also modify your personal details from your customer area by logging in with your email address and password.

The right to erasure and the right to be forgotten

You have the right to obtain the deletion of personal data concerning you under the conditions of the applicable regulations and unless otherwise provided by law.

The right to portability

You also have the right to portability of your personal data.

The data concerned by the portability concerns the following categories:

  • only personal data (therefore anonymised data or data that does not concern the applicant is excluded)
  • the declarative personal data collected by the Postaly company in the framework of its services;
  • personal data that do not infringe the rights and freedoms of third parties such as those protected by business secrecy.

These criteria are cumulative.

The right of opposition

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you where the processing is based on the legitimate interests of the controller, including profiling.

The right to restriction

You may ask to be given the opportunity to request the restriction of the processing of your personal data.

Finally, you have the possibility to define post-mortem directives relating to the retention, erasure and communication of your personal data.

How to exercise your rights

You can exercise your rights by contacting the company Postaly.

  • By email: privacy@postaly.org
  • In the interest of confidentiality and protection of personal data, Postalie must ensure the identity of the user before responding to his request. Also, any request to exercise these rights must be accompanied by a copy of a signed identity document.

The right of recourse

Finally, you have the right to lodge a complaint with a supervisory authority, for example, the CNIL on French territory, without prejudice to any other administrative or jurisdictional recourse.

Updating of the data protection policy

The privacy policy may be modified or amended at any time.

In the event of a change, the new privacy policy will be notified at the time of login to the personal area.

Date of the last update : (27/082021)

Made with Super