Data controller
Personal data collected on this website is processed by the website operator, identified in the legal notice. If you have any questions about your data or wish to exercise your rights, contact us through the contact form.
Data collected
We collect only the data necessary for the purposes described below:
- Contact form: first name, last name, email address, occupation, subject, and content of your message.
- Partner area: identity, business contact details, billing information (including VAT number where applicable), Brand Studio settings, and activity history (sales, commissions).
- Payments: banking information is entered directly with Stripe, our payment service provider. We never have access to it.
- Technical data: IP address, browser type, and connection logs, processed by our hosting providers to ensure the security of the website.
Purposes and legal bases
- Responding to your inquiries and arranging a presentation meeting: pre-contractual measures and legitimate interest.
- Creating and managing your partner account and setting up your offer: performance of the contract.
- Calculating and paying your commissions and issuing invoices: performance of the contract and legal obligations.
- Ensuring the security and proper operation of the website: legitimate interest.
- Complying with our accounting and tax obligations: legal obligation.
Your clients' data
When your clients order a report from your website, the data required to produce it (identity, date of birth, email address, and payment data) is processed to calculate, generate, and deliver the report and to provide support related to the order. This data is never resold or used for any other purpose.
The allocation of roles between you and [NOM DE MARQUE] under the GDPR is specified in the partnership terms. [À DÉFINIR]
Recipients
Your data is intended for the website publisher and, strictly within the scope of their respective duties, its technical service providers:
- website hosting and file storage (Cloudflare);
- hosting of services and the database [À CONFIRMER];
- payment processing and commission payouts (Stripe);
- sending transactional emails [À CONFIRMER].
Your data is never sold or rented to third parties.
Transfers outside the European Union
Some service providers are established outside the European Union, particularly in the United States. These transfers are governed by the safeguards provided for under the GDPR, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
Retention periods
- Contact requests: 12 months after the last exchange.
- Partner account: for the entire duration of the partnership, then for 3 years for evidentiary purposes.
- Billing and accounting data: 10 years, in accordance with legal requirements.
- Technical logs: no more than 12 months.
Your rights
You have the right to access, rectify, erase, restrict, object to the processing of, and obtain the portability of your data, as well as the right to withdraw your consent at any time when processing is based on consent.
To exercise these rights, use the contact form. If you believe your rights are not being respected, you can file a complaint with the CNIL (www.cnil.fr) or the data protection authority in your country of residence.
Security
We implement appropriate technical and organizational measures to protect your data: encrypted connections, restricted access, and payments handled by a certified service provider.
Changes
This policy may change to reflect legal, technical, or service-related changes. The applicable version is the one published on this page on the date of your visit.