Privacy Policy

–

Lymia

Please read this privacy policy carefully to understand how your personal data is collected, processed, and stored when you use the present Lymia application (hereinafter the "Application").

Under this privacy policy, the data controller responsible for the collection and processing of your personal data is Neil, a simplified joint-stock company with a share capital of 10,000 euros, registered with the Nanterre Trade and Companies Register under number 844 410 878, with its registered office located at 14, avenue André Chénier, Bois-Colombes (92270).

You can contact us at the following email address for any claims or questions concerning this privacy policy: legal@lymia.eu

1. What personal data do we collect?

a. Connection Data

When you connect to the Application, we collect your connection data, which means information that is automatically recorded by our servers when you access or use the Application, whether you are registered as a member of the Application or not.

b. Identification Data

When you register on the Application, you will be asked to provide certain personal data to identify yourself (including name, email, password), necessary for creating your user account on the Application.

2. For what purposes and on what legal basis do we collect your personal data?

We collect, process, and retain your personal data for the following purposes:

When you use the Application and create a user account, the personal data concerning you will be processed and retained to allow the creation of your user account and enable you to use the Application. Your connection data may also be used to enable the proper use of various features of our Application. This processing of your personal data is therefore necessary for the performance of the usage contract with Neil when you decide to use our Application and accept our general terms of use. As part of the proper administration of the Application, we may also collect your personal data to send you emails concerning your registration on the Application, information letters, technical notifications, updates, and security alerts. The processing of your personal data is also necessary for the performance of your service contract but is also based on our legitimate interest in administering our Application.

3. Who will have access to your personal data?

Personal data belonging to you will only be accessible to authorized personnel within Neil and strictly necessary for their respective missions (including technical support).

We may also be required to share your personal data in the following situations:

Your personal data may be transmitted to our host located in France, enabling us to provide access to the Application in compliance with the contractual conditions signed with this host and not deviating from the terms of this privacy policy. Your personal data may also be communicated to the police services (upon judicial requisition) or to any person judicially authorized to receive this information (by court order).

4. How will your data be hosted?

We take appropriate and suitable measures to secure the personal data of users and have taken necessary precautions to preserve and ensure the security and confidentiality of the data, in particular to prevent them from being distorted, damaged, or disclosed to unauthorized persons. If necessary, any potential security breach will be notified to you in strict compliance with applicable regulations.

All personal data we collect is hosted within the European Union. We do not transfer personal data to third parties established outside the European Union.

Any personal data will be destroyed immediately upon the deletion of your user account on the Application.

5. Exercise of your rights

In accordance with European regulations on the protection of personal data, you have the following rights:

A right of access, allowing you at any time to know whether your personal data is or is not processed by our services and, when they are, to have access to such personal data and the information required by law concerning the processing methods of such data, A right of rectification, allowing you to request the correction of any inaccuracies concerning your personal data, A right to erasure, allowing you to request the deletion of your personal data when (i) their retention is no longer necessary for the purposes for which they were collected (ii) you have objected to the processing and wish for them to be deleted (iii) the data have been subject to unlawful processing; (iv) the data must be erased to comply with a legal obligation provided for by European Union law or French law, A right to restriction of processing of your personal data (i) when you contest the accuracy of the personal data collected for a period allowing us to verify the accuracy of such data, (ii) when, following the establishment of unlawful processing, you prefer restriction of processing to the complete erasure of the data (iii) when personal data are no longer necessary for processing purposes but are still needed for the establishment, exercise, or defense of legal claims; (iv) when you object to the processing and wish to restrict processing during the period allowing us to verify if the legitimate reasons invoked justify it, A right to data portability, allowing you to receive your personal data in a structured, commonly used, and machine-readable format, or to request that this personal data be transmitted to another data controller, provided that this portability request concerns personal data that you have directly provided and that this portability request does not infringe on the rights and freedoms of others, A right to object to the processing of your personal data for reasons relating to your particular situation, and the processing in question will then be terminated unless there are legitimate and compelling reasons justifying its continuation in accordance with applicable regulations, The right to define directives relating to the retention, erasure, and communication of your personal data from the time of your death, If the processing of your personal data is based on your consent, you also have the right to withdraw this consent at any time.

These rights can be exercised by contacting us directly at the following email address: legal@lymia.eu.

Claims relating to the use of your personal data may also be addressed, if applicable, to the Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX.