Data protection policy
The use of this site may be associated with the processing of personal data. In order to make these processes understandable for you, we would like to give you an overview of these processes with the following information. To ensure fair treatment, we also wish to inform you of your rights under the European General Data Protection Regulation (GDPR) and the Data Protection Act No. 78-17 of January 6, 1978.
GMML SAS, 10 rue de penthièvre, 75008 Paris (hereinafter referred to as "MY CUISTOT", "we" or "us") is responsible for processing the data.
1. General information
If you have any questions or suggestions about this information or would like to contact us regarding the claim of your rights, please submit your request to:
10 rue de penthièvre
1.2. General information on data processing
The use of this site may lead to the processing of personal data. The term data protection "personal data" refers to all information relating to a directly or indirectly identifiable natural person. The IP address can also be personal data. An IP address is assigned to each device connected to the Internet by the so that it can send and receive data. When you use our website, we collect information that you provide yourself. In addition, during your visit to the Site, we automatically collect certain information about your use of the Site.
We process personal data in compliance with the relevant data protection rules, in particular the GDPR and the data protection act. Data processing by MY CUISTOT takes place only on the basis of legal authorization.
By using this website, we process personal data:
- with your consent (article 6 (1) sentence 1 a) GDPR)
- in order to fulfill a contract to which you are a party or at your request to perform pre-contractual measures (Art Para 1 p.1 b) of the GDPR)
- for the fulfillment of a legal obligation (article 6 (1) sentence 1 c) of the GDPR)
- if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party (Article 6 (1) (f) GDPR)
If you apply for an open position in our company, we also process your personal data to decide on the establishment of an employment relationship (article 26 (1) sent 1 of the GDPR).
1.3. Storage times
Unless otherwise indicated in the following information, we store data only for the time necessary to achieve the specified purpose or to fulfill our contractual and legal obligations. These legal storage requirements may in particular arise from commercial or tax regulations.
1.4. Technical service provider
Unless otherwise indicated in the following information, data is processed on the servers of technical service providers that we have commissioned for this purpose. These service providers process data only after explicit instruction and are contractually obliged to guarantee sufficient technical and organizational measures for data protection.
2. Information for users
In the following, we describe the data processing carried out when you book home services via our online platform and contract the services of a service provider.
2.1. Reservation of home services
In order to be able to book services through our website, you must register and create a user profile. This profile is required to select providers, for example, because of their proximity to the place of performance and the other information indicated on your profile.
We collect the following information:
First name, surname, e-mail address, telephone number, street, address, postal code, city, preferred method of payment ("user profile data"); type and duration of reserved and additional services; information on whether the service is to be provided once or repeatedly ("reservation data"); time of creation and update of your user profile;
You can also voluntarily provide the following information:
MY CUISTOT transmits user profile data, reservation details and any additional information voluntarily provided by the user in order to better organize the services provided by your provider.
If, through us, a service contract is concluded between a service provider and you, MY CUISTOT will also process your user profile data for the handling, execution, processing, invoicing and monitoring of the provision of service / reserved service, as well as contracts and other related services such as the management of any complaints, cancellations, etc.
In addition, we use the data from your user profile, in particular the telephone number, to send an automatic notification and a reminder regarding the service / service to come.
In addition, MY CUISTOT uses your booking data to bill for the services provided by the service provider and for any support required following the performance of the service (for example in the event of poor service) as well as for payment of our service charges to the partner service provider.
In addition, depending on the payment method chosen, we will transmit your credit card information (card number, validity period, security number) or your bank details (hereinafter referred to as "payment information") that MY CUISTOT collects en within the framework of the reservation, to our payment service provider Adyen BV, Simon Carmiggelstraat 6-50, 1011 DJ Amsterdam, Netherlands (hereinafter referred to as "Payment service provider"), which collects, processes and uses payment data for the purposes of payment processing or collection of the receivable from your account. In no case, additional storage of this payment data takes place by MY CUISTOT.
As part of our service delivery, we will keep a history of the services you have provided and the services you have received, including, for example, an invoice generated in your user profile to allow you to access this information at a later date. The data processing described is based on the legal basis of article 6, paragraph 1, page 1, point b) of the GDPR.
2.2. Reviews and ratings
If you use the possibility offered by the Platform to evaluate the services provided, MY CUISTOT will process the information you provide for the purpose of presenting these opinions and evaluations on the Platform. The processing of this data is based on Article 6 (1) (b) of the GDPR.
2.3. Advertising authorization for your user profile data
If you have given your consent to the advertising, we process and use your user profile data, your reservation data and your additional information as well as your access times to your user profile in order to better understand your habits and possibly send you interesting information on additional services. You can revoke your consent to the use of your data for advertising purposes at any time (eg Newsletter) by sending an e-mail to the following address: firstname.lastname@example.org . The legal basis for this processing is Article 6 (1) (1) (a) GDPR.
2.4. Edit and delete your profile data
You can also change your additional information and your user profile information at any time in your user profile. If you delete your user profile on the platform, MY CUISTOT will block your data and delete it.
3. Information for service providers
3.1. Reviews and ratings
When you connect to the platform as a service provider, MY CUISTOT will process the following information provided by you in order to initiate and, if necessary, to conclude a service contract:
First name, surname, e-mail address, company, street, postal code and city ("partner profile data"), information indicating whether you are a company or an individual, if you currently work, if you have experience in the home services sector, if you are transported, if you have the right to work on French territory, an attestation on the honor of a clean criminal record, your bank details, the languages spoken, information on your area of intervention possible geographic location and your means of communication (mobile phone, mobile phone connected to the Internet, Internet access) (hereinafter referred to as "partner data").
MY CUISTOT stores profile data and this information in a profile accessible to partner service providers collected as part of the provision of the service such as billing. Certain saved profile data will also be published on the platform, such as your first name, your photo and your brief description, so that users can submit a reservation request to you.
Profile data from partner service providers is used by MY CUISTOT for the execution, processing and invoicing of the service provision as well as for any complaints, cancellations, etc.
In addition, MY CUISTOT uses the profile data of the partner service provider, in particular the telephone number, to send an automatic notification and reminder message regarding the upcoming service. The processing of data is based on the legal basis of Article 6, paragraph 1, subparagraph 1 b) of the GDPR.
3.2. Reviews and ratings
If a user has used the possibility offered by the platform to evaluate your services, MY CUISTOT will process this information for the purposes of presenting your profile on the platform. Reviews are an integral part of our platform to provide the greatest possible transparency to users. The relevant data processing is based on the legal basis of Article 6, paragraph 1, subparagraph 1 b) of the GDPR.
If you delete your profile from the platform, MY CUISTOT will first block your data, then delete it.
4. Processing of server log files
In purely informative use of our website, first of all, automated information (i.e. not via registration) is used to store the general information that your browser transmits to our server. These include by default: browser type / version, operating system used, page visited, page visited previously (referrer URL), IP address, date and time of the server request and HTTP status code.
This processing takes place for the purpose of protecting our legitimate interests and is based on the legal basis of Article 6 (1) sentence 1 f) GDPR. This processing is for the technical management and the security of the site. The stored data will be deleted after seven days, unless there is a legitimate suspicion of illegal use on the basis of concrete evidence and a further examination and processing of the information is necessary for this reason.
On our website we offer a blog in which we publish articles on various subjects. Our blog has a comment function which requires personal information. When you submit a comment, it will be published with the username you provided associated with each publication. We recommend that you use a pseudonym instead of your name when choosing your username. To use the comment function, the specification of the username and your chosen e-mail address is mandatory. Any other information provided by you is voluntary. The legal basis for this data processing is the sentence in Article 6 (1) (1) (b) of the GDPR.
If you leave a comment, we store your IP address for the above data. The legal basis for storing your e-mail address from the IP address is the sentence in Article 6 (1) (1) (f) GDPR. We only use your email if a third party reports an illegal comment and we need to verify the incident if necessary. We store your IP address in order to defend ourselves against claims by third parties in the event of the publication of defamatory content. We store your email address as long as your comment is publicly visible. We will delete your IP address one week after posting the comment.
We reserve the right to delete your comments if your comment is denounced by a third party as being defamatory. You can object to this storage of the above data at any time by sending an email to email@example.com . In this case, we should delete your comment from our website.
6. Chef applications
You can apply to become a chef on our website. To this end, we collect your personal data, in particular your name, your CV and any other content provided by you.
Your personal data following your application will not be collected, stored, processed and used for purposes related to your interest in a job offer within MY CUISTOT. Your online request will only be processed and taken into account by the competent internal staff. All employees responsible for data processing are required to protect the confidentiality of your data.
If we are unable to count you among our partners, we will keep the data you provide for up to six months after the end of the application process in order to answer any questions relating to your application.
The legal basis for data collection is § 26 (1) sent 1 of the GDPR. If we keep your jobseeker data for a period of six months and have expressly consented to this, we draw your attention to the fact that this consent is freely revocable at any time in accordance with Article 7 (3) of the GDPR. Such revocation does not affect the lawfulness of the processing until the time of revocation on the basis of consent.
If you send us a message via the various contact methods available, we process the data you provide only to process your request. The legal basis for data processing is Article 6 (1) (b) GDPR.
8.1. Subscription and unsubscription
On our website we offer the possibility to subscribe to our newsletter. To subscribe to the newsletter, you need a valid email address and your name. To verify the email address, you will first receive a login email, which you will need to confirm via a link (double opt-in).
We will send you our newsletter on the basis of your consent (Article 6 (1) sentence 1 (a) GDPR). You have the option at any time to unsubscribe from the newsletter or to revoke your consent. Simply use the unsubscribe link found in each email or by email at: firstname.lastname@example.org .
When registering for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary to be able to prove that consent has been given. The legal basis derives from our legal obligation to document your consent (Article 6, paragraph 1, point c), GDPR i.V.m. Article 7 (1) GDPR).
We also analyze the behavior of readers and the opening rates of our newsletter. We collect and process pseudonymized usage data which we do not combine with your email address or IP address.
The legal basis for the analysis of our newsletter is article 6, paragraph 1, page 1. f) GDPR and the processing serves our legitimate interest in the optimization of our newsletter. You can object to it at any time by contacting us via the email address above.
8.3. Newsletter Service
Nous utilisons le service de newsletter Sendinblue, domicilié au 55 rue d'Amsterdam 75008 PARIS. Sendinblue travaille avec nous en tant que processeur de données, est strictement lié par des instructions et s'engage contractuellement à assurer des mesures de protection des données techniques et organisationnelles adéquates.
10. Analysis of our website
10.1. Google Analytics
We only use Google Analytics with an active IP anonymization feature on our website. Consequently, Google thus shortens and anonymizes your IP address in the Member States of the European Union or the signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be combined with other data held by Google.
The legal basis for the use of this service is our legitimate interest in ensuring a needs-based and demand-driven provision of our website and our services according to Art. 6 paragraph 1 sentence 1 letter f GDPR.
You can prevent or stop the processing of data at any time. To do this, you can download and install a browser plugin that blocks tracking services or can adjust the settings of your browser software accordingly to prevent the installation of cookies.
Google has obtained Privacy Shield certification and has therefore agreed to comply with European data protection law: Privacy Shield.
11. Monitoring and retargeting
11.1. Facebook (visitor pixels)
Our website uses "visitor pixels" from Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, hereinafter referred to as "Facebook".
The visitor pixel is used to track user behavior after they are redirected to the provider's website by clicking on a Facebook ad. This allows us to measure the effectiveness of Facebook ads for statistical and commercial prospecting purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we inform you, based on our knowledge of the situation. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook's data use policy Facebook Privacy.
The visitor's pixel is triggered by Facebook when you visit our website and may store a cookie on your device. If you log into Facebook after that or visit our website while logged in to Facebook, the visit to our website will be linked to your account. Personal data collected about you remains anonymous to us and does not allow us to make assumptions about the identity of users. This data is nevertheless stored and processed by Facebook, which allows it to be linked to the respective user accounts and can be used by Facebook for market research or other promotional purposes. The legal basis for the use of this service is our legitimate business interests according to Art. 6 paragraph 1 sentence 1 letter f of the GDPR.
You can object to the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by contacting the following address: Facebook settings. Facebook is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection legislation: Privacy Shield
11.2. Facebook custom audiences
Our website uses "custom audiences" provided by Facebook Ireland Ltd., 4, Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, hereinafter referred to as "Facebook". A remarketing pixel is integrated on our website through which Facebook can capture the users of our website and use their data as a basis for advertisements (Facebook Ads). With this pixel, general information about your browser session will be sent to Facebook as well as non-reversible information that is not specific to the individual checksum (hash value) that is generated from your Facebook-ID. More information on the use of data by Facebook as well as your rights and settings to protect your personal data is available on this link . The legal basis for the use of this service is our legitimate commercial interests according to Art. 6 paragraph 1 sentence 1 letter f GDPR.
If you wish to deactivate the Facebook Custome Audiences website in the future, you can unsubscribe by following thislink.
Facebook is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection legislation: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
11.3. Google Marketing Services
Our website uses the marketing and remarketing services of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter referred to as "Google". These services allow us to display advertisements in a more targeted manner in order to present advertisements of interest to users. Through announcements and remarketing products, users are made aware of interest in the activity on other websites in the Google network. For these purposes, a code is used by Google when accessing our website and so-called remarketing tags are incorporated into the website. With their help, an individual cookie, i.e. a file, is stored on the user's device (comparable technologies can also be used in place of cookies). Cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records the applications visited by users, the content that interests them and the offers that have been used. In addition, technical information on the browser and the operating system, the sites on which we are referenced, the duration of the visit as well as all additional data on the use of online products and services are stored. The IP address of the users is also recorded, although we would like to inform you that within the framework of Google Analytics, the IP addresses in the Member States of the European Union or in other Contracting States to the Agreement on European Economic Area are truncated.
All user data will only be processed once anonymized. Google does not store any names or email addresses. The ads will be displayed according to the cookie but without our having any personal information about the owner of the cookie. This information is collected by Google and transmitted and stored by servers in the United States.
One of the Google marketing services we use is the Google AdWords online advertising program. In the case of Google AdWords, each AdWords customer receives a different conversion cookie. Cookies cannot therefore be tracked on the websites of AdWords customers. The information collected by the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information that personally identifies users.
For more information on Google's use of data on sites using Google services, see https://policies.google.com/privacy/partners. General information on the use of data for marketing purposes is available at https://www.google.com/policies/technologies/ads . The use of this service is based on our legitimate commercial interest according to Art. 6 paragraph 1 sentence 1 letter f GDPR.
If you wish to object to interest-based advertising by Google marketing services, you can do so using the settings and opt-out options provided by Google: http://www.google.com/ads/preferences . Google is certified under the Privacy Shield agreement and thus guarantees its compliance with European data protection legislation: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .
12. Social media plugins
We use social plugins on our website, hereinafter referred to as "Plugins". These plugins allow you to share the content of our site on different social networks. To integrate a plugin on our website, the code of the plugin program is directly transferred from the servers of the plugin supplier when accessing our website. It is therefore a technical necessity to submit the IP address used. This submission is in progress regardless of your interaction with the plugin (for example if you clicked on the "Like" button on Facebook). If you are logged into your user account with a social network when you visit our website or interact with the plugin, other data may be transferred. Additional information is available through the third party companies providing these plugins (see below). The legal basis for using this service is our legitimate business interests to increase the scope of our website according to Art. 6 paragraph 1 sentence 1 letter f GDPR.
We have integrated the following third-party plugins on our site:
The social network plugin facebook.com, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, United States, or if you are based in Europe Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, hereinafter referred to as "Facebook". Facebook is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). Facebook's data protection guidelines as well as information on configuring options to protect your privacy on Facebook are available here: https://www.facebook.com/about/privacy/.
The twitter.com social network plugin, operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland, hereinafter referred to as "Twitter". Twitter certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation: Privacy Shield . The data protection policy is available here: https://twitter.com/de/privacy. You can change your data protection settings at http://twitter.com/account/settings.
The instagram.com social network plugin, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA, 94025, United States, hereinafter referred to as "Instagram". Please note that processing via Instagram does not provide an adequate level of data protection according to the GDPR. Information on data protection on Instagram is available at https://help.instagram.com/196883487377501.
The social network plugin LinkedIn, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, United States, or if you are based outside the United States, LinkedIn Ireland Limited, Gardner House, Wilton Plaza, Wilton Place, Dublin 2, Ireland, hereinafter referred to as "LinkedIn". LinkedIn is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection legislation: (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). More information on data protection on LinkedIn is available at https://www.linkedin.com/legal/privacy-policy .
13. Integrated Services and Third Party Content
We use the services and content provided by third parties on our website. For this type of integration, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address will therefore be transmitted to the respective third party provider.
In each case, this data processing is carried out to safeguard our legitimate interests in the optimization and commercial operations of our website, the legal basis of which is our legitimate commercial interests.
The Java programming language is regularly used to integrate content. Therefore, you can object to data processing by disabling Java operations in your browser. Please note that this may restrict the use of our website.
To display maps, we use "Google Maps", which is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter referred to as "Google". Google is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection legislation: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .
For the display of videos, we use "Youtube", supplied by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States, hereinafter referred to as "YouTube". YouTube is a subsidiary of Google and is therefore included in its Privacy Shield certification.
14. Withdrawal of consent
You have the right to withdraw your consent to data processing in accordance with Article 7 (3) of the GDPR. The withdrawal of consent does not affect the legality of the processing carried out until you have declared your withdrawal.
15. Your rights
As a person affected by the processing of your data, you are able to exercise your rights. In particular, you have the following rights:
In accordance with article 15 GDPR and the data protection act n ° 78-17 of January 6, 1978, you have the right to request information to know if, and to what extent, we process personal data concerning you.
You have the right to have us correct your data in accordance with article 16 of the GDPR. You have the right to have us delete your personal data in accordance with article 17 of the GDPR and data protection law n ° 78-17 of January 6, 1978.
You have the right to have the processing of your personal data restricted in accordance with article 18 of the GDPR.
You have the right, in accordance with article 20 of the GDPR, to receive personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format and to transmit this data to another controller.
16. Right to object
In accordance with article 21 of the GDPR, you have the right to object to any processing carried out using Art. 6 paragraph 1 sentence 1 letter e and letter f of the GDPR as their legal basis. If personal data has been used by us for direct mail purposes, you can also object to this processing in accordance with Article 3 (2) and (3) of the GDPR.
17. Complaints to government authorities
If you believe that the processing of your personal data constitutes a violation of the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with article 77 of the GDPR.
Updated: March 2020