Personal data protection policy

​

Personal data protection is governed in France by the General Data Protection Regulation of 27 April 2016, better known as the GDPR, and by the amended French Data Protection Act (Loi Informatique et libertés) of 6 January 1978.

​

Local Stores (hereinafter "we") is a simplified joint-stock company with a single shareholder, with a share capital of €10,000, registered with the Paris Trade and Companies Register under number 880 109 889, whose registered office is located at 61 Boulevard des Batignolles, 75008 Paris.

​

As data controller, we are committed to protecting the data of our clients' and prospects' employees that we process for the purposes of our business. That is why we undertake to comply with the principles and rules applicable to the protection of personal data.

​

In this policy, we explain how we collect and process your personal data (hereinafter your "Data") in order to provide you with new services on a daily basis, in full respect of your rights.

1/ What data do we process?

In the context of our business relationship, we process in particular the following Data: surname, first name, email address, landline and mobile phone numbers, company information (company name, company address, SIRET and VAT number) and the login details of employees authorised to use the platform. Where they are essential to the provision of our services, this information is marked with an asterisk in the form or contact sheet.

​

When you browse our website, we may also process Data such as identification and connection data and, where applicable, location data.

​

We collect your Data directly when you provide it to us yourself. Your Data may also be provided to us indirectly by partners.

​

2/ On what occasions do we process your Data?

Your Data may be processed when we:

(i) exchange and enter into contract negotiations,

(ii) publish a directory of the contacts of our clients and prospects,

(iii) manage our business relationship and your support,

(iv) give you access to one of our dedicated platforms, and

(v) provide technical support for our platforms. This processing is necessary for the performance of pre-contractual and contractual measures and, where applicable, for our legitimate interest.

​

Your Data may also be processed when we:

(i) offer you offers tailored to your interests,

(ii) carry out studies and statistical analyses,

(iii) need to defend our interests (prevention and fight against fraud, disputes),

(iv) work on improving our services,

(v) manage access for third-party staff (to our premises and work tools),

(vi) carry out social and/or legal audits and due diligence, or

(vii) share your contact details for professional networking purposes. This processing is based on our legitimate interest and, where applicable, on our legal obligations.

​

Your Data may be processed when you register for an event organised by us (commercial operations, etc.) and when you interact with us, in particular on social networks. For this processing, we rely on your consent.

​

Finally, your Data may be processed when you exercise your rights over your Data or to enable us to meet our legal obligations.

​

Whether you are a client or a prospect, you may provide us with the data of a third party, in particular as part of referral operations. In that case, you warrant that you have obtained that person's consent, and you must inform us as soon as that person decides to withdraw it.

​

3/ Who are the recipients of your data?

​

We ensure that the people who access your Data are authorised and bound by a confidentiality obligation.

​

These recipients may include the authorised staff of the departments in charge of the business relationship and of support functions (communication, administration and finance, legal and compliance, general services, security, technical and logistics services, information systems, etc.) of our company.

​

Your Data may be transmitted to certain partners and service providers specialised in payment and transaction services (e.g. banks, payment service providers), customer relationship management (e.g. call centre providers), technical assistance and after-sales service, social or legal audits and due diligence, legal dispute support (e.g. lawyers, experts, advisers), as well as IT support and security providers. Regarding the management of commercial prospecting, your Data may be transmitted to technical service providers, clients of the advertising agency and advertisers.

​

Your Data is usually processed within the European Union. Processing may, in some cases, involve a transfer outside the European Union. We ensure that appropriate safeguards are put in place to protect and secure your Data. These safeguards may consist of a transfer agreement based on the standard contractual clauses adopted by the European Commission and/or any other mechanism approved by supervisory authorities.

​

We may be required to share your Data with partners in the event of a possible transfer of business. We may also be required to disclose your Data in response to requests from public authorities, in particular to meet requirements relating to national security, fraud prevention or law enforcement. In such a case, we are not responsible for the conditions under which these authorities' staff process your Data.

​

4/ How long is your data kept?

Your Data is processed and kept for the duration of the business and/or contractual relationship.

​

At the end of these periods, we may archive your Data, in particular to meet legal and judicial limitation periods. Your Data is then either deleted or anonymised, these operations being irreversible and us no longer being able to restore it.

​

5/ Our security and confidentiality commitments

​

We take care to preserve the confidentiality and security of your data. Appropriate organisational and technical security measures are in place to protect your Data against the risks of malicious intrusion, loss, alteration or disclosure to unauthorised third parties. Such measures may involve the use of any third party of our choice to carry out, in particular, vulnerability audits or penetration tests. These measures are reviewed and updated where necessary.

​

We take care to apply data protection principles from the design stage. For example, we may pseudonymise or anonymise your Data as soon as this is possible or necessary.

​

We also encourage you to be vigilant and to protect your devices (computer, smartphone, tablet) against any access you have not authorised.

​

We advise you to choose a password that is:

​

complex, i.e. containing several characters of different types (lowercase, uppercase, digits, special characters);

​

"meaningless about you", i.e. not revealing your preferences or habits;

​

different for each of your online accounts.

​

6/ How do you exercise your rights?

​

To help you control how we use your Data, you have the right to:

​

be informed about how we use your Data. That is the purpose of this document;

​

obtain confirmation that data concerning you is being processed and, where applicable, request a copy of it, it being specified that we may charge you for the cost of any additional copy;

​

obtain the correction of data concerning you that is inaccurate, outdated or incomplete;

​

withdraw your consent or, where processing is based on our legitimate interest, object to the processing of your Data on grounds relating to your particular situation.

​

As regards commercial prospecting:

​

by phone: you can register for free on the website bloctel.fr;

​

by email: you can unsubscribe by clicking "unsubscribe" in each newsletter or by logging into your client account;

​

by SMS: you can unsubscribe by sending "STOP SMS" to the number shown in the message or by logging into your client account.

​

request restriction of the processing of your Data. This right applies only under certain conditions (contesting the accuracy of your Data, doubts about the lawfulness of the processing, exercise of your rights in court);

​

exercise your right to data portability. This right applies only under certain cumulative conditions (you have provided your Data to us yourself through our online service, and the processing is based on your consent or on the performance of a contract);

​

request the erasure of your Data. This right applies only under certain conditions (withdrawal of the consent on which the processing is based, your Data is no longer necessary for the original purposes of processing, objection to the processing, doubts about the lawfulness of the processing);

​

give specific and general post-mortem instructions on the storage and disclosure of your Data. Without instructions, your heirs may send us any request.

​

In general, to exercise your rights, you can:

​

log into your client account;

​

send us your request:

​

by email: privacy@ulty.fr

​

by post: Local Stores, 61 boulevard des Batignolles, 75008 Paris

​

Proof of identity may be requested in case of doubt about the identity of the applicant.

​

We will provide you with answers to your requests as soon as possible and in compliance with our legal obligations.

​

You have the right to lodge a complaint with a supervisory authority; in France, this is the CNIL.

​

7/ Contacts

​

You may contact our Data Protection Officer (DPO) at the following address: privacy@ulty.fr