PRIVACY POLICY RELATING TO THE USE OF UBUDU’S SERVICES

Welcome to Ubudu’s Privacy Policy and thank you for taking the time to read it.  

At Ubudu, your privacy is at the core of the way we design and build the services and products you use, so that you can fully trust them and benefit from them in a transparent way.

By connecting to the website, you acknowledge that you have read, understood, and accepted without limitation or reservation these General Terms and Conditions of Use and the Personal Data Protection Policy.  

Also before deep diving into this privacy policy we would like to point out to you that we comply, in the collection and management of your personal data, to the current version of the French law N° 78-17 dated 6th January 1978 on Information Technology, Data Files and Civil Liberties, and are registered with the French Data authorities (CNIL) under the number 1777913 as well as to the European Union General Data Protection Regulation (EU GDPR) that will take effect the 25 May, 2018.

Thereby, this privacy policy applies beginning May 25, 2018.

 

1. Legal Information

  • Site publisher: Ubudu SAS  (hereinafter referred to as “we”)
  • Company type : simplified joint-stock company under French law
  • Social capital: € 58,780
  • Registration: RCS Paris, number 533881843
  • EU VAT number: FR68533881843
  • Postal address: Tour Gamma A, 193 rue de Bercy, 75012 Paris
  • E-mail: contact@ubudu.com
  • Publication director: François Kruta
  • Hosting company : OVH
  • Address: 2 rue Kellermann, BP 80157, 59053 Roubaix Cedex1 1, France
  • Phone : +33 (0)8 203 203 63
  • E-mail : support@ovh.com

2. Personal Data Protection Policy

The purpose of this Personal Data Protection Policy is to inform you about the means we use to collect your personal data, with the strictest respect for your right and to inform you of the rights and freedoms that you can exercise with regards to our use of your personal data. It also describes the measures implemented to protect them. We are responsible for processing personal data concerning the Website, commercial discussions or datas collected from our products . Said processing is implemented in accordance with applicable laws.

     2.1 . Types of data collected

During your use of services which may be accessed on the Website www.ubudu.com and its subdomains (hereinafter referred to as the “Website”) we may require you to provide us with some personal data. When you choose to provide your personal data, you provide expressly your consent for its collection and use in compliance with the provisions set forth in this Privacy Policy and with the legislation in force.

The term “personal data” does mean any data that enables a person to be identified, which corresponds for instance to your family name, first name, photograph, email address, telephone numbers, postal address, date of birth, or data relating to your transactions on the Website, your orders and subscriptions, bank card number, and any other information about you that you choose to provide us.

We can in particular collect some of your personal data in order to answer your requests for information and better understanding your expectations. In our online forms, compulsory fields are marked with an asterisk. If you do not answer the compulsory questions, we will not be able to provide you with the requested service. The information we collect about you via our ‘contact us’ form enables us to reply to your enquiry and are kept securely on our database.

Using Ubudu’s Location services and products, we collect and store in our databases location data to perform aggregated statistics on our Website. Ubudu offers, by its data model design and APIs, a secure way to get explicit Opt-ins/Opt-out and to store anonymously geolocation data, which makes impossible to associate this data directly to a physical subject in compliance with the EU GDPR.

     2.2 Purpose of processing

After gathering explicit opt in, or if you are an existing customer, your data is used to meet one or several of the following uses:

  • To build aggregated statistics and geospatial data analysis which do not track back to your identity
  • To manage access to the services provided by the Website and their use,
  • To carry out operations that relate to the management of your contracts, orders, deliveries, invoices, fidelity programs, and follow-up of the relationship,
  • To constitute a file of registered members, as well as users, customers and prospects,
  • To send newsletters. If you would not wish to receive these, we offer you the option to check a box expressing your refusal when data is being collected.
  • To manage unpaid invoices and possible disputes about use of our products and services,
  • To respect legal and regulatory obligations.

Your personal data is not subsequently processed in any manner that is incompatible with the purpose described above or in the collection forms. It is only stored for the requisite amount of time needed to fulfill these purposes.

All emails related to our products’ news, technology and marketing that we send will give you the possibility to unsubscribe if you no longer wish to receive them. You can also contact us if you would like to be removed from our email lists.   

 

3. Security and confidentiality of your data 

We pay a particular attention to prevent your data from being deformed or accessed by unauthorized third parties. Thus, for security purposes, we have implemented the adapted technical and organizational measures(Privacy by Design, Privacy by Default, Accountability) to ensure the integrity, security and confidentiality of your personal data .
For security of transactions, we use secured payment systems consistent with state of the art and applicable regulation. In that way, we use  the Secure Sockets Layer (SSL) encryption protocol, to encrypt any personal information you enter into registration forms on our website.

To ensure the proper application of the new policy principles, we have designated a Data Protection Officer who serves as the official liaison to the French Data Protection Authority (CNIL).

 

4. Who can have access to your personal data ?

Only our personnel, services in charge of control, may have access to your personal data. Government agencies may also require and be recipients of your personal data, exclusively to meet legal obligations, or law representatives, ministerial officers and organizations responsible for the collection of debts. We shall not sell, transfer or lease out your personal data to third parties.

Your personal data is stored for the duration that you use the Services. It will be deleted 1 (one) year after your membership has ended, at the latest, with the exception of data required to establish proof of a right or a contract, which will be stored for the duration provided by enforceable law.

 

5. What about Credit Cards datas ?

Data relating to bank cards are stored no longer than the time necessary to allow fulfillment of the transaction, except in the case of a subscription, in order to facilitate payment of regular customers. In this case, bank card data is stored for the whole duration of your subscription and at least until the date at which you carry out your last transaction. Such storage is implemented by our secured payment service provider Stripe. By subscribing to the services offered on our Website, you expressly agree to this storage. Data relating to the visual cryptogram or CVV2 on the back of your bank card are not stored. In the case of payment by bank card, however, data relating to the bank card may be stored as intermediary archives for evidence purpose in the case of possible disputes regarding the transaction, for the duration provided by article L.133-24 of the French Monetary and Financial Code: 13 months from the debit date. This duration can be extended to 15 months, to take into account the possible use of delayed debit card.

 

6. Management of cookies ?

Cookies are identifiers that are transferred from your browser to your computer or mobile device. We use cookies in order to facilitate your browsing experience: you don’t have to type your login and password more than once. It simplifies your session. You can refuse the installation of such cookies in your browser settings. However, this could prevent you from enjoying the services offered on the Website at their full extent. We inform you that we may also use cookies in the future for advertising purposes. You may express your opposition to such a use, should you wish so.

 

7. Your rights

In compliance with the French law N° 78-17 dated 6th January 1978 on Information Technology, Data Files and Civil Liberties and the new GDPR policy, you have the right, at any time, to access, modify, rectify, transferdelete or request a copy of  your personal data. In case of violation of your data’s confidentiality, you will be informed within the 72 hours  from the time it has been discovered.  

You can obtain disclosure of your personal data. You can also object to the processing and circulation of your personal data. We reserve the right to reject any request it deems inappropriate. In accordance with applicable law in force, you have a right of formal consent to  the processing of your personal data.

If you wish to exercise these rights or obtain other information, please contact us at :

  • Contact form: click “Contact Us” at the bottom of the page
  • Postal address: Tour Gamma A, 193 rue de Bercy, 75012 Paris

8. Privacy Policy Updates

We reserve the right, at our sole discretion, to modify this Privacy Policy in the future. If we modify this Privacy Policy, we will post the revised version here and changes will be effective from its time of publication. We may also provide notification of material changes by other means such as posting a notice on our website.

Otherwise, if the new Privacy Policy doesn’t suit you, you should no longer use the Services.

This Privacy Policy comes into force on May 25th, 2018.