Privacy policy

The official version of this text is being prepared; here is the reference text currently applied. Any questions? Contact us

1. 1 Who is responsible for your data

   This is a translation provided for your convenience. In case of discrepancy, the French version prevails.

   The data controller is TrouveMoi, a simplified joint-stock company (SAS) with a share capital of €100,000, whose registered office is located at 28 rue de la Paix, 75002 Paris, France, registered with the Paris Trade and Companies Register under number 123 456 789 (hereinafter “TrouveMoi”, “we”), publisher of the trouvemoi.eu platform.

   For any question about your personal data, you can write to us at contact@trouvemoi.com or call us on 07 45 15 54 51.

   No data protection officer has been appointed to date; this page will be updated if an appointment becomes necessary.

2. 2 The data we collect

   We only collect the data needed to run the services you use. Depending on how you use the platform, this may include:

   • Account: last name, first name, email address, password (stored encrypted and never readable by our teams), phone number and profile picture if you provide them;
   • Sign-in with Google, Facebook or Apple: identifier provided by the chosen service, associated name and email address. We receive neither your password, nor your contact list, nor your posts;
   • Bookings and payments: booked services, dates, number of participants, amounts and payment status. Your bank details never go through our servers: they are entered directly with our payment provider;
   • Addresses: billing address when the service requires it;
   • Activity on the platform: favourites, favourite lists, published reviews, events created or joined, groups, photo albums, messages exchanged with other members or with a provider, notification preferences;
   • Applications and requests: information sent through the contact form or the “Become a partner” application, including your company identification data;
   • Technical data: IP address, date and time of connections, pages viewed, browser type. They are used for the security of the service and to diagnose failures.
3. 3 Why we use them, and on what legal basis

   The General Data Protection Regulation requires us to state, for each use, the legal basis that allows it. Ours are as follows:

   Purpose	Legal basis
   Creating and managing your account, authenticating you	Performance of the contract
   Processing your bookings and payments, issuing receipts	Performance of the contract
   Putting you in touch with providers and other participants	Performance of the contract
   Answering your requests and providing support	Legitimate interest in answering the people who contact us
   Publishing and moderating reviews	Legitimate interest in ensuring reliable reviews
   Sending you marketing information	Your consent, which you can withdraw at any time
   Measuring the site’s audience and improving our services	Your consent, collected through the cookie banner
   Preventing fraud and securing the platform	Legitimate interest in protecting the service and its users
   Keeping accounting records and answering requests from the authorities	Legal obligation

   When processing is based on your consent, refusing has no consequence on access to the service: you can book an activity without accepting audience measurement or marketing communications.

4. 4 How long we keep them

   • Account: for the whole life of the account, then three years after your last activity, after which it is deleted or anonymised;
   • Bookings and accounting records: ten years from the end of the financial year, in accordance with Article L123-22 of the French Commercial Code;
   • Published reviews: as long as they are online, then three years;
   • Messages: three years after the last exchange;
   • Proof of your acceptance of the terms: five years from the end of the relationship, so that we can establish what was accepted and when;
   • Technical logs: twelve months;
   • Your cookie choice: thirteen months, after which you are asked again.
5. 5 Who has access to them

   Your data is never sold, rented or exchanged. Only the following have access to it:

   • TrouveMoi’s teams, to the extent required by their duties;
   • the provider whose activity you book, who receives the information needed to deliver the service — your name, the number of participants and the date. The provider is then the data controller for what it does with it;
   • the participants of an event or group you join, who see the name and picture you chose to display;
   • our technical processors, listed below, bound by contract and with no right to use your data for themselves;
   • administrative or judicial authorities, upon lawful request.

   Our processors are: OVHcloud (hosting, France); Stripe (payment); Google, Facebook and Apple, only if you choose to sign in through them; Google Analytics (audience measurement), only if you accept it through the cookie banner; and our email delivery service.

6. 6 Transfers outside the European Union

   Your data is hosted in France. Some of our processors, in particular for payment and third-party sign-in, may process data from the United States. These transfers are governed by the European Commission’s standard contractual clauses or by an adequacy decision.

7. 7 Your rights

   You have the following rights over your data at any time:

   • access: obtain confirmation that we process your data, and receive a copy of it;
   • rectification: have inaccurate information corrected;
   • erasure: request the deletion of your data, subject to our accounting and evidential obligations;
   • restriction: request that processing be frozen while a check is carried out;
   • objection: object to processing based on our legitimate interest, and to direct marketing, without having to give a reason;
   • portability: receive the data you provided to us in a machine-readable format;
   • post-mortem instructions: decide what happens to your data after your death.

   To exercise them, write to contact@trouvemoi.com. We answer within one month. Proof of identity may be requested in case of serious doubt about your identity; it is destroyed as soon as we have answered.

   If you are not satisfied with our answer, you can lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or www.cnil.fr.

8. 8 Security

   Exchanges with the site are encrypted. Passwords are stored as hashes computed by a modern hashing function and cannot be recovered, not even by us. Access to data is limited to the people who need it.

   In the event of a data breach likely to result in a high risk to your rights, you would be informed as soon as possible, in accordance with Article 34 of the Regulation.

9. 9 Minors

   The platform is not intended for people under fifteen. If an account were created in the name of a minor under fifteen without the consent of the holder of parental authority, it would be deleted upon simple notice to contact@trouvemoi.com.

10. 10 Cookies

    Details of the trackers we use, their purpose and how to change your choice are set out in our cookie policy.

11. 11 Changes to this policy

    This policy may change with the services offered or with regulations. Each version is dated and numbered at the top of this page. In the event of a substantial change in the use of your data, you would be informed and, where the law requires it, asked for your consent again.