Confidentiality policy

Protecting the confidentiality of your data is essential for us. Therefore, we are committed to collecting only the data we need to provide you with the best services, ensure the confidentiality and security of all your data, and facilitate the exercise of your rights over your data.

The purpose of this Policy is to provide you with all relevant information on the processing of your Data that may be collected on the website or application (together “the Website”) by Shipup (“we”, “our”) or any affiliated company (together “the Shipup Group”) in accordance with the GDPR and the “Informatique et Libertés” law No. 78-17 (for the purposes of this Policy, persons who access on the Website will be referred to as “you” and “your”). This Policy also describes your Data Protection Rights.

1. Who is responsible for processing your personal data?

In application of the European Data Protection Regulation (EU) 2016/679 (“RGPD”), Shipup, a simplified joint stock company (SAS) under French law, whose head office is located at 47 rue Marcel Dassault 92100 BOULOGNE-BILLANCOURT, registered under number 822 856 068 (“RGPD”), registered under number 822 856 068 in the Nanterre Trade and Companies Register, is the data controller (“the Data Controller”) in the context of the processing of your personal data (“Personal Data” or “Data”) described and identified as such in article 2 of this security policy (the “Policy”).

2. What types of data do we process?

In order to achieve the processing purposes described in this Policy, we collect and process the following Data:

- Data relating to civil status (when filling out a contact form): name and surname, email address, telephone number, company, job.

- Data relating to your connection to the website: IP address, Data related to your registration and connection to the application: name and surname, email address, company.

- Data relating to your customers: name and surname, email address, email address, telephone number, company, delivery and billing addresses, orders and order processing.

3. What are the data collection sources?

We collect your Data when you connect to our Website and/or when you fill out a contact form.

4. What are the purposes and legal basis for the processing of your data?

The purposes and legal basis of the processing are as follows:

5. How long do we keep your data for?

Your personal data will be retained for as long as necessary for the purposes described above.

Some personal data, such as billing information, will be retained for a certain period of time in order to comply with tax or corporate obligations.

Personal Data required for the establishment, exercise or defense of legal rights may be retained for as long as necessary for this purpose. Some Personal Data may be retained to comply with applicable legislation.

If your account is deleted or without any connection to your account for a period of 3 years, we will delete your Personal Data from our systems and/or, we will take steps to make it anonymous so that you can no longer be identified (with the exception of Personal Data which must be retained or retained for a longer period of time as mentioned above).

6. Who do we transfer your data to?

For the purposes described in this policy, we will transfer your data to the following recipients:

- Shipup consultants such as our legal advisers based in France and who assist us in the management of claims and disputes;

- Government entities, if required by law or if it protects our legitimate interests in accordance with applicable laws;

- Potential or actual purchasers of Shipup's assets or activities;

- Shipup may transfer Data within the Shipup Group. We may also share Data with other service providers in order to organize and improve the performance of our services, such as financial service providers, our maintenance and hosting service providers, our CRM service provider or our web analysis tool;

- Therefore, Data may be transferred to service providers located outside the European Economic Area. In this case, we will ensure that this transfer is subject to a protection mechanism in accordance with applicable data protection legislation, such as standard contractual clauses as established by the European Commission.

7. What are your rights with regard to our data processing? How can you exercise them?

You can exercise the following rights under the GDPR and other applicable data protection laws:

- Request a copy of your personal data that we process and receive information about it;

- Request the correction and updating of your personal data if they are inaccurate, incomplete, ambiguous or outdated;

- Request the deletion of your personal data (“right to be forgotten”);

- Request a restriction of the processing of your personal data;

- Oppose the processing of your personal data for reasons related to your particular situation;

- Oppose the processing of your Data for commercial prospecting purposes at any time (by clicking on the corresponding link in a commercial prospecting email or by contacting Shipup, at the contact details mentioned below);

- When you are a French resident, to define guidelines relating to the conservation, deletion and communication of your Data after your death. These guidelines can be general or specific. The general guidelines concern all of your Data and can be registered with a trusted digital third party certified by the National Commission for Information Technology and Freedoms (CNIL). The specific guidelines only concern the processing of Data as mentioned in these guidelines, they are registered with us for the treatments we carry out. You can change or revoke them at any time;

- Request the portability of your personal data by requesting to receive a copy (in a structured, commonly used and machine-readable format) of the personal data that you have provided to us or by asking us to transfer this personal data to another data controller;

- File a complaint before the CNIL or any other competent supervisory authority, if you think that one or more of our data processing procedures violate the RGPD or another applicable data protection law.

If you wish to exercise any of these rights, please contact us using one of the following options:

To contact Shipup:

- Send an email to Shipup at the following address: legal@shipup.co;

- Write to Shipup at the following address: 47 rue MARCEL DASSAULT, 92100 BOULOGNE BILLANCOURT.You can also contact us, using one of the options mentioned above, if you have any questions or requests relating to our data processing.

8. Policy Update

You can find out when the Policy was last updated by referring to the “Last updated on...” statement at the top of this page.

9. Customer data

We inform you that when we process the personal data of your customers as part of our services, we are acting as a subcontractor as defined by the GDPR.

As such, we ensure that the processing of your Data complies with the applicable regulatory provisions and, in particular, with those of article 28 of the RGPD.