The smart MaaS toolbox


Privacy policy

Last update : December 9, 2020

Lyko (hereafter “we” or “us”), acting as data controller within the meaning of the European regulation n°2016-679 of April 27, 2016 and of the law “Informatique et Libertés” of January 6, 1978 as amended (hereafter, together, the “Regulation”), attaches great importance to the protection of personal data and to the respect of your privacy.

The purpose of this policy (hereinafter the “Policy”) is to inform you about how we collect, use and share the personal data you provide to us via our website, lyko.tech (hereinafter the “Site”), or our platform, dahboard.lyko.tech (hereinafter the “Platform”).

This Policy is intended to apply solely to the processing of information (hereinafter the “Personal Data”) that may identify or make identifiable the users of the Site or Platform (hereinafter the “Users”), directly or indirectly.

Lyko undertakes to limit the processing of Personal Data to the cases listed in the present Policy, and to update it in order to guarantee a high level of protection of Personal Data in compliance with the applicable Regulations.

1. What data do we collect?

By using our Site or Platform, you may be led to transmit Personal Data to us, directly or indirectly (i.e.: via third party sources), or by the use you make of the Site and Platform. The Personal Data collected depends on your use of the Site or the Platform, and may therefore include :

  • Identifying data, such as first and last name, e-mail or postal address, telephone number;
  • Data related to registration on the Platform, such as e-mail address and password;
  • Transaction data, such as the amount of the subscription and banking information (credit card or bank details);
  • Data related to the billing address, such as the name of the company or individual, the SIRET number, postal address, professional e-mail, sector of activity;
  • Data relating to communication with our customer service department, such as comments, requests, questions and information sent to our customer service department via chat or by e-mail at help@lyko.tech or hello@lyko.tech;
  • Technical data, such as IP address, browser type and version, operating system used, browser language;
  • Connection data, such as the functions used, the pages visited, the configurations selected, the timestamp of the visits and the search terms;
  • Location data, such as the User’s geographical location.

Some of this Personal Data is collected via cookies on our Site or Platform. To learn more about how we manage these cookies, you may consult our Cookie Policy at any time.

At the time of collection of your Personal Data, you may be informed that some of your Personal Data must imperatively be filled in in order to achieve the expected result. If you do not provide this mandatory information, the execution of the request may not be possible.

2. Why do we collect your Personal Data?

We collect and process the Personal Data of our Users only for the following purposes:

  • To manage your access to and use of our Platform;
  • To process your subscription request to our Platform;
  • To respond to your requests for information and/or your comments;
  • To provide you with technical support and maintenance to ensure the proper functioning and security of our Site and Platform;
  • To improve the functionalities and quality of your navigation on our Site and Platform, by carrying out tests, research, analysis, studies and surveys;
  • To manage applications for recruitment purposes via our Site;
  • To offer you relevant content, adapted and personalized to your interests and your geographical location;
  • In order to carry out commercial prospecting operations;
  • To receive our Newsletter;
  • To promote our Platform;
  • To send you our modifications, updates or any other news related to our Site or our Platform;
  • To invite you to events that we organize, alone or in partnership;
  • To invite you to participate in our customer satisfaction surveys, advertising contests and various promotions;
  • To determine the impact of our promotional activities and to evaluate our commercial performance by identifying trends in the use of our Site and Platform;
  • To comply with the legal obligations to which we are subject;
    In order to anticipate and resolve possible disputes;
  • To execute and enforce all of our contracts.

3. On what legal basis do we collect your Personal Data?

We collect and process your Personal Data in compliance with the Regulations and only within the framework of the following legal bases.

  • When it is necessary for the execution of a contract concluded with you;
  • When it is necessary to comply with our legal obligations;
  • When you have expressly consented to the processing of your Personal Data;
  • When necessary to protect our legitimate interests (for example, to detect, investigate and prevent technical, fraud and security problems, to protect our rights, property or the safety of our Users and employees, or for business development purposes).

We inform you that when the processing of your Personal Data is based on your consent, you have in particular the possibility to withdraw it at any time.

4. Who are the recipients of your Personal Data?

The Personal Data of our Users is strictly confidential and intended exclusively for Lyko.

Except for legal, accounting or judicial obligations, we will not disclose, rent, transfer or transmit in any way whatsoever your Personal Data to third parties other than :

  • The host of our Site and our Platform (located in France), for the purpose of carrying out maintenance and database hosting services;
  • Our service providers, distributors, representatives, subcontractors and partners, for the purposes of accessing requested services, executing a transaction or responding to your requests for advice and information.

Lyko does not transfer or rent personal data to third parties for marketing purposes without the express consent of the Users.

Apart from these hypotheses, the disclosure of personal data to third parties can only take place in the following cases:

  • with their authorization ;
  • on request of the legally competent authorities, on judicial requisition, or in the context of a legal dispute.

5. How long do we keep your Personal Data?

In order to meet its legal obligations or to have the necessary elements to enforce its rights, Lyko may archive the data under the conditions provided for in this Policy, in accordance with the Regulations and applicable laws. After this period, your Personal Data will be deleted.

In order to ensure total transparency in our relationship with our Users, we provide you with the following table summarizing the retention periods implemented at Lyko.

Purpose of the treatment

Legal Basis

Validation time

Management of Platform user accounts and subscriptions


Duration of the contractual relationship

Commercial prospecting during the duration of the contract 

Contract / Consent

For the duration of the contractual relationship, + 5 years

In this case, the User may exercise his rights by sending an email to privacy@lyko.tech.

Commercial prospecting after termination of the contract 

legitimate interest / Consent

For the duration of 3 years from the last contact (example: a click on a hyperlink in an e-mail)

In this case, the User may exercise his rights by sending an email to privacy@lyko.tech.

Data necessary for the management of the site or Platform (identity of visitors, connection data)


Set at 1 year by article 3 of the decree 2011-19 of February 25, 2011

Management of the invoicing of subscriptions to the Platform


Invoicing data must be archived for 10 years according to article L.123-22 of the French Commercial Code.

Preservation of the data necessary for the prevention of possible litigation


According to the duration of the legal prescription. Namely: 5 years in civil and commercial law (article 2224 of the civil code and article L.110-4 of the commercial code), 2 years in consumer law (article L.218-2 of the consumer code)

Conducting satisfaction surveys and customer studies

Legitimate interest

3 years from the last customer contact or 2 years from the closing of the user account by the customer, if applicable.

Management of user requests for information and comments

Legitimate interest

3 years

Sending by e-mail or sms of the information relative to the updates and the novelties

Legitimate interest / Contract 

3 years for prospects or the duration of the contractual relationship for sending to customers

Retention of prospect data for the promotion of the Platform

Consent/ Legitimate interest

Until withdrawal of consent or 3 years from the last contact of the prospect

Preservation of the customer file


Duration of the contractual relationship and 5 years after the end of the relationship

Retention of contracts and supplier files


Duration of the contractual relationship and 5 years after the end of the relationship

Sending invitations to events


Until withdrawal of consent

Offers personalized content via tracking and tracing of customer navigation


Until withdrawal of consent

Management of applications retained or not

Legitimate interest

2 years

6. Where do we transfer your Personal Data?

Lyko mainly chooses providers hosting their data within the European Union. Nevertheless, when it is necessary, we may be led to transmit your Personal Data to service providers operating outside the European Union.

If these service providers operate in a country that is not considered as offering an adequate protection by the European Commission, we notably implement the Standard Contractual Clauses approved by the said Commission, and we also include a Data Processing Agreement (“DPA”) in the framework of our contractual relations with these service providers.

7. How do we protect your Personal Information?

Lyko undertakes to take all necessary and adequate measures, both on a technical and organizational level, in order to guarantee the security and integrity of the Personal Data of its Users. These measures guarantee the protection of these data against any unauthorized access, modification, alteration, disclosure, loss or destruction.

If we use a service provider acting on our behalf as a subcontractor, we ensure that the latter complies with its security obligations prior to any communication of your Personal Data.

8 What rights do you have over your Personal Data?

Lyko guarantees the effective exercise of all the rights granted to you by the Regulation. You can thus free of charge :

  • Have access to your Personal Data ;
  • Rectify inaccurate Personal Data concerning you ;
  • Obtain the deletion of your Personal Data;
  • Restrict our processing of your Personal Data;
  • Withdraw your consent to the processing of your Personal Data;
  • Object to the processing of your Personal Data;
  • Obtain a copy of your Personal Data (right to data portability).

To exercise these rights, you can contact us at the following address: privacy@lyko.techWe may require proof of identity to protect your privacy and security.-

9. Additional information

Changes to this Policy

We may amend this Policy to incorporate regulatory, legal, editorial or technical changes that increase the level of protection of your Personal Data.

In case of minor changes, we will change the “last update” date by indicating the date on which the changes were made.

On the other hand, in the event of a substantial modification of this Policy, we will inform you directly, by e-mail, sms or directly from the dashboard, of the changes made.

You should also check this page periodically for any changes or updates to our Policy.


If you have any questions about this Policy, you may contact us by sending an e-mail to the following address: privacy@lyko.tech.

You may also consult our Cookie Policy at any time if you wish to know more about how we manage your Personal Data collected via cookies.