Article 1. Preamble
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, otherwise known as the General Data Protection Regulation (hereinafter, the " RGPD ") and the amended Act of 6 January 1978, together with other relevant legislation, set out the legal framework applicable to the processing of personal data.
These texts strengthen the rights and obligations of data controllers, data processors, data subjects and data recipients. In particular, they require transparent, comprehensible and easily accessible information to be provided to data subjects.
As part of its business, PIINK TEKNOLOGY, a simplified joint stock company with capital of €21,756.47, whose registered office is located at 113 RUE DE FONDEVILLE in TOULOUSE (31400), registered with the Toulouse Trade and Companies Registry under number B 830 298 659 (hereinafter referred to as the "Company"), has decided to create a new company, PIINK TEKNOLOGY. Company "), the Platform's Data Controller, processes the personal data described below.
In this charter (hereinafter referred to as the Charter "), the terms defined below are used in the sense corresponding to the definitions given to them. They are used with an initial capital, both in the singular and in the plural.
- " Order(s)The term "appointment" refers to any appointment made with a Professional, reservation/purchase/pre-order of Products via the PIINK ME Platform by a User.
- " RecipientsRecipients": refers to the natural or legal persons who receive personal data. Data recipients may therefore be both internal recipients and external bodies.
- " Personal Area User Account": personal digital space created by a User when registering on the Platform containing personal information (compulsory and optional) enabling the User to access the Products offered.
- " Professional Area Service": personal digital space specifically dedicated to a Professional via the Platform, enabling them to consult information useful for the operation of the Service, the transactions they carry out, etc.
- " Platform(s) PIINK ME": refers to the PIINK ME digital platform or the PIINK ME application created by the Company to put Professionals and Users in contact with each other.
- " ProductsProfessional": refers to all the products, services or activities listed by the Professional(s) on the Platform.
- "Professional Professional": refers to any professional in the course of his or her business (trader, liberal profession, craftsman, etc.) who offers his or her products and/or services via the Platform.
- " Data controllerData controller": the entity which determines the purposes and means of the processing of personal data defined in this policy. Under this policy, the Data Controller is PIINK TEKNOLOGY.
- " ServiceProfessional": a connection between a User and a Professional via the Platform offered by the Company.
- " SubcontractorProcessor": an entity which processes personal data on behalf of the Data Controller. In practice, this refers to the service providers with whom the Company works and who handle the personal data it processes.
- " User(s)Professional": refers to the natural person who makes an appointment and/or purchases Products on the Platform from the Professionals listed.
Article 2. Subject
The Company processes personal data relating to Users and Professionals when they use the Service via the Platform.
This charter relating to personal data (hereinafter referred to as the " the Charter ") applies to Users and Professionals (hereinafter, " You " " Your "or Your ("the Company") using the Service offered by the Company on the Platform.
The purpose of this Privacy Policy is to meet the Company's obligation to provide information in its capacity as Data Controller and to formalise Your rights and obligations with regard to the processing of Your personal data.
The processing of personal data may be managed directly by the Company or through a Subcontractor specifically appointed by it.
This Charter is independent of any other document that may apply to Your contractual relationship with the Company (cookies, commercial or partnership contracts, etc.).
Article 3. General principles and commitment
Personal data is processed from the moment Your personal data is collected by the Company as part of the Service it offers on the Platform.
Article 4. Data collected
- As part of the Service it offers via the Platform, the Company collects the following personal data: Identification: surname / first name / title / date of birth ;
- Contact details: Telephone / e-mail address / delivery address / invoicing address ;
- Banking data: PIINK TEKNOLOGY only collects a payment identifier and part of the digits of Your bank card (which allows us to recognize the card used for the last payment). We draw your attention to the fact that Your bank details are collected by our payment service provider (STRIPE) and we invite you to consult the applicable provisions accessible at the following address https://stripe.com/fr/privacy ;
- More generally, any information and/or personal data voluntarily communicated by the User as part of the creation of a Personal Space and/or as part of the performance of the Service;
- Geolocation data (anonymised) ;
- Preferences, frequency of visits, orders placed, etc. ;
- Name of the Company's legal representative.
The geolocation function for users :
The Platform incorporates a geolocation function which enables us to find out how often you visit the Professionals using the Service, anonymously, and if you have agreed, to send you personalised information and commercial offers. By authorising the Company to access your location data and to send you notifications, you may receive information on offers, products or services from the Professionals using the Service by sms, push notification or email. We inform you that you may receive notifications linked to your geolocation even when your application is in standby or "cache" mode. In order to optimise the location functions, you may also need to activate your mobile phone's Wi-Fi, Bluetooth or microphone functions. You will find in-store information on the technical means suitable for optimising geolocation information on the application and the procedures for objecting, depending on the technology concerned. When you visit Professional outlets equipped with tracking equipment, the presence of your smartphone may be detected if the search for Wi-Fi, Bluetooth or micro networks is activated. You can choose not to authorise geolocation by refusing it when you download or use the application for the first time. However, some operating systems (Android) do not allow applications with geolocation to be downloaded if access to location data has not been authorised. You can deactivate access to your location data at any time in the settings of your mobile phone by referring to the technical documentation for your device.
User notifications
PIINK ME offers the "Notification" function in order to provide you with commercial offers and information related to your previous Orders and/or your "favourite" Professionals. It is possible not to opt for this "Notification" function when downloading PIINK ME or to withdraw it at any time.
Article 5. Data sources
The Company collects Your data during :
- the creation of the Personal Space for Users
- the creation of the Professional Space for Professionals
- a contact request by a User via the contact form on the Platform
- use of the Platform services by the User
- subscribing to the newsletter
Article 6. Purposes of processing
This information is processed electronically for the purposes of :
- the processing of Orders placed by Users via the Platform;
- the processing of Orders received by Professionals via their Professional Space in order to best meet Users' needs (appointment with a professional, restaurant reservation, etc.);
- if You have agreed, to the sending of newsletters and/or personalised commercial offers concerning Products offered by the Platform.
- answer the questions put to us;
- meet our legal or administrative obligations;
- to point you in the direction of Professionals and Products using Your geolocation;
- to offer you personalised Products based on your habits or behaviour.
The Company acts as Processor of Your personal data communicated on the Platform.
Article 7. Legal basis(s)
The processing of Your personal data is based on :
- the performance of a contract to which You are a party with the Company and/or the performance of pre-contractual measures taken as part of the processing of an Order via the Platform;
- the pursuit of the Company's legitimate interests, such as newsletter subscriptions and/or commercial prospecting for similar products/services;
- consent for the geolocation of Users and the personalisation of the Products offered;
- compliance with a legal obligation to which the Company is subject.
Article 8. Recipients of data
The data is hosted in The address of its registered office is as follows: Google Ireland Limited, Gordon House Barrow Street, Dublin 4, Ireland. The company is registered in Ireland under number 368047 and has the following SIRET number: 79976916100016.
The Company ensures that data is only accessible to the following authorised internal or external Recipients:
- as the case may be: Company officers and employees ;
- Professionals;
- Users;
- the Company's Communications Department;
- the Company's IT department;
- if necessary, employees of the Company's technical service providers involved in the operation of the Platform (in particular IT service providers, etc.):
- Payment party: Stripe. The address of its registered office is as follows: Stripe France, 10 Boulevard Haussmann, 75009 Paris. Company registered with the Toulouse Trade and Companies Register under number 809 022 643.
- CRM Party: Axonaut. The address of its registered office is as follows: Axonaut, DIGITICA SAS, 2460 L'Occitane, 31670 Labège. Company registered with the Toulouse Trade and Companies Register under number: 809 022 643.
- Consultant : Pierre MERIC, whose registered office is located at 1 rue des Nénuphars 31500 Toulouse, registered under SIREN number 512 363 979.
- IT subcontractor: Shanxi ChunQiuHengzhi Technology Co, LTD. The address of its registered office is as follows: Shanxi Chunqiu Hengzhi Technology Co: Shanxi Chunqiu Hengzhi Technology Co, Ltd, Fudi Jiayuan, Yimin Alley, Yuanping, Xinzhou - 034000, China. Company registered with the RCS of Shanxi Province (China) under number: 91140981MA0L6B5M0A.
- public bodies, exclusively to meet the Company's legal obligations, court officers, legal agents, etc.
Your Personal Data will not be transferred, rented or communicated to other persons or companies without your consent.
With the exception of communication to the persons defined above, personal data will not be communicated, transferred, leased or exchanged for the benefit of any third party whatsoever.
Article 9. Transfer of personal data outside the EU
If necessary, in order to fulfil the purposes described in Article 6, the Company may transfer Your personal data collected to Recipients (as defined in Article 8) located in a country outside the European Union.
Where the country concerned does not benefit from an adequacy decision (which means that it does not offer personal data a degree of protection equivalent to that in force in the European Union), the Company will ensure, as far as possible, that the transfer is subject to one of the following appropriate safeguards:
- standard contractual clauses ;
- adherence to an approved code of conduct in force;
- compliance with a certification mechanism certified by an approved body;
- binding company rules approved by the Cnil.
You can obtain the guarantees in question by requesting them under the conditions defined below in article 11.
Article 10. Conservation period
The period for which data is kept is defined by the Company in the light of its legal and contractual obligations.
| Treatment | How long we keep your Personal Data |
| Your electronic identification data (your connection logs collected, subject to your consent and the settings on your terminal, via the use of cookies and other tracers placed on our Site) | Retention in accordance with applicable regulations for a period not exceeding 13 months |
| Electronic commercial prospecting | 3 years from last activity |
| Targeted advertising | 3 years from last activity |
| Cookies | 6 months maximum |
| Raw traffic data associated with an identifier | 13 months |
| Retention of bank card data following a one-off payment | 15 months (data are kept by a secure payment service provider) |
| Keep your bank card in your electronic wallet to make future purchases easier | Until consent is withdrawn or the credit card is no longer valid (data is stored by a secure payment service provider). |
| Location data | Retention for the time necessary to perform the Service (i.e. offer Local Professionals) |
At the end of this retention period and, subject to the provisions allowing archiving strictly necessary for the exercise of a right and proof of that right for the duration of the applicable limitation periods or pursuant to legal obligations to which PIINK TEKNOLOGY is subject, PIINK TEKNOLOGY destroys the Personal Data or makes them irreversibly anonymous, so that they no longer constitute Personal Data.
The deletion or anonymisation of Your personal data is irreversible. The Company is no longer able to restore them.
Article 11. Right of access
You have a right of access, subject to compliance with the following rules:
- the request is made by the person themselves and is accompanied by a copy of a valid identity document (passport or national identity card);
- the request must be made :
- in writing to the following address PIINK TEKNOLOGY 113 rue de Fondeville 31400 Toulouse
- by email : " dpo@piinkme.fr "
You may request a copy of Your personal data being processed from the Company at any time. However, in the event of a request for an additional copy, the Company may require you to pay the cost.
If Your request for access is sent to the Company electronically, the information requested will be provided to You in a commonly used electronic form, unless You request otherwise.
Please note that this right of access may not be exercised in respect of confidential information/data and/or information for which communication is not authorised by law.
Article 12. Updating personal data - Updating and rectification
You can exercise this right by contacting your usual contact, or failing that, the Company's Communications Department.
Your personal data can be updated directly via the Professional Area for Professionals or via the Personal Area for Users.
The Company cannot be held responsible for failing to update Your data.
Article 13. Right to erasure
The right to erasure of Your data will not apply where processing is carried out in order to comply with a legal obligation.
Apart from this situation, You may request the deletion of Your data in the following limited cases:
- when the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- when the data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing;
- where the data subject objects to processing that is necessary for the purposes of the legitimate interests pursued by the Company and there is no compelling legitimate reason for the processing;
- when the data subject objects to the processing of his/her personal data for canvassing purposes, including profiling;
- where personal data has been processed unlawfully.
Article 14. Right to limitation
You are informed that this right is not intended to apply insofar as the processing carried out by the Company is lawful and that all personal data collected is necessary for the performance of the contract between You and the Company.
Article 15. Right to portability
The Company will grant Your request for the portability of personal data in the specific case of data that You have directly communicated to it - on online services offered by the Company. In this case, Your personal data will be communicated in a structured, commonly used and machine-readable format.
Article 16. Automated individual decision
The Company does not make automated individual decisions.
Article 17. Fate of post-mortem personal data
In accordance with the amended law of 6 January 1978, You are informed of the right to formulate directives concerning the conservation, deletion and communication of Your data post-mortem. The communication of specific post-mortem directives and the exercise of Your rights can be carried out :
- by e-mail to dpo@piinkme.fr
- or by post to the following address PIINK TEKNOLOGY 113 rue de Fondeville 31400 Toulouse
Article 18. Justification - Manifestly excessive exercise of rights
The exercise of the above rights is individual. They may only be exercised by the data subject in relation to his/her own information. To meet this obligation, the identity of the person concerned will be verified.
You are reminded that if a data subject's requests are manifestly unfounded or excessive, in particular because of their repetitive nature, the Company may :
- require the payment of reasonable charges which take account of the administrative costs incurred in providing the information, making the communications or taking the measures requested; or
- refuse to comply with these requests.
Article 19. Optional or mandatory nature of responses
Answers to fields marked with an asterisk are compulsory and failure to do so may jeopardise the successful completion of Your Orders. In other cases, they are optional and do not affect the completion of Your Order.
Article 20. Right of use
You grant the Company the right to use and process Your personal data for the purposes defined in Article 6 of this Charter.
Article 21. Security
The Company is responsible for defining and implementing the physical or logical technical security measures it deems appropriate to prevent the accidental or unlawful destruction, loss, alteration or unauthorised disclosure of personal data.
The main measures include
- the use of security measures for access to premises (locked offices, badges, etc.);
- the allocation of a login and password for all access to the Platform Service for all Users and/or Professionals;
- management of access rights to data (specific to our finance, accounting and communications departments);
- the connection log to our web host.
To this end, the Company may enlist the assistance of any third party of its choice to carry out vulnerability audits or penetration tests at intervals it deems necessary.
In any event, the Company undertakes, in the event of a change in the means used to ensure the security and confidentiality of personal data, to replace them with means of superior performance. No change may lead to a reduction in the level of security.
In the event of subcontracting all or part of the processing of personal data, the Company undertakes to contractually impose security guarantees on its Subcontractors by means of technical data protection measures and the appropriate human resources.
Article 22. Data breach
In the event of a breach of Your personal data, the Company undertakes to notify the CNIL in accordance with the conditions prescribed by the RGPD.
If the said breach poses a high risk and the data has not been protected, the Company :
- will notify you immediately;
- will provide you with the necessary information and recommendations as soon as possible.
Article 23. Register of processing operations
The Company has a data processing register.
Article 24. Right to lodge a complaint with the CNIL
If You consider that the processing of Your personal data does not comply with the applicable regulations, You may at any time lodge a complaint with a supervisory authority, namely the CNIL in France:
Cnil - Complaints department
3, place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07
Tel.: 01 53 73 22 22
Article 25. Changes
The present policy may be modified or amended at any time in the event of changes in legislation, case law, decisions and recommendations of the CNIL or practices. Any new version of this policy will be brought to Your attention by any means chosen by the Company, including electronically (by e-mail or online, for example).
Article 26. For further information
For further information, please contact our Data Protection Officer at the following e-mail address: dpo@piinkme.fr
For more general information on the protection of personal data, please consult the Cnil website. www.Cnil.fr

