Privacy policy for the Shopopop website, application and platform

Privacy policy for the Shopopop website, application and platform.

Find out everything you need to know about the Shopopop website, application and platform.

In accordance with the provisions of Articles 6-III and 19 of French Law no. 2004-575 of 21 June 2004 on confidence in the digital economy, known as the LCEN, users of and visitors to the www.shopopop.com website are hereby informed of this Privacy Policy.

The www.shopopop.com website is published by AGILINNOV', a simplified joint-stock company with share capital of 176,021.10 euros, whose registered office is located at 1 ter Mail Pablo Picasso, 44000, Nantes, registered with the Trade and Companies Register under number 813 952 082, intra-community VAT number FR83813952082, telephone number: +33 (0)2 49 88 13 13, email address: [email protected]

Legal representative: HREF SARL 

The Shopopop website can be accessed at https://www.shopopop.com (hereinafter referred to as "the Website").

This Privacy Policy also applies to the application that can be downloaded on Android or Apple devices (hereinafter referred to as "the Application").

Access to and use of the Website and the Application are subject to the applicable laws and/or regulations.

Using and accessing this Website imply full and unreserved acceptance of all the provisions of this Privacy Policy on the part of the Internet user.


Data Controller

The Data Controller for the processing carried out by Shopopop is AGILINNOV'. 

Contact details: 

Name: AGILINNOV' 

Address: 1 ter Mail Pablo Picasso, 44000, Nantes

Telephone number: +33 (0)2 49 88 13 13

Email address: [email protected] 

SIREN: 813952082


DPO contact details 

If you have any questions about the protection of personal data, you can contact our Data Protection Officer (DPO):

Name: Mon Expert RGPD

Address: 82 Bd Haussmann, 75008, PARIS

Telephone number: +33 (0)1 89 31 10 92

Email address: conformité@monexpertrgpd.com 


Definitions

The terms used below are defined as follows:

"USER" Refers to any Internet user who browses the Website and/or the Application, including all Members

"MEMBER" Refers to any natural person of legal age who is registered on the Application, including all Deliverers and Recipients

"DELIVERER" Refers to a Member who undertakes to transport a Recipient's Order

"RECIPIENT" Refers to a Member who requests delivery of an order via the Shopopop service


Data collection and the Data Protection Act

AGILINNOV' respects the privacy rights of its Users and recognises the importance of protecting their personal data. It is committed to complying with the new regulations arising from the European General Data Protection Regulation.

The Website does not require Users to provide any personal data simply to browse the Website.

AGILINNOV' collects the personal data provided by Members, including:

IDENTIFYING INFORMATION Last name, first name(s), postal address, telephone number, email address, username, password, etc.

BANKING INFORMATION Bank details, SEPA mandates, etc.

USAGE INFORMATION Services requested, visit date and time, names of files consulted, Internet browser and operating system used, IP address of the device, volume of data transferred, mobile platform, technical identifier(s), error reports and performance data, geographical information for location-based services, where applicable, etc.

The Website may use "cookies" to process statistics and traffic information, facilitate browsing and improve its services for Users' convenience: security cookies, session cookies, tracking cookies, etc.

Users are free to accept or reject the Website's cookies by modifying the settings of their Internet browser.

The User may disable cookies or set their browser to alert them when cookies are about to be stored. However, if cookies are disabled, the User may not be able to use all of the Website's features.


Purposes

The main purposes of collecting the above types of data are:

  • To enable the performance of the services offered by the Website
  • To put Members in touch with one another
  • To compile statistics and improve the use of our services
  • To identify usage trends
  • To promote new services, build loyalty and engage in prospecting
  • To comply with applicable laws and legal obligations
  • To guarantee network security and prevent fraud


Legal bases 

The data is collected on the basis of your consent, Shopopop's legitimate interests, and compliance with our legal obligations.


Mandatory or optional nature of data collection and consequences of failure to provide data 

The provision of specific personal data is mandatory in order to use certain services. When data is mandatory, the field is marked with an asterisk. 

The data required to conclude a contract with you or provide a service you have requested (e.g. email address for contact purposes) is mandatory. If this data is not provided, we will not be able to conclude the contract or provide the service requested. 

Optional data is data that you may choose to provide in order to improve your user experience (e.g. cookies). Failure to provide this data will not affect the conclusion of a contract or the provision of a service, but may limit the personalisation of our offer.


Recipients of personal data

The data thus collected and processed in a fair and lawful manner for specific, explicit and legitimate purposes, without being further processed in a manner incompatible with these purposes, is strictly intended for AGILINNOV'.

The recipients of personal data are the authorised staff of the departments responsible for handling customer relations and prospecting, the marketing and sales departments, the administrative departments, the logistics and IT departments and their line managers, as well as any subcontractors and partners, in compliance with French regulations.

The last name, first name, address and telephone number of the Recipient Member can be accessed by the Deliverer Member to allow the latter to contact the Recipient Member in order to carry out the delivery.

In return, the last name, first name and telephone number of the Deliverer Member can be accessed by the Recipient Member to allow the latter to contact the Deliverer Member with regard to the delivery.

AGILINNOV' also reserves the right to disclose personal data as it deems necessary for the following purposes: 

  • to comply with any applicable law, regulation, legal procedure or other legal obligation
  • to detect, investigate and prevent security issues, fraud or technical problems
  • to protect AGILINNOV's rights, property or security
  • to carry out a general transaction, such as a transfer of assets or an acquisition by way of a merger with another company

Personal data processed by AGILINNOV' in its capacity as data controller may only be processed by a subcontractor or contractual partner of AGILINNOV' on its instructions.

In this respect, AGILINNOV' must ensure that any subcontractors and partners provide the necessary guarantees for the protection of User data.


Data transfers

Personal data may be stored and processed in any country where AGILINNOV', its suppliers, partners or subcontractors manage servers.

In the event that data could be transferred outside the European Economic Area, AGILINNOV' shall take all the necessary measures to ensure that the data benefits from appropriate guarantees (including the Privacy Shield or Standard Contractual Clauses approved by the European Commission).

In accordance with the law, AGILINNOV' is authorised to transfer data to the competent authorities in the event of criminal proceedings.


Retention period

Customer data is retained by AGILINNOV' for the necessary period to manage the commercial relationship. However, data required for proof of a right or contract may be archived for a longer period, in accordance with the provisions of the French Commercial Code and Consumer Code, i.e. 10 years.

Customer data is retained by AGILINNOV for commercial prospecting purposes for 3 years from the end of the commercial relationship.


Data security

AGILINNOV' implements organisational, technical, software and physical digital security measures to protect personal data against alteration, destruction and unauthorised access. However, it should be noted that the Internet is not a completely secure environment, and the Website cannot guarantee the security of the transmission or storage of information on the Internet.


Cookie management policy 

Cookies are used when you browse our Website. 

A cookie is a piece of information stored on your computer via a browser. Cookies enable the sender to send information back to the original website while the cookie is being stored or is valid.

Only the sender of a cookie can read or modify the information it contains.

We use cookies to analyse the number of visits to and use of the Website, to adapt the Website's features, and to carry out statistical analyses, in particular to measure the Website's audience.

Users' rights with regard to their data

Users are invited to update any data concerning them that is inaccurate, incomplete or obsolete.

Your data rights

Under data protection regulations, you have the right to access your personal data. Specifically, you have the following rights: 

Right of access 

You have the right to request information about the nature of the processing carried out, the origin or type of data collected, as well as copies of all the information we hold regarding you.

Right to rectification 

You have the right to request rectification of any information that you consider to be inaccurate. You also have the right to ask us to complete any information that you consider incomplete.

Right to erasure/right to be forgotten

You have the right to ask us to delete your personal data in certain specific situations. 

In cases where your data is processed on the basis of your consent or Shopopop's legitimate interests, you have the ability to obtain the early deletion of your data. To exercise this right, simply inform us of your wish to withdraw your consent or to exercise your right to object to the processing of your data.

If you do not exercise this right, your data will be automatically deleted at the end of the aforementioned retention period.

Right to restriction

This right grants you the ability to suspend the processing of your data after submitting a request for rectification, for example. If you have concerns about the lawfulness of any of our processing operations, this right allows you to ask our teams to stop processing your data without deleting it. Additionally, if you wish to take legal action to assert, exercise or defend your rights, this right also allows you to "freeze" your personal data.

Right to object

You have the right to object to the processing of your personal data in certain circumstances.

The right to object allows you to refuse to be included in a new or ongoing data processing operation. 

Users may object to any processing of their personal data and request that it be deleted, unless the company can demonstrate a legitimate and compelling reason for such processing or that such processing is necessary to establish, exercise or defend rights in court.

With regard to direct marketing communications that the user receives from Shopopop, the user may revoke the consent they gave to no longer receive such communications.

This right may be exercised at any time, and the user will be reminded of this right in the messages they receive from Shopopop.

Right to data portability 

This right gives you the opportunity to request access to your personal data, provided that this data is processed with your consent or as part of a contractual relationship. This data will be provided to you in a technically usable format, whether for your use or use by an entity other than Shopopop. 


How to exercise your rights 

To exercise your rights, Shopopop asks that you complete this form.


Complaints to the CNIL (French Data Protection Authority) 

If you feel, after contacting us, that your rights with regard to your data are not being respected, you may make a complaint to the CNIL.

Data that AGILINNOV' requires for the purpose for which it was collected, that is necessary to comply with a legal obligation and/or to establish, exercise or defend rights in court may not be deleted.