Privacy policy

PEAR Collections

This privacy policy aims to inform users of the PEAR Collections application (hereinafter the "Application") about how their personal data is collected, used, and protected, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable French law.

This English version is provided for convenience only. The French version is legally binding.

1. Data controller

The data controller for personal data is the publisher of the PEAR Collections application (hereinafter "PEAR").

For any questions related to personal data, the user may contact PEAR at the address indicated in the legal notice of the Application.

2. Personal data collected

2.1 Identification data

• Email address
• Username or pseudonym
• Identifier provided by third-party authentication services (Google, Discord)

2.2 Connection data

• Date and time of connection
• IP address
• Technical data relating to the browser or device

2.3 User-provided content

• Texts
• Images
• Metadata associated with collections

Warning: content published or stored by the user may contain personal data under their sole responsibility.

3. Collection methods

Data is collected:

• when registering for the Application;
• during authentication (standard or via a third-party service);
• when using collection management features;
• automatically via technical logs necessary for service operation and security.

4. Purposes of processing

Personal data is processed for the following purposes:

• creation and management of user accounts;
• authentication and access security;
• provision and proper functioning of the Application;
• management of content and visibility settings (public / private);
• prevention of abuse, fraud, and unlawful activities;
• compliance with legal and regulatory obligations.

5. Legal basis for processing

Processing is based on:

• performance of the contract (Terms of Use) between PEAR and the user;
• the user's consent, where required;
• PEAR's legitimate interest (security, abuse prevention);
• compliance with legal obligations.

6. Third-party authentication services

The Application allows login via third-party services (Google, Discord). In this context, PEAR only accesses information strictly necessary for authentication (including the identifier and email address).

This data is transmitted in accordance with the privacy policies of these third-party services, over which PEAR has no control.

7. Data recipients

Personal data is accessible:

• to authorized PEAR personnel;
• to technical service providers required for hosting and operation of the Application.

Data is neither sold nor transferred to third parties for commercial purposes.

8. Hosting and security

PEAR implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data.

However, PEAR cannot guarantee absolute security of data transmitted over the Internet.

9. Retention period

Personal data is retained:

• as long as the user account is active;
• then deleted or anonymized within a reasonable time after account deletion, unless otherwise required by law.

Technical logs are retained for a limited period, strictly necessary for security purposes.

10. User rights

In accordance with the GDPR, each user has the following rights:

• right of access to their data;
• right to rectification;
• right to erasure ("right to be forgotten");
• right to restriction of processing;
• right to object;
• right to data portability.

The user may exercise their rights by contacting PEAR. Proof of identity may be requested.

11. Public content

When the user chooses to make content public, they acknowledge that:

• such data becomes accessible to third parties;
• PEAR cannot guarantee the immediate removal of any copy or external indexing (search engines, caches).

The user remains responsible for the personal data they choose to make public.

12. Cookies and trackers

The Application may use cookies or trackers strictly necessary for its operation and security.

No advertising or tracking cookies for commercial purposes are used without the user's prior consent.

13. Changes to the privacy policy

PEAR reserves the right to modify this privacy policy at any time. Users will be informed of any substantial changes.

14. Complaint

In the event of a persistent disagreement regarding the processing of their personal data, the user may file a complaint with the competent supervisory authority (CNIL).