Privacy Policy for Cyke Applications by Cargonautes

Document last updated on July 15, 2024

Cargonautes ("Cargonautes", "we", "our" and "us") and our partners respect your privacy.

Please read this privacy policy carefully to understand how your personal data is collected, processed, and stored when using the Cyke mobile application.

All personal data collected through the Cyke mobile app is processed under the responsibility of Cargonautes, a SCOPARL with a share capital of €1,000, registered under SIREN number 817 439 201 with the Paris Trade and Companies Register, and whose headquarters is located at 189 rue d'Aubervilliers, Allée D - Building 22-24, Paris 75018.

For the purposes of applicable data protection laws, Cargonautes is the data controller.

How Cargonautes Uses Your Personal Data

Courier

Cargonautes may use your personal data for the following purposes:

1. Create your courier account on the Cyke web and mobile applications.
2. Provide your company with the information necessary for the proper execution of deliveries (e.g., your location while on duty).
3. Send you our newsletter following your subscription.
4. Provide delivery recipients with the necessary information to track a delivery in progress.
5. Contact you if we need to share important information regarding the use of the Cyke website or mobile applications.

The processing operations listed above are necessary for the performance of the service provided by Cargonautes via the Cyke software in order to carry out deliveries.

Geolocation Data

In particular, the Cyke Messenger mobile app may collect your geolocation data for the following purposes:

1. Optimize the assignment of deliveries based on the current position of couriers.
2. Allow recipients to track the progress of their delivery in real time.
3. Ensure the safety of couriers by allowing us to verify their location if needed.
4. Provide performance reports based on routes taken.

Geolocation data is collected only when the Cyke Messenger app is open and the courier is on duty. Data is not collected outside working hours or when the app is closed.

Client

Cargonautes may use your personal data for the following purposes:

1. Create your user account on the web application.
2. Send you notification emails related to your deliveries (e.g., in case of a failed delivery).
3. Send you our newsletter following your subscription.
4. Contact you if we need to share important information regarding the use of the Cyke application.

These processing operations are necessary for the performance of the service provided by Cargonautes via the Cyke software.

Recipient

Cargonautes may use your personal data for the following purposes:

1. Receive and store delivery orders for which you are the sender or recipient.
2. Send you notifications by email or SMS to provide delivery updates.
3. Send you our newsletter following your subscription.
4. Contact you if we need to share important information regarding the use of the Cyke application.

These processing operations are necessary for the performance of the service provided by Cargonautes via the Cyke software.

How Cargonautes Shares Your Personal Data

Within Cargonautes, and depending on the purpose of processing, your personal data is collected, processed, and stored by authorized personnel only, including the IT department.

We do not share your personal data with other companies, organizations, or individuals unless one of the following conditions applies:

1. Sharing with prior consent: After obtaining your consent, Cargonautes will share the information you have authorized with the specified third parties.
2. Sharing with our service providers: Cargonautes may disclose your information to companies that provide services for or on our behalf (e.g., hosting, email and SMS delivery). These providers may only use your information to provide services to Cargonautes.
3. Legal obligation: Cargonautes may share your data as required by law or regulation, to resolve legal disputes, or at the request of judicial or administrative authorities.

Cargonautes ensures all data sharing complies with legal standards, using data processing agreements that require third parties to comply with this privacy policy and apply appropriate security and confidentiality measures.

How Cargonautes Protects Your Personal Data

Cargonautes places great importance on the security of your personal data and has implemented industry-standard measures to protect it from unauthorized access, disclosure, misuse, alteration, damage, or loss.

We have also taken the necessary precautions to ensure our hosting provider safeguards the security and confidentiality of your data, preventing it from being altered, damaged, or accessed by unauthorized persons.

Cargonautes also implements the following organizational measures:

1. We ensure that the personal data collected is minimal and relevant to the processing purpose.
2. We retain your personal data only for as long as necessary, unless otherwise required by law (e.g., keeping order-related data for up to 10 years for accounting purposes).
3. We implement access control mechanisms to ensure only authorized personnel can access your data.

In the event of a personal data breach, Cargonautes will comply with legal requirements to notify the relevant supervisory authority and/or the affected individuals.

Where Cargonautes Hosts and Transfers Your Personal Data

Your personal data is hosted by our provider in Ireland and France.

Some third parties we share data with are located outside the European Union, including the United States.

In some cases, service providers may access your data to deliver a specific service and may be based in non-EU countries. Where such transfers occur, we ensure appropriate safeguards are in place, such as an adequacy decision by the European Commission or standard contractual clauses.

For any inquiries regarding recipients and data transfers outside the EU, please contact us using the details in the “How to Contact Us” section below.

How You Can Manage Your Personal Data Rights

You have the right to access, rectify, delete, restrict, or object to the processing of your personal data, define instructions for your data after death, and the right to data portability.

You can contact us anytime using the details in the “How to Contact Us” section to exercise these rights. Be sure to specify which right you wish to exercise and provide enough information for us to process your request.

• Right of access: You can ask whether we process your personal data and, if so, obtain details about the processing.
• Right to rectification: You can request correction of inaccurate data and completion of incomplete data.
• Right to erasure: You can request deletion of your data, especially when:
  1. It's no longer necessary for the original purpose.
  2. You withdraw consent and there’s no other legal basis for processing.
  3. You object to processing and want the data deleted.
  4. The data was processed unlawfully.
  5. Deletion is required by law.
• Right to restriction: You can request restricted processing if:
  1. You contest the data’s accuracy.
  2. You prefer restriction over deletion of unlawfully processed data.
  3. We no longer need the data but you require it for legal claims.
  4. You objected to the processing, pending our review of legitimate grounds.

Restricted processing means only storing your data. No other operations will be performed on it.

• Right to object: You can object to processing based on Cargonautes’ legitimate interest, unless compelling legitimate grounds override your request.
• Right to define post-mortem instructions: You can specify what should happen to your data after your death.
• Right to data portability: You can request your data in a structured, machine-readable format and transmit it to another controller where feasible.

If we process your data based on consent, you may withdraw consent at any time by contacting us. This will not affect any processing already carried out.

Updates to This Privacy Policy

Cargonautes reserves the right to modify or update this privacy policy at any time, especially if data protection laws or our data processing practices change.

Any significant changes will be notified to you via email (if provided) and published on our website. We encourage you to review this policy regularly to stay informed of how we protect your personal data.

How to Contact Us

If you have any questions, comments, or suggestions, please contact us at

cyke@cargonautes.fr

Or by postal mail at

Cargonautes
189 rue d'Aubervilliers
Allée D - Building 24
Paris 75018

If you are not satisfied with Cargonautes' response to a data rights request or wish to report a violation of data protection regulations, you have the right to lodge a complaint with the CNIL (CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07) or with the data protection authority in your country of residence or employment.