The smart MaaS toolbox
Last update : December 9, 2020
Lyko (hereafter “we” or “us”), acting as data controller within the meaning of the European regulation n°2016-679 of April 27, 2016 and of the law “Informatique et Libertés” of January 6, 1978 as amended (hereafter, together, the “Regulation”), attaches great importance to the protection of personal data and to the respect of your privacy.
The purpose of this policy (hereinafter the “Policy”) is to inform you about how we collect, use and share the personal data you provide to us via our website, lyko.tech (hereinafter the “Site”), or our platform, dahboard.lyko.tech (hereinafter the “Platform”).
This Policy is intended to apply solely to the processing of information (hereinafter the “Personal Data”) that may identify or make identifiable the users of the Site or Platform (hereinafter the “Users”), directly or indirectly.
Lyko undertakes to limit the processing of Personal Data to the cases listed in the present Policy, and to update it in order to guarantee a high level of protection of Personal Data in compliance with the applicable Regulations.
By using our Site or Platform, you may be led to transmit Personal Data to us, directly or indirectly (i.e.: via third party sources), or by the use you make of the Site and Platform. The Personal Data collected depends on your use of the Site or the Platform, and may therefore include :
Some of this Personal Data is collected via cookies on our Site or Platform. To learn more about how we manage these cookies, you may consult our Cookie Policy at any time.
At the time of collection of your Personal Data, you may be informed that some of your Personal Data must imperatively be filled in in order to achieve the expected result. If you do not provide this mandatory information, the execution of the request may not be possible.
We collect and process the Personal Data of our Users only for the following purposes:
We collect and process your Personal Data in compliance with the Regulations and only within the framework of the following legal bases.
We inform you that when the processing of your Personal Data is based on your consent, you have in particular the possibility to withdraw it at any time.
The Personal Data of our Users is strictly confidential and intended exclusively for Lyko.
Except for legal, accounting or judicial obligations, we will not disclose, rent, transfer or transmit in any way whatsoever your Personal Data to third parties other than :
Lyko does not transfer or rent personal data to third parties for marketing purposes without the express consent of the Users.
Apart from these hypotheses, the disclosure of personal data to third parties can only take place in the following cases:
In order to meet its legal obligations or to have the necessary elements to enforce its rights, Lyko may archive the data under the conditions provided for in this Policy, in accordance with the Regulations and applicable laws. After this period, your Personal Data will be deleted.
In order to ensure total transparency in our relationship with our Users, we provide you with the following table summarizing the retention periods implemented at Lyko.
Purpose of the treatment | Legal Basis | Validation time |
Management of Platform user accounts and subscriptions | Contract | Duration of the contractual relationship |
Commercial prospecting during the duration of the contract | Contract / Consent | For the duration of the contractual relationship, + 5 years In this case, the User may exercise his rights by sending an email to privacy@lyko.tech. |
Commercial prospecting after termination of the contract | legitimate interest / Consent | For the duration of 3 years from the last contact (example: a click on a hyperlink in an e-mail) In this case, the User may exercise his rights by sending an email to privacy@lyko.tech. |
Data necessary for the management of the site or Platform (identity of visitors, connection data) | Law | Set at 1 year by article 3 of the decree 2011-19 of February 25, 2011 |
Management of the invoicing of subscriptions to the Platform | Law | Invoicing data must be archived for 10 years according to article L.123-22 of the French Commercial Code. |
Preservation of the data necessary for the prevention of possible litigation | Law | According to the duration of the legal prescription. Namely: 5 years in civil and commercial law (article 2224 of the civil code and article L.110-4 of the commercial code), 2 years in consumer law (article L.218-2 of the consumer code) |
Conducting satisfaction surveys and customer studies | Legitimate interest | 3 years from the last customer contact or 2 years from the closing of the user account by the customer, if applicable. |
Management of user requests for information and comments | Legitimate interest | 3 years |
Sending by e-mail or sms of the information relative to the updates and the novelties | Legitimate interest / Contract | 3 years for prospects or the duration of the contractual relationship for sending to customers |
Retention of prospect data for the promotion of the Platform | Consent/ Legitimate interest | Until withdrawal of consent or 3 years from the last contact of the prospect |
Preservation of the customer file | Contract | Duration of the contractual relationship and 5 years after the end of the relationship |
Retention of contracts and supplier files | Contract | Duration of the contractual relationship and 5 years after the end of the relationship |
Sending invitations to events | Consent | Until withdrawal of consent |
Offers personalized content via tracking and tracing of customer navigation | Consent | Until withdrawal of consent |
Management of applications retained or not | Legitimate interest | 2 years |
Lyko mainly chooses providers hosting their data within the European Union. Nevertheless, when it is necessary, we may be led to transmit your Personal Data to service providers operating outside the European Union.
If these service providers operate in a country that is not considered as offering an adequate protection by the European Commission, we notably implement the Standard Contractual Clauses approved by the said Commission, and we also include a Data Processing Agreement (“DPA”) in the framework of our contractual relations with these service providers.
Lyko undertakes to take all necessary and adequate measures, both on a technical and organizational level, in order to guarantee the security and integrity of the Personal Data of its Users. These measures guarantee the protection of these data against any unauthorized access, modification, alteration, disclosure, loss or destruction.
If we use a service provider acting on our behalf as a subcontractor, we ensure that the latter complies with its security obligations prior to any communication of your Personal Data.
Lyko guarantees the effective exercise of all the rights granted to you by the Regulation. You can thus free of charge :
To exercise these rights, you can contact us at the following address: privacy@lyko.tech. We may require proof of identity to protect your privacy and security.-
We may amend this Policy to incorporate regulatory, legal, editorial or technical changes that increase the level of protection of your Personal Data.
In case of minor changes, we will change the “last update” date by indicating the date on which the changes were made.
On the other hand, in the event of a substantial modification of this Policy, we will inform you directly, by e-mail, sms or directly from the dashboard, of the changes made.
You should also check this page periodically for any changes or updates to our Policy.
If you have any questions about this Policy, you may contact us by sending an e-mail to the following address: privacy@lyko.tech.
You may also consult our Cookie Policy at any time if you wish to know more about how we manage your Personal Data collected via cookies.