Privacy policy

Terms beginning with a capital letter have the same meaning as given to them in the
General Terms of Use
.

The protection of your personal data is important to us. The purpose of this Privacy Policy is to define the rules applicable to the collection and processing of your personal information (hereinafter "Personal Data") via our Platform.

Personal Data is defined as any information relating to a natural person who can be identified, directly or indirectly, such as a natural person's surname, first names, email and postal addresses, image in a photograph or video, IP address, etc.

Our Privacy Policy details the Personal Data we collect and process via our Platform, the reasons why we process your Personal Data, how we use it and the features we offer to enable you to access and update your Personal Data.

By checking the box "I accept the Platform's T&Cs and Privacy Policy", you confirm that you have read and accepted these terms and conditions without restriction or reservation. If you disagree with any or all of the provisions contained in the Privacy Policy, you are free not to, or to no longer, use our Services.

‍

I. CATEGORIES OF PERSONAL DATA PROCESSED

1. Personal Data you provide to the Company

We collect Personal Data from Users wishing to become a member of Dift, to create an account, vote for one or more Projects, track the completion of one or more Projects and other actions listed among our Services.

Accessing and using the Platform implies the collection and processing of your Personal Data. Depending on the situation and the information you give to the platform, it can be : your first name, your last name, your email address, your password.

The above information is collected in several ways. As described in the GCU, the User may either register directly on the Platform or be invited to do so by a Sponsor.

2. Cookies

A "cookie" is a text file that may be stored in a dedicated space on the hard disk of your terminal (computer, tablet or smartphone) when you consult an online service. A cookie enables its issuer to identify the terminal in which it is stored, for the duration of the cookie's validity or storage. When you visit the Platform, information relating to your Internet browsing may be recorded in "cookie" files installed on your terminal, subject to the choices you have made concerning cookies, which you may modify at any time. These cookies enable personalized browsing by the User and are also used for analytical purposes (audience measurement).

You will be informed of the existence of cookies and their purpose(s) as soon as you log on to the Platform, by the presence of an information banner placed at the bottom or top of the home page.

The deposit and reading of cookies on your terminal requires your prior consent, by clicking on "I accept". However, you can configure your browser to refuse cookies or customize cookie settings by clicking on the "Learn more" link. If you accept the use of cookies, your agreement will be valid for 13 months. It will then be necessary to renew your agreement when this period expires.

If you refuse to accept cookies, or if you delete the cookies stored on your computer, we inform you that you will no longer be able to benefit from a certain number of functionalities which are nevertheless necessary for browsing certain areas of our Platform. Where applicable, we decline all responsibility for the consequences linked to the degraded operation of our services resulting from the impossibility for us to record or consult the cookies necessary for their operation and which you would have refused or deleted.

Finally, it is important to distinguish between the cookies we issue on our Platform and those issued by third parties. In this regard, please be aware that cookies may be placed from time to time on certain pages of the Platform by third parties (advertisers or others).

‍

II. PURPOSE OF PROCESSING

The Company is the data controller.

Users' Personal Data is collected and processed for defined and precise purposes, such as:

The provision and management of our Services;
The creation and use of your Personal Area;
Managing the processing of your votes for Projects;
Sending e-mails from Dift on the follow-up of Projects for which you have voted.
Communication with our Users in order to launch new Campaigns;

For the above purposes the legal basis is contractual performance within the meaning of Article 6.1.b of the RGPD :

Communication with our Users in order to improve the quality of our Services;
The resolution of any problems or disputes in connection with the use of our Services.

For the above purposes the legal basis is legitimate interest within the meaning of Article 6.1.f of the RGPD:

To receive emails from partners appearing on Dift (Patrons and Sponsors).

For this purpose, the legal basis is consent, within the meaning of Article 6.1.a of the RGPD, and will be requested from the User by ticking a specific box "I wish to receive information from Dift partners (Patrons and Sponsors)".

Any use of Personal Data for purposes other than those set out above in the Privacy Policy will require your express prior consent.

We undertake to keep your Personal Data only for as long as is strictly necessary for the processing(s) declared according to the aforementioned purposes, and in any event within the limits imposed by law.

In any event, we undertake to delete your Personal Data from our databases at the end of these various periods. However, we may retain certain information for a period after the closure of your personal account in order to meet our legal, accounting and tax obligations.

‍

Your information and Personal Data may, where applicable, be transmitted to third-party subcontractors involved in the provision of our services (technical and hosting service providers, customer follow-up and satisfaction surveys, security incident management, etc.). To date, our service providers are : Heroku, Amazon, Brevo, Forest Admin, Sentry.

The Company undertakes to communicate your information and Personal Data only to Patrons and Sponsors with your prior authorization, as well as to authorized and trusted service providers, who process them on our behalf, according to our instructions and in compliance with this Privacy Policy and with all other appropriate security and confidentiality measures.

In the event of a merger, acquisition, bankruptcy, dissolution or liquidation of the Company, your Personal Data will be processed by the purchaser or transferee in accordance with this Privacy Policy.

In addition, your information and Personal Data may be disclosed to a third party if the Company is compelled to do so by law, regulation, or court order, or if such disclosure is made necessary for the purposes of an investigation, injunction or legal proceeding, domestically or abroad.

‍

IV. SECURITY

We implement all necessary security measures to protect your Personal Data from unauthorized access and disclosure, modification, damage or destruction of the data we hold.

To this end, the Company and its technical and hosting service providers have deployed appropriate measures to ensure the integrity, confidentiality and security of your Personal Data (in particular through compliance with ISO standards and the requirements determined by regulations governing the protection of personal data).

Finally, we inform you that we have chosen to host your Personal Data on servers located in the European Union.

‍

V. USERS' RIGHTS

You have a right of access (e.g.: to check the data we hold about you), a right of rectification (to update or correct your data), a right of deletion (e.g.: closing your personal account) and a right to transfer (right to portability) your Personal Data, as well as a right to object to the collection and processing of all or part of it for commercial prospecting purposes, including profiling insofar as it is linked to such prospecting; and a right to lodge a complaint with the competent data protection authority.

In addition, it should be noted that these rights offer you the possibility of modifying your notification preferences at any time, by accepting or refusing that your Personal Data be used within the framework of our marketing or promotional actions.

You can exercise your rights by contacting us by email at:

[email protected]

If you exercise these rights, we will endeavour to respond to your requests as quickly as possible.