Privacy policy
Privacy Policy
Last updated: January 7, 2025
Introduction
At Zylio, protecting your personal data is a priority. This privacy policy describes how we collect, use and protect your personal information when you use our AI-powered shopping optimization platform.
Data controller
Zylio SAS
32 rue de Paris
92100 Boulogne Billancourt
France
Our Data Protection Officer (DPO) can be contacted at the following address: dpo@zylio.fr
Collected data
When using our services
We collect the following data:
– Identification data: surname, first name, job title, professional e-mail address, professional telephone number
– Connection data: login details, connection history, IP address
– Usage data: browsing logs, actions carried out on the platform
– Professional data: company, department, role
– Purchasing data: quotes, invoices, negotiated prices, purchasing history
Via our website
We collect :
– Browsing data: pages visited, time spent, browser type
– Form data: information provided during contact or registration requests
– Technical and analytical cookies (see our cookie policy)
Purposes of processing
We use your data to:
– Provide our shopping analysis and optimization services
– Manage your account and access
– Provide technical and customer support
– Improve our services and develop new features
– Compile usage statistics
– Meet our legal and regulatory obligations
– Prevent fraud and ensure the security of our platform
Legal basis for processing
Our processing operations are based on :
– The performance of the contract for the provision of our services
– Our legitimate interest in improving our services and security
– Your consent for specific processing operations
– Our legal and regulatory obligations
Data retention
We keep your data for as long as is necessary for the purposes for which it was collected:
– Account data: for the duration of the contractual relationship + 180 days
– Usage data: 12 months rolling
– Billing data: 10 years (legal obligation)
– Prospecting data: 3 years after last contact
At the end of these periods, data is either deleted or anonymized.
Recipients of data
Your data is accessible to :
– Our authorized personnel
– Our technical subcontractors (hosting, maintenance, support)
– Competent authorities upon request
All our subcontractors are subject to strict confidentiality and security obligations.
Transfers outside the EU
Your data is hosted exclusively in France. We do not transfer any data outside the European Union.
Data security
We implement appropriate technical and organizational measures to ensure the security of your data:
– Encryption of data in transit and at rest
– Strict access control
– Strong authentication
– Continuous security monitoring
– Regular staff training
– Regular security audits
Your rights
In accordance with the RGPD, you have the following rights:
– Right of access to your data
– Right to rectify inaccurate data
– Right to erasure (right to be forgotten)
– Right to limit processing
– Right to data portability
– Right to object to processing
– The right to specify what happens to your data after your death
To exercise these rights, please contact our DPO at dpo@zylio.fr. We undertake to respond to your request within one month.
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
Customer data protection
As a data processor within the meaning of the RGPD, we process our customers’ data in accordance with our contractual commitments and the documented instructions received. We implement all the technical and organizational measures necessary to ensure the protection of this data and comply with the obligations of the RGPD.
Modification of the policy
We reserve the right to modify this privacy policy at any time. Changes take effect as soon as they are published on our site. We will notify you of significant changes by email.
Contact
If you have any questions about this policy or the processing of your personal data, please contact our DPO :
Email : dpo@zylio.fr
Address : Zylio – DPO, 32 rue de Paris, 92100 Boulogne Billancourt, France