PRIVACY
POLICY

(1 ) ARTICLE 1 - GENERAL INFORMATIONS

Within the framework of its commercial relations, Done collects and processes personal data. The data collected is necessary for Done to carry out its activities and offer you solutions to encourage the donation and recovery of objects.

(2 ) ARTICLE 2 - IDENTITY OF THE DATA CONTROLLER

The party responsible for processing the personal data collected is Done, a limited liability company registered in the Lille Trade and Companies Register under the identifier 89052963900027 and whose registered office is located in LILLE (59000), represented by its current legal representative.

(3 ) ARTICLE 3 - TYPE OF DATA COLLECTED

The personal data collected when you use the service includes your surname, first name, profile photo, e-mail address, the name of your association or company, the address of your association or company, the address of the registered office, SIRET, the name of the legal representative of the company or association, the photo of the association or company, and non-sensitive information relating to your terminal (type of device or browser used, operating system, IP or MAC address, advertising identifier, language selected, geolocation data).

(4 ) ARTICLE 4 - PROCESSING PURPOSES

Functioning and use of the service
User data is collected by Done when the user's account is created by filling in the registration form, when browsing the service or when creating an agreement.
This personal data is collected for the following purposes:

• management, validation, publication and follow-up of the user's ad;
• the creation of a valid donation agreement;
• sending information about changes or developments in our services;
• customer relationship management;
• managing the exercise of your rights with regard to your personal data, under the conditions set out in article 9;
• sharing tools on social networks;
• the collection of statistical information on the use of the service by users;
• satisfaction surveys and statistical analyses.

Advertising personalization and targeted marketing
Unlike others, Done does not transmit certain data about your terminal (type of device or browser used, operating system, IP or MAC address, advertising identifier) and/or demographic data for targeted advertising purposes.
Unlike others, Done does not transmit your geolocation data associated with your mobile advertising identifiers.

(5 ) ARTICLE 5 - PLACE OF DATA PROCESSING

The processing of data collected by Done takes place in the European Union.
For this reason, it is not marginally possible that certain data collected may be transferred to other countries (in particular to the United States).

(6 ) ARTICLE 6 - DATA RECIPIENTS

The data necessary for the proper functioning and use of the service will be communicated to authorized persons within Done (after-sales service, marketing and IT development) in accordance with the purposes set out above (Article 4: purposes of processing).
Some of the personal data collected by Done may also be transmitted to subcontractors in order to assist Done in carrying out its activities.
These service providers have limited access to the data strictly necessary to carry out the tasks on behalf of Done.
They are also contractually bound to protect the data and use it solely for the purposes for which it was communicated and in accordance with the present Charter.

(7 ) ARTICLE 7 - DATA RETENTION PERIOD

The length of time your Personal Data is kept varies according to the purpose for which it was collected.
Personal data collected for the purposes of proper operation and use of the service is kept for as long as the user has an account.

(8 ) ARTICLE 8 - SECURING DATA

Done ensures the confidentiality, integrity and security of the data entrusted to it by implementing the appropriate organisational and technical measures, as well as reinforced IT protection.
The subcontractors called upon by Done also undertake to ensure a high level of data protection.

(9 ) ARTICLE 9 - EXERCISING THE RIGHTS OF THE PERSONS CONCERNED

The user to whom the personal data refers has the right at any time to access, rectify and delete his or her personal data, as well as the right to port this data.
The user also has the right to object to the processing of his or her personal data or to request that it be limited. Requests to exercise these rights should be sent to Done at the following e-mail address contact@done-solution.comaccompanied by proof of identity.
The user also has the right to obtain from the data controller confirmation as to whether or not personal data concerning him/her is being processed and, if so, access to said personal data, as well as the following information:

• processing purposes;
• the categories of personal data concerned;
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients established in third countries;
• whenever possible, the length of time for which personal data will be kept or, if this is not possible, the criteria used to determine this length of time;
• the right to lodge a complaint with a supervisory authority.

When exercising the above rights with Done, Done will provide a copy of the personal data being processed and may require payment of a reasonable fee based on administrative costs for any additional copies requested by the data subject.

(10 ) ARTICLE 10 - COMPLAINTS TO CNIL

The interested party may also lodge a complaint with the Commission Nationale de l'Informatique et des Libertés, whose head office is located at 3 Place de Fontenoy. – TSA 80715 – 75334 PARIS CEDEX 07. Phone: 01 53 73 22 22.
You can also file a complaint online at the following address: https://www.cnil.fr/fr/plaintes .