Privacy Policy

This policy, published on 2023-11-19, was updated on 2024-10-10.

Article 1: Preamble

The purpose of this privacy policy is to inform the users of the site about:

• How their personal data is collected. Personal data is considered to be any information that allows the identification of a user. This may include: their first and last names, age, postal or email address, location, or IP address (non-exhaustive list);
• The rights they have regarding this data;
• The person responsible for processing the collected and processed personal data;
• The recipients of this personal data;
• The site's policy regarding cookies.

This policy complements the legal notices and the General Terms of Use that can be consulted by users at the following address: https://youdji.com/fr/terms

Article 2: Principles Relating to the Collection and Processing of Personal Data

In accordance with Article 5 of the European Regulation 2016/679, personal data is:

• Processed lawfully, fairly, and in a transparent manner in relation to the data subject;
• Collected for specified (see Article 3.1 of this document), explicit, and legitimate purposes, and not further processed in a manner that is incompatible with those purposes;
• Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
• Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
• Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

Processing is lawful only if and to the extent that at least one of the following conditions is met:

• The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• Processing is necessary for compliance with a legal obligation to which the controller is subject;
• Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Article 3: Personal Data Collected and Processed in the Context of Browsing the Site

Article 3.1: Data collected

The personal data collected in the context of our activity are as follows:

• Last name, first name, email, date of birth, phone number, gender;
• Country, time zone, billing address and VAT number;

The collection and processing of this data serves the following purpose(s):

• Listing on our marketplace/search engine;
• Billing;
• Customer area management and support;

Article 3.2: Method of data collection

When you use our site, the following data is automatically collected:

• Country

Other personal data is collected when you perform the following operations on the platform:

• Registration: Last name, first name, email, phone number for the management of your account and your billing;
• Completion of your profile information: date of birth, gender, languages spoken, ... for listing on our marketplace;
• Payment and/or receipt of a payment: billing address, VAT number, ... for your billing;

They are kept by the data controller under reasonable security conditions, for a period of: 4 years.

The company may retain certain personal data beyond the periods announced above in order to fulfill its legal or regulatory obligations.

Article 3.3: Data hosting

The Youdji.com site is hosted by:

• DigitalOcean, located at DigitalOcean, LLC, ATTN: Legal, 101 Avenue of the Americas, 10th Floor, New York, NY 10013 USA, (contact phone or email: +33695473720).
• PlanetScale, Inc. 535 Mission St. San Francisco, CA, 94015 United States

Article 3.4: Transmission of data to third parties

You will provide personal information directly to our website in Europe. We may also transfer personal information to our partners and service providers in the United States and other jurisdictions. Please note that these jurisdictions may not offer the same protections as the data protection laws in your country of origin.

When we conduct cross-border data transfers, we will ensure that relevant safeguards are in place to provide adequate protection for personal information and we will comply with applicable data protection laws, particularly by relying on an adequacy decision from the European Commission or the UK government or on contractual protections for the transfer of personal information.

The transmission of personal information to these third parties is carried out only when necessary and solely for the purpose of providing new features or improving the services offered to the user. In other words, we share your data with third-party partners and providers only when it is essential to enable specific functionalities of our site or to optimize your user experience on our platform.

Some personal information may be transmitted to the following companies:

• Stripe: https://stripe.com/privacy
• Amazon AWS https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_French_2023-09-22.pdf
• Loops: https://loops.so/privacy
• Crisp: https://crisp.chat/en/privacy/

Article 3.5: Use of Google User Data

Article 3.5.1: Login and Registration via Google

Users have the option to log in and register on Youdji using the "Google Sign-In" feature. When using this feature, Youdji will request access to the following information from the Google account chosen by the user:

• Name,
• Avatar,
• Email address.

This information will be stored on Youdji to create and manage the user account, as well as to simplify authentication for future logins. No other data from the Google account will be collected or used.

Article 3.5.2: Integration of Google Meet in Chat

On Youdji, users have the ability to chat with other users via an integrated messaging system. Additionally, they can optionally start a Google Meet call directly from the messaging system.

When a user chooses to use this feature, Youdji will ask for permission to create new Google Meet spaces via their Google account. After granting this permission, Youdji will securely store the following information:

• The user's refresh_token, necessary to create Google Meet meetings,
• The name of the Google Meet room.

No other data related to the user's Google account will be collected or stored by Youdji in this context. The information collected is strictly limited to what is necessary to enable the creation of Google Meet spaces via the platform's integration.

Article 3.5.3: Sharing Google Data with Third Parties

User data obtained through the "Google Sign-In" feature, such as name, avatar, and email address, may be shared with third-party services under the same conditions as data collected directly through Youdji’s forms. These third-party services include, in particular, technical providers essential to the proper functioning of Youdji and marketing partners, in accordance with the terms described in Article 3.4: Transmission of data to third parties.

However, no data obtained from the use of the Google Meet feature, such as the refresh_token and the Google Meet room name, will be shared with third parties. This information is strictly used to enable the creation of Google Meet meetings and is stored securely without being transmitted to external services.

Article 3.7: Data Retention

We retain users' personal data for a period consistent with the needs related to the operation of our services. This retention period varies depending on the purposes for which the data was collected, as well as applicable legal or contractual requirements.

Users have the option to delete their account autonomously directly from the website. When you choose to delete your account, all your personal data will be removed from our systems, except for data necessary to comply with our legal and tax obligations.

Indeed, certain billing and transaction information will be retained in accordance with our legal and tax obligations, particularly regarding the retention of accounting records and payment receipts.

Article 3.8: "Cookies" policy

We use cookies, pixels, and other similar technologies (collectively referred to as "cookies") to recognize your browser or device, learn more about your interests, provide you with essential features and services, and for other purposes, including:

• Recognizing you when you sign up to use our offerings. This allows us to provide you with recommendations, display personalized content, and offer you other customized features and services.
• Taking into account the preferences you have specified. This allows us to respect your preferences, such as your language and configuration preferences.
• Conducting research and diagnostics to improve our offerings.
• Preventing fraudulent activities and Enhancing security.
• Providing content, including advertisements, that relates to your interests.
• Generating reports. This allows us to measure and analyze the performance of our offerings.

Some Youdji cookies are deleted at the end of your browsing session, while others persist between sessions. Essential Youdji cookies remain on your device for up to 3 years from your last visit to our site. Other Youdji cookies remain on your device for up to 365 days from their last use.

Below is a complete list of the cookies we use on the site:

Article 4: Data Controller and Data Protection Officer

Article 4.1: The data controller

Personal data is collected by the company Finller, SAS with a capital of 1500€, whose registration number is "Paris B 897 962 361".

The personal data controller can be contacted as follows:

By mail at: 9 rue Geoffroy l'Angevin, 75004 Paris France;

By email: quentin@youdji.com.

Article 4.2: The data protection officer

The company's or the controller's data protection officer is:

Quentin Gabriele, 9 rue Geoffroy l'Angevin, 75004 Paris France, quentin@youdji.com

If you believe, after contacting us, that your "Information Technology and Freedom" rights are not being respected, you can send information to the CNIL.

Article 5: User Rights Regarding Data Collection and Processing

Any user concerned by the processing of their personal data can assert the following rights, in application of the European regulation 2016/679 and the French Data Protection Act (Law 78-17 of January 6, 1978):

• Right of access, rectification and erasure of data (set out in Articles 15, 16 and 17 of the GDPR);
• Right to data portability (Article 20 of the GDPR);
• Right to restriction (Article 18 of the GDPR) and to object to data processing (Article 21 of the GDPR);
• Right not to be subject to a decision based solely on automated processing;
• Right to determine the fate of data after death;
• Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR).

To exercise your rights, please send your letter to Finller, 9 rue Geoffroy l'Angevin, 75004 Paris France or by email to quentin@youdji.com.

In order for the data controller to comply with their request, the user may be required to provide certain information such as: their first and last names, email address and account number, personal space or subscriber number.

Visit cnil.fr for more information about your rights.

Article 6: Conditions for Modifying the Privacy Policy

The editor of the Youdji site reserves the right to modify this Policy at any time to ensure that it complies with current law for users of the site.

Any changes will not affect purchases previously made on the site, which remain subject to the Policy in force at the time of purchase and as accepted by the user when validating the purchase.

The user is invited to review this Policy each time they use our services, without it being necessary to formally notify them.