top of page

Privacy Policy

Sicoya (whose registered office is located at 8 rue Victor Hugo 69002 Lyon), in its capacity as data controller, attaches great importance to protecting and respecting your privacy. The purpose of this policy is to inform you, in accordance with Regulation No. 2016-679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the ‘Regulation’), of our practices regarding the collection, use and sharing of information that you may provide to us through our website hereinafter referred to as ‘the Site’.

​

The purpose of this policy is to inform you about the categories of personal data we may collect or hold about you, how we use it, who we share it with, how long we keep it and how we protect it, and what rights you have over your personal data.

​

1. The data we collect

​

When you use the Site, you may send us information, some of which identifies you and therefore constitutes personal data (hereinafter referred to as the ‘Data’). This information contains in particular the following data.

  • Identification data: Last name, First name

  • Professional data: Company, sector of activity

  • Contact details: Business e-mail address and business telephone number

  • Connection data: IP address, browsing cookies

​

2. How do we use the data we collect?

​

We use the Data we collect in order to :

​

 

  • Respond to requests for demonstrations of the Showy solution: provision of a demonstration request form: collection and management of information to respond to the request

  • Respond to contact requests for specific requests: Provision of a contact form: collection and management of information to respond to the request.

  • Improve the experience of using our services: integration of navigation cookies

  • Communicating about our products and services: Sending a monthly newsletter (upon registration) / Sending occasional communications (with consent)

To maintain and operate our site: Hosting of the site and its databases / Application supervision and security operations

 

When Data is collected, you will be informed whether certain Data must be provided or whether it is optional. Data identified by an asterisk on the collection form is mandatory. Failure to do so may restrict the execution of your request.

​

3. Who are the recipients of the data we collect and why do we send it to them?

​

3.1. Data transferred to public authorities and/or bodies

​

In accordance with the regulations in force, the Data may be transmitted to the competent authorities at their request, and in particular to public bodies, law officers, judicial officers and bodies responsible for debt recovery, exclusively to meet legal obligations, as well as in the case of the search for the perpetrators of offences committed on the Internet.

​

3.2. Data transferred to third parties

​

We work closely with third party companies who may have access to your Data, and in particular with :

 

  • Wix: Website hosting

  • Google: Statistics / Analytics

​

4. How long do we keep your data?

​

Your Data will not be kept longer than is strictly necessary for the purposes set out in this Policy, in accordance with the Regulations and applicable laws.

 

 

  • Identification data - For the contact form - 3 years from the last request

  • For newsletter registration:- until unsubscription - automatic deletion

  • Professional data

  • Contact data

  • Connection data - 13 months for analytical and statistical cookies - Automatic deletion

 

When the retention periods expire, your Data is deleted or made anonymous so that it can be used without infringing your rights. Nevertheless, your Data may be archived beyond the periods stipulated for the purposes of researching, establishing and prosecuting criminal offences, with the sole aim of making your Data available to the judicial authorities, where necessary. Archiving means that your Data will no longer be available for consultation online, but will be extracted and stored on an autonomous and secure medium.

​

5. How and where is your data transferred?

​

We prioritise the use of services that operate within the European Union and comply with the GDPR. However, your Data may be transferred from a country within the European Union to a country outside the European Union. When we transfer your Data outside the European Union, we always do so securely and in accordance with the applicable regulations, in particular with regard to the protection of personal data:

  • Either by transferring the Data to a recipient located in a country that has received an adequacy decision from the European Commission certifying that it has an adequate level of protection;

  • Or by implementing or having implemented European Standard Contractual Clauses that have been approved by the European Commission as ensuring an adequate level of protection for your Data;

  • Or by using Binding Internal Company Rules validated by the competent data protection authorities;

  • Or by using all appropriate safeguards referred to in Article 46 of the Regulation.

You may have access to all of these documents by contacting us at the address given in article 7 hereof.

​

6. How is your data protected?

​

We take appropriate technical and organisational measures to prevent unauthorised access to or modification, disclosure, loss or destruction of your Data.

​

7. What rights do you have over your data?

​

In accordance with the applicable laws and regulations on the protection of personal data, you have a number of rights in relation to your Data, namely:

 

  • A right of access and information: you have the right to be informed in a concise, transparent, intelligible and easily accessible manner of how your Data is processed. You also have the right to obtain (i) confirmation that Data concerning you is being processed and, where appropriate (ii) access to such Data and to obtain a copy thereof.

  • A right of rectification: you have the right to obtain rectification of inaccurate Data concerning you. You also have the right to complete incomplete Data concerning you, by providing an additional declaration. If you exercise this right, we undertake to communicate any rectification to all recipients of your Data.

  • A right to erasure: in certain cases, you have the right to obtain the erasure of your Data. However, this is not an absolute right and we may for legal or legitimate reasons retain this Data.

  • A right to the limitation of processing: in certain cases, you have the right to obtain the limitation of the processing of your Data.

  • A right to Data portability: you have the right to receive your Data that you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or for the use of others. 

  • A right to object to processing: you have the right to object at any time to the processing of your Data for processing based on our legitimate interest, a mission of public interest and for commercial prospecting purposes. This is not an absolute right and we may for legal or legitimate reasons refuse your request to object.

  • The right to withdraw your consent at any time: you may withdraw your consent to the processing of your Data where the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent carried out prior to such withdrawal.

  • The right to lodge a complaint with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices.

  • The right to give instructions concerning the fate of your data after your death: you have the right to give us instructions concerning the use of your Data after your death.

To exercise these rights, you may contact us at the following address: dpo@showy.so. Please note that we may require proof of your identity in order to exercise these rights.

​

8. Changes to our privacy policy

​

We may amend this policy from time to time, in particular in order to comply with any regulatory, legal, editorial or technical developments. Where appropriate, we will change the ‘last updated’ date and indicate the date on which the changes were made. Where necessary, in particular but not exclusively in the event of a substantial modification or a particular event requiring modification of this policy, we will inform you and/or seek your agreement. We advise you to check this page regularly for any changes or updates to our policy.

bottom of page