Privacy policy

The purpose of this Privacy Policy is to inform you transparently of how SACRE LAB (hereinafter “we”, “our”), acting as data controller, collects, uses, shares and protects the personal data you entrust to us through our websites www.collab-coworking.fr (the “Showcase Site”) and app.collab-coworking.fr (the “Booking Site”).

We undertake to comply with Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and amended French Law No. 78-17 of 6 January 1978 (the “French Data Protection Act”).

ARTICLE 1: DATA CONTROLLER

The controller of personal data is:

SACRE LAB Single-member limited liability company (Société à Responsabilité Limitée Unipersonnelle) with share capital of €1,000 Registered office: 10 rue de Venise, 51100 Reims, France RCS Reims: B 882 039 449 VAT No.: FR 69 882039449

For any question about this policy or to exercise your rights, you can contact us at the following email address: coucou@collab-coworking.fr

ARTICLE 2: WHAT PERSONAL DATA DO WE COLLECT?

We collect the data you provide to us directly, in particular when you create the account required on the Booking Site.

Mandatory data fields are marked with an asterisk (*). Refusing to provide this mandatory data may make it impossible to access the booking services.

The categories of data collected are as follows:

Identification and account data:

Occupant’s name or company name

Legal form (Company, Sole trader (auto-entrepreneur), Association)

Last name and first name of the legal representative or contact person

Email address

Telephone number

Billing data:

Billing address (Address, Postcode, City)

Payment information (processed by our provider Stripe; we do not store your bank card numbers).

Connection data (collected automatically):

Connection logs (IP address, date and time of connection, browser type), in accordance with the legal obligations of hosting providers and for security reasons.

Browsing data (Cookies):

Data collected through cookies and other trackers (see Article 7).

ARTICLE 3: WHY DO WE COLLECT YOUR DATA? (Purposes and Legal Bases)

We process your personal data for specific purposes, each based on a legal basis:

ARTICLE 4: WHO RECEIVES YOUR DATA?

We neither sell nor rent your personal data. It is shared only where necessary and is intended for:

Authorised SACRE LAB staff.

Our processors (service providers) , who act on our behalf and in accordance with our instructions:

Hosting provider: O2Switch, Infomaniak, or any other hosting provider located in the European Union.

Payment provider: Stripe (for the secure processing of bank card payments).

Invoicing/accounting tools: Henrri, Tiime, or any other similar tool.

Marketing management tools (where applicable): Emailing tools for sending newsletters.

Analytics and advertising tools (if you consent): Google (for Google Analytics), Hotjar, Facebook (for the Pixel).

Judicial or administrative authorities , where required by law.

ARTICLE 5: IS YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?

We favour processors based in the European Union (such as O2Switch or Infomaniak).

However, some of our processors (in particular Stripe, Google, Facebook/Meta) may be based in the United States or in other countries outside the EU.

Where this is the case, we ensure that such transfers are subject to appropriate safeguards (such as the European Commission’s Standard Contractual Clauses or Binding Corporate Rules (BCR)), in order to ensure a level of protection of your data equivalent to that required by the GDPR.

ARTICLE 6: HOW LONG DO WE KEEP YOUR DATA?

We keep your data for limited periods, depending on the purpose of the processing:

For Prospects (account created without a booking):

3 years from the creation of the account or your last contact with us (e.g. last login).

For Customers (having made at least one booking):

5 years after the end of the last Service (corresponding to the statutory limitation period for B2B commercial matters).

For Billing Data (Invoices, purchase orders…):

10 years from the end of the financial year (Legal obligation).

For Marketing Consent (Newsletter):

3 years from your subscription or your last “click” on one of our emails. You can unsubscribe at any time using the unsubscribe link.

Connection logs (security):

1 year maximum.

Cookies:

13 months maximum from the time they are placed on your device.

ARTICLE 7: MANAGEMENT OF COOKIES AND OTHER TRACKERS

Our Sites (www and app) use cookies. A cookie is a small text file placed on your device when you visit.

Strictly Necessary (Technical) Cookies:

These are essential for the Booking Site to function (e.g. managing your login session, validating your booking basket, payment).

They do not require your consent.

Analytics and Performance Cookies (e.g. Google Analytics, Hotjar):

These allow us to understand how you use our sites (pages viewed, time spent) in order to improve their performance and usability.

Marketing and Advertising Cookies (e.g. Facebook Pixel, LinkedIn):

These allow us to show you targeted advertising on third-party sites, based on your interests.

Cookie Consent: In accordance with the regulations, analytics and marketing cookies (points 2 and 3) are placed only after obtaining your explicit consent.

We use a consent management platform (CMP), such as Axeptio, which is displayed on your first visit. There you can accept, refuse or configure your choices by purpose. You can change or withdraw your consent at any time using this tool.

ARTICLE 8: WHAT ARE YOUR RIGHTS OVER YOUR DATA?

Under the GDPR, you have the following rights:

Right of access: The right to know whether we hold data about you and to obtain a copy of it.

Right to rectification: The right to correct inaccurate or incomplete data.

Right to erasure (“right to be forgotten”): The right to request the deletion of your data (except where there is a legal obligation to retain it, such as invoices).

Right to restriction of processing: The right to “freeze” the use of your data in certain circumstances.

Right to data portability: The right to receive your data in a structured format and to transmit it to another data controller.

Right to object: The right to object at any time to the processing of your data for marketing purposes.

Right to set post-mortem instructions concerning your data.

ARTICLE 9: HOW TO EXERCISE YOUR RIGHTS

You can exercise your rights at any time by contacting us:

By email: coucou@collab-coworking.fr

By post: SACRE LAB, 10 rue de Venise, 51100 Reims, France

You will receive a reply within one (1) month. Proof of identity may be requested to prevent fraud.

ARTICLE 10: SECURITY OF YOUR DATA

We implement appropriate technical and organisational measures to protect your data against destruction, loss, alteration or unauthorised disclosure (e.g. SSL encryption, secure access, firewall).

ARTICLE 11: COMPLAINTS TO THE CNIL

If, after contacting us, you consider that your rights over your data are not being respected, you may lodge a complaint with the French supervisory authority, the Commission Nationale de l’Informatique et des Libertés (CNIL): www.cnil.fr.

ARTICLE 12: UPDATES TO THIS POLICY

We reserve the right to amend this Privacy Policy at any time, in particular to comply with changes in the law. The applicable version is the one in force on the day you access the Site.