Privacy Policy

Introduction

RACINE.AI SAS, headquartered at 51 rue Geoffroy Saint Hilaire, Paris, France, is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the amended French Data Protection Act. This policy details our practices regarding the collection, use, and protection of your personal data.

  1. Data Collected and Legal Bases

We collect and process several types of personal data, each based on a specific legal basis:

 • Identification data:

  • Type: name, surname, email 
  • Legal basis: consent or contract execution 
  • Purpose: management of your user account

• Payment data:

  • Legal basis: contract execution 
  • Purpose: processing your transactions 

• Connection data:

  • Legal basis: legitimate interest
  • Purpose: security and service improvement 

• Essential cookies:

  • Legal basis: legitimate interest
  • Purpose: technical operation of the website 

• Analytical cookies:

  • Legal basis: prior consent 
  • Purpose: service usage analysis 

• Communication data:

  • Legal basis: consent 
  • Purpose: customer support and communications
  1. Data Usage

VYour data is used for:

  • Providing and improving our services
  • Personalizing your user experience 
  • Processing your transactions 
  • Communication regarding our services
  • Fraud prevention 
  • Compliance with legal obligations 

We do not make any fully automated decisions concerning you.

  1. Protection and Security

Our security measures include:

  • Encryption of sensitive data
  • Use of SSL/TLS protocols 
  • Restricted data access 
  • Regular security audits 
  • Ongoing staff training
  1. Data Recipients

Your data may be shared with:

  • Our technical processors (hosting, maintenance) 
  • Our payment providers 
  • Competent authorities upon judicial request 
  • Our commercial partners (with your consent)
  1. International Transfers

For transfers outside the EU, we guarantee:

  • Compliance with adequacy decisions 
  • Application of standard contractual clauses 
  • Obtaining your consent when necessary
  1. Retention Period
  • Account data: until deletion 
  • Transaction data: 10 years 
  • Connection data: 1 year 
  • Cookies: 13 months maximum
  1. Your Rights

You have the following rights:

  • Access to your data 
  • Rectification of inaccurate data 
  • Erasure (right to be forgotten) 
  • Data portability 
  • Objection to processing 
  • Restriction of processing
  • Withdrawal of consent 
  • Complaint to CNIL

 Response time: 1 month maximum

  1. Data Protection Officer
  1. Data Breach

Our commitments

  • Notification to CNIL within 72 hours 
  • Prompt information to affected individuals
  • Implementation of corrective measures
  1. Policy Updates

We may modify this policy at any time. Changes take effect upon publication.

  1. Contact
  1. Autorité de contrôle
  • Commission Nationale de l’Informatique et des Libertés (CNIL)
  • www.cnil.fr 
  • 3 Place de Fontenoy 
  • TSA 80715 75334 PARIS CEDEX 07 FRANCE

Last updated: 19/02/2025

This policy is available in PDF format upon request.