User personal data protection charter.

1. Who we are

JOIN, a simplified joint stock company with a single shareholder, registered in the Paris Trade and Companies Register under number 833 938 269, having its registered office at 175 rue Saint- Martin 75003 Paris (hereinafter, "We") is the main controller of your personal data collected in the context of the use of the websites www.join-stories.com and studio.join-stories.com (hereinafter, collectively, the "Site") and of the JOIN STORIES software in order to create web stories (hereinafter, the "Services"). For any information relating to your personal data, you can contact JOIN by e-mail at privacy@teamjoin.fr

‍

2. Purpose of this charter

This charter aims to inform you of the different ways that we collect your personal data, with the strictest respect of your rights. To this end, we specify that in regards to the collection of your personal data, we conform to Act n°78-17 of 6 January 1978 regarding computers, files and freedom, in its current version (hereafter referred to as the “Data Protection Act”), as well as Regulation (EU) 2016/679 of 27 April 2016 relating to the protection of individuals when it comes to processing personal data and free circulation of said data (hereafter referred to as “GDPR”).

‍

3. Nature of personal data collected by JOIN

Personal data refers to any information that can identify you directly (for example name, last name, e-mail or postal address or phone number) or indirectly (for example account number, IP address or cookie information). The data that we collect forms three categories: (a) data that you provide us with, (b) data that we collect through automated means and (c) data that we collect from other sources.

‍

3.1. About the personal data you provide to us

You may be required to provide us with personal data when you:

Ask for a demo on our Site.
Use our Services.

In this case, we process the following personal information:

Identifying contact information (first name, last name, company, postal address and e-mail address, telephone number) to give you information relative to our products and services, answer your questions and allow you to log in and access your online account.
Data relating to your transactions on the Site, details of your purchases and subscriptions, etc. to ensure the smooth functioning of our contractual relationship.
Files uploaded to the website by you, containing photos and videos for example, as well as stories generated, to advise you, resolve any technical issues, identify potential product improvements, and inform you of our products and services.

‍

3.2. About the personal data we collect through automated means

We use automated technology such as cookies to collect data from your computer or mobile device (telephone or tablet) while using our Site and/or Services.

We collect the following technical data in order to ensure the correct functioning of our website, to offer you products and services adapted to your centers of interest (including advertisements) and to carry out audience research: IP address, browser, operating system, etc.

‍

3.3. About the personal data we collect from other sources

In the event that you upload files to the JOIN platform such as photos or videos from third-party platforms (particularly Instagram) we are required to process these files in order to advise you, solve technical issues, identify product improvements, and inform you of our products and services.

‍

4. For what purposes and on what legal basis do we use your personal data?

The legal grounds of our personal data collection are as follows: I. Providing you with precontractual information when you provide us with personal data upon visiting our site, to allow us to respond to your inquiries concerning our Services. II. Carrying out the agreed upon contract when you use our Services. III. Offering you products and services adapted to your centers of interest (including advertisements) and carrying out audience research when you consent to cookies on social networks, advertising cookies and audience research cookies.

Your personal data is collected to fulfil one or more of the following purposes: I. Advising you on how to create better stories: editorial advice, tips for using Templates and feature usage advice. II. Helping to resolve technical issues. III. Identifying product improvements and new templates to create. IV. Managing your access to some of the Website’s Services and the use thereof. V. Carrying out Client management activities regarding contacts, training, billing, client relations and User training. VI. Establishing a register of members, Users, Clients, and Prospects. VII. For our clients: sending you newsletters, invitations, and promotional messages. If you do not wish to receive these messages, we give you the option to refuse upon collecting your data. VIII. Establishing trade and visit statistics regarding our Services. IX. Managing outstanding debts and disputes related to the use of our products and Services. X. Personalizing our responses to your information requests. XI. Respecting our legal and regulatory obligations. Upon collecting your personal data, we will be sure to inform you of which information is obligatory and which is optional. Obligatory information is required for the functioning of our Services.

Concerning optional information, you are entirely free to provide it or not. We also indicate the potential consequences of not providing said information.

‍

5. Recipients of the data collected

Your data will be accessible to our company’s employees, the services responsible for control (namely auditors) and our subcontractors. Other potential recipients of your personal data are public organizations, exclusively to meet our legal obligations, court officials, ministerial officers, and organizations responsible for debt recovery.

‍

6. Transfer of personal data

Your personal data will not be subject to transfer, rent or exchanges benefitting a third party.

‍

7. Duration of the storage of personal data

‍

7.1. Concerning data relating to the management of customers and prospects

Your personal data is stored only for the duration of our business relationship with you. Concerning any potential prospecting operations with you, your data may be kept for a duration of 3 (three) years from the end of our business relationship. Data which may aid in establishing proof of a right or contract, or that must be retained to comply with a legal obligation, will be retained for the current legal duration.

Personal data relating to a non-client prospect may be stored for a duration of 3 (three) years from the time it is collected or the last contact from said Prospect. After this 3 (three) year period, we may contact you to ascertain whether you wish to continue receiving our commercial solicitations.

‍

7.2. Concerning the identity documents

In the event of exercising the right of access and rectification, data relating to identity documents may be stored for the duration established by Article 9 of the Code of Criminal Procedure, i.e., 1 (one) year. If the right to object is exercised, this data may be stored for a duration of 3 (three) years.

‍

7.3. Concerning data relating to bank cards

Financial transactions relating to the payment of purchases and fees via the Site are entrusted to a service provider who ensures a smooth and secure transaction. For Service requirements, this payment service provider can be required to access your personal data linked to bank card numbers, which they collect and store in your name for our accounts.

We do not have access to this data. For you to make frequent purchases or to pay related fees on the Site, you can consent, via a checkbox expressly intended for this purpose on the Site, that data linked to your bank cards can be stored for the duration of your registration on the Site and at least until you make your last transaction.

In ticking the box expressly intended for this purpose on the Site, you give us your consent to store this information. Data related to the visual cryptogram or CVV2 on your bank card will not be stored. If you do not tick the aforementioned box, we will not store your personal data linked to your bank cards any longer than is necessary to make the transaction.

In any case, this data may be stored as proof in case of any transactional disputes, as intermediary archives, for the duration established by article L 133-24 of the Monetary and Financial Code, i.e., 13 (thirteen) months following the debit date. This period may be extended to 15 (fifteen) months in order to account for the use of deferred debit cards.

‍

7.4. Concerning the management of lists of opposition to receive prospecting

The information used to exercise your right to objection is kept for a minimum of 3 (three) years from the time you exercise your right to objection.

‍

8. Security

For your information, we take all the necessary precautions, organizational measures, and appropriate action to ensure the security, integrity, and confidentiality of your personal data, namely ensuring that it not be altered, damaged, or accessed by non-authorized third parties. We also use secure, state-of-the-art payment systems in accordance with the applicable regulations.

‍

9. Transfer of personal data outside the European Union

If necessary, your personal data may be transferred to a country situated outside of the European Union, with the agreement that in the event that the recipient country does not have a personal data protection level equivalent to that of the European Union, we commit, in the absence of a sustainability decision, to take any necessary action to ensure the protection of your personal data based on appropriate safeguards.

For more information on our protection measures, please contact us at privacy@teamjoin.fr.

‍

10. Access to your personal data

In accordance with law n° 78-17 of 6 January 1978 regulating the use of Internet personal files, and GDPR, you have the right to receive and, if need be, rectify or erase any data concerning you, by contacting:

Email address: privacy@teamjoin.fr
Mailing address: 175 rue Saint-Martin, 75003 Paris, France

We remind any individual whose data is collected on the basis of our legitimate interest, as mentioned in article 4, that they can oppose the processing of any data relating to them at any time. We can however still be required to process said data if with legitimate cause to do so that override your rights and freedoms, or if processing the data is required to establish, exercise, or defend our rights in a legal claim.

‍

11. Right to define directives concerning the processing of data after your death

You have the right to establish directives regarding the storage, erasure or sharing of your personal data following your death. These directives can be general, meaning they apply to all of your personal data. In this case, your data must be registered with a trusted digital third party certified by the CNIL. These directives can also be specific to the data processed by our company, in which case you should address them to the following:

Email address: privacy@teamjoin.fr
Mailing address: 175 rue Saint-Martin, 75003 Paris, France

In sending said directives, you are giving you express consent for them to be saved, transferred, and executed according to the conditions provided herein. You may appoint a person in charge of the execution of said directives. They will therefore be responsible, after your passing, for reading the directives and seeing to their execution. In the absence of an appointed person, your next of kin will take on the responsibility of reading your directives and seeing to their execution. You can therefore change or revoke your directives at any time by writing to the addresses above.

‍

12. Portability of your personal data

You have the right to portability of any personal data you have provided us with, meaning the data that you actively and knowingly provided while accessing and using our Services, as well as data generated by your activity while using our Services. We remind you that this right does not apply to data collected and processed on legal grounds other than consenting to or executing the contract between us. This right can be exercised freely, at any point, namely when closing your account on the Site, in order to retrieve and keep your personal data. In this context, we will send you your personal data, by any means deemed appropriate, in a standard, commonly used, machine-readable format, in accordance with the state of the art.

‍

13. Making a complaint to a supervisory authority

We also inform you that you have the right to file a complaint with the CNIL via their website: https://www.cnil.fr/fr/plaintes or via letter: 3, place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

‍

14. Limitation of treatment

You have the right to request the limitation of personal data processing in the following cases:

During our verification period, if you are disputing the accuracy of your personal data.
If the processing of said data is illicit, and you want to limit processing rather than delete your data.
When we no longer need your personal data, but you wish for it to be stored in order to exercise your right.
During the verification period of legitimate reasons, if you have opposed the processing of your personal data.

‍

15. Modifications

We reserve the right, at our discretion, to change this policy, partially or in its entirety. These changes will come into practice upon publishing the revised policy. Your use of the Site following the implementation of these changes will be considered as recognition and acceptance of the revised policy. Failing this, if you do not agree with the new policy, your access to the Site will be revoked.