Privacy Policy

Data Controller

Organization: root SAS

Address: 229 Rue Solferino, 59000 Lille, France

DPO:

Data Collection

Direct collection

When you create an account or contact us, we collect: name, email address, postal address, phone number, and any information you provide voluntarily.

Indirect collection

When browsing our site, we may collect connection data, navigation patterns, IP addresses, and browser information through cookies and similar technologies.

Legal Bases for Processing

  • 1
    Contract execution: Managing your account, processing orders, and providing our services.
  • 2
    Consent: Sending promotional communications and using non-essential cookies.
  • 3
    Legal obligation: Accounting, regulatory compliance, and responding to official requests.
  • 4
    Legitimate interest: Fraud prevention, complaint management, security, and analytics.

Data Retention

Order management: 3 years from last contact

Customer relationship: 1 year from last contact

Fraud prevention: Up to 5 years from case closure

Cookies: Maximum 13 months

Accounting records: Current fiscal year + 10 years

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access
  • Right to rectification
  • Right to object
  • Right to data portability
  • Right to erasure
  • Right to restriction
To exercise your rights, contact us at

Cookies

Technical cookies

Essential for the proper functioning of the site. They cannot be disabled.

Analytics cookies

Allow us to measure audience and produce anonymous statistics to improve our services.

Social media cookies

Enable content sharing on social networks. Subject to third-party privacy policies.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, pseudonymization, regular security audits, and careful vetting of our subcontractors.

International Transfers

When data transfers outside the EU are necessary, they are carried out under European Commission standard contractual clauses to ensure an equivalent level of protection.

See also:

Legal Notice
Privacy Policy | root.cloud