Privacy policy
1. Data controller and roles
For the processing it determines (account management, subscription billing, audience measurement), S.A.R.L. LES FANTASTIQUES (details in the Legal notice) acts as data controller.
For data processed on behalf of a client support organisation (its management of its members, spaces and content via the Platform), LES FANTASTIQUES acts as a processor within the meaning of article 28 of the GDPR; the organisation is then the data controller and the relationship is framed by a dedicated data processing agreement (DPA).
Contact for any question relating to data: contact@synintra.com. In the absence of a legal obligation to appoint a Data Protection Officer (DPO), this address is the single point of contact for any data protection request.
2. Data collected
Depending on the services used, the following are collected:
- Identity and account: title, first name, last name, email address, password (encrypted), optional photo.
- Professional profile: company, role, position sought, education, interests, city, country, time zone, language.
- Contact details: phone number, address.
- Usage data: bookings, event attendance, poll answers, messages, published content.
- Technical data: IP address, login identifiers, logs, device and browser type.
- Billing data (for subscribers): company name, billing details, payment history. Bank details are processed directly by Stripe; LES FANTASTIQUES does not keep the full details.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Creation and management of accounts, provision of the services | Performance of the contract (art. 6.1.b) |
| Billing and subscription management | Performance of the contract / legal obligation |
| Security, prevention of abuse and fraud | Legitimate interest (art. 6.1.f) |
| Audience measurement and service improvement | Legitimate interest or consent depending on the trackers |
| Service-related (transactional) communications | Performance of the contract |
| Marketing communications / newsletter | Consent (art. 6.1.a), withdrawable at any time |
| Networking within the Synintra Network (see art. 5) | Consent (art. 6.1.a) |
| Compliance with legal and accounting obligations | Legal obligation (art. 6.1.c) |
4. Recipients and subprocessors
Data is neither sold nor rented. It is accessible to authorised staff of LES FANTASTIQUES, to the User's support organisation, and to the following technical subprocessors:
| Subprocessor | Purpose | Location |
|---|---|---|
| Magic Online SA | Hosting | France (EU) |
| Stripe | Subscription payment | EU / United States |
| Brevo | Sending transactional and marketing emails | EU |
| Google (Maps / Places) | Address search and validation on some forms (subject to consent) | EU / United States |
Data may be transmitted to a third party in the event of a legal obligation, judicial request, or to assert a right.
5. Synintra Network (inter-organisation networking)
The Platform offers networking features enabling exchanges between different support organisations and their members (business matchmaking, opportunity sharing, cross-organisation events).
In this context, certain data about you (for example: name, organisation of attachment, role, presentation of your activity, content you choose to make visible) may be shared beyond your original organisation, with other organisations in the network and their members.
- Legal basis: your prior consent (art. 6.1.a of the GDPR). Your visibility in the Synintra Network is never automatic: it requires explicit activation on your part.
- Optional nature: participation in the network is optional and is not required to use the other features of the Platform.
- Withdrawal: you may withdraw your consent and leave the network at any time, from your account or by writing to contact@synintra.com. Withdrawal ends sharing for the future, without affecting exchanges already carried out.
- Responsibility: for network-related processing that extends beyond the scope of a single organisation, LES FANTASTIQUES acts as data controller (where applicable, as joint controller with the participating organisations within the meaning of article 26 of the GDPR).
- Purpose limitation: data collected for the day-to-day needs of your organisation (bookings, internal directory, etc.) is not reused for network matchmaking purposes without your consent.
6. Transfers outside the European Union
The use of certain subprocessors (Google for address search subject to consent, and Stripe in part) may result in a transfer of data to the United States. These transfers are framed by appropriate safeguards within the meaning of articles 44 et seq. of the GDPR, in particular the European Commission's standard contractual clauses, supplemented where applicable by the Data Privacy Framework (DPF) certification of the subprocessors concerned.
7. Retention periods
- Active account: for the entire duration of use of the service.
- After account closure: deletion or anonymisation within three (3) months, unless otherwise legally required.
- Billing data: 10 years (accounting and tax obligations).
- Technical / login logs: 12 months maximum.
- Prospects / marketing: 3 years from the last contact.
8. Security
LES FANTASTIQUES implements appropriate technical and organisational measures (password encryption, access control, secure hosting in France) to protect data against loss, unauthorised access or alteration. In the event of a data breach likely to create a risk to individuals, the supervisory authority and the data subjects are informed in accordance with articles 33 and 34 of the GDPR.
9. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to set directives regarding the fate of your data after your death. You may withdraw your consent at any time for the processing that depends on it.
These rights are exercised at contact@synintra.com; proof of identity may be requested. Requests are processed within one month. You may also lodge a complaint with the CNIL (www.cnil.fr).
Where the processing falls under a support organisation (data controller), your request may be redirected to it.
10. Cookies
The use of cookies and trackers is described in the Cookie policy.
11. Changes
This policy may change, in particular to follow legal developments or changes to processing. The up-to-date version is always accessible on the Platform; substantial changes are brought to the attention of Users.