Privacy Policy

Within the framework of the use of the Trezy platform (the "Platform"), Trezy collects and processes personal data of users who act on behalf of and under the responsibility of Trezy's customer companies. This Privacy Policy describes how we collect, use, and protect your personal information in compliance with applicable data protection laws including GDPR.

1. Data Controller

The company responsible for processing your personal data is:

Trezy collects and processes personal data relating to users according to the terms and conditions defined in this policy.

2. Types of Users

There are three types of users on the Platform:

• Owner User: Creates their account on the Platform on their own initiative
• Administrator User: Creates their account after receiving an invitation from an Owner or Administrator
• Reader User: Creates their account after receiving an invitation from an Owner or Administrator

3. Data We Collect

3.1 Account Creation and Authentication

When you create an account, we collect:

• Your name
• Professional email address
• Professional telephone number
• Encrypted password

This information is used to identify you, authenticate your access to the Platform, provide support, and enable password recovery.

3.2 Platform Activity

We monitor and log actions performed on the Platform by Owner and Administrator users. This data allows users from the same customer organization to track actions carried out by other users within their organization.

3.3 Communication Preferences

We use your professional email address to send:

• Service updates and newsletters
• Promotional offers
• Changes to our services

4. Legal Basis for Processing

4.1 Contract Performance

We process personal data for account creation and activity monitoring as necessary for the performance of the contract between your organization and Trezy. This processing is essential to provide our services through the Platform.

4.2 Legitimate Interests

We process data for communications based on our legitimate interest in keeping you informed about our services, unless you object to such processing.

5. Data Sharing and Third Parties

The Platform may enable your organization to enter into direct contractual relationships with Trezy partners. Any processing of personal data by these partners is carried out under their exclusive responsibility and is not covered by this Privacy Policy.

We do not sell or rent your personal data to third parties. We may share your data only:

• With service providers who assist us in operating the Platform
• When required by law or legal process
• To protect our rights, property, or safety
• With your consent

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When determining retention periods, we consider:

• The duration of our relationship with you
• Legal obligations to retain data
• Whether retention is advisable for our legal position

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request restriction of processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

7.1 Exercising Your Rights

To exercise any of these rights, you may:

• Access the "My Account" section and manage your preferences
• Use unsubscribe links in our emails
• Contact us at: gdpr@trezy.io
• Write to us at: TREZY, 40 Rue Alexandre Dumas, 75011 Paris, France

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of sensitive data including passwords
• Regular security assessments
• Access controls and authentication requirements
• Employee training on data protection

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Platform. For detailed information about our use of cookies, please refer to our Cookie Policy.

11. Children's Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children under 18.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on the Platform and updating the "Last updated" date.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the relevant supervisory authority if you believe we have not handled your personal data in accordance with applicable law.