Privacy Policy

How your personal data is collected, processed and retained when you use this website.

PROFESOR ("PROFESOR", "our", "we" and "us") and our partners respect your privacy.

Please read this privacy policy carefully to understand how your personal data is collected, processed and retained when you use this website Tadoo, accessible via the url https://tadoo.io.

The term "personal data" refers to any information relating to a natural person that makes it possible to identify them, directly or indirectly, from a single piece of data or from the cross-referencing of a set of data. This includes, among other things, your name, address, email address, location data, online identifiers, etc.

All personal data collected on this website is processed under the responsibility of PROFESOR, a simplified joint-stock company (SAS) with a share capital of 1,000 euros, registered with the Trade and Companies Register of Bobigny under number 977985790, with its registered office at 9 rue du Coq Français, 93260 Les Lilas, in compliance with French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, in its currently applicable version, and with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Within the meaning of the regulations applicable to personal data, PROFESOR is therefore the data controller.

This privacy policy describes:

  1. How PROFESOR uses your personal data
  2. How PROFESOR shares your personal data
  3. How PROFESOR protects your personal data
  4. Where PROFESOR hosts and transfers your personal data
  5. How you can exercise your rights relating to your personal data
  6. Updates to the privacy policy
  7. How to contact us

I. How PROFESOR uses your personal data

PROFESOR may use your personal data for the following purposes:

  1. carrying out the actions necessary to manage contracts, invoices and customer relationship monitoring
  2. publishing and managing your reviews and/or comments left on the website
  3. responding to your contact request made from our website
  4. setting up a loyalty programme
  5. offering you advertising and tailored content
  6. building a database of users, prospects and customers
  7. producing commercial and traffic statistics
  8. managing unpaid invoices and any disputes
  9. complying with our legal obligations

The processing of your personal data is carried out as part of a pre-contractual contact process; this processing is based on your consent to be contacted in order to discuss our offers and obtain a quote. You may withdraw this consent at any time and request that we delete your information and stop contacting you.

When you voluntarily provide us with personal data, the collection of your personal data is based on the following legitimate interest: to better respond to your requests for information.

II. How PROFESOR shares your personal data

Within PROFESOR, and with regard to each processing purpose, the personal data concerning you is collected, processed and stored by authorised PROFESOR staff, solely within the scope of their respective duties.

We do not share personal data with other companies, organisations and individuals, unless one of the following circumstances applies:

  1. sharing with prior consent: after obtaining your consent, PROFESOR will share the information you have authorised with the third parties or categories of third parties specifically indicated when your consent was collected;
  2. sharing with our service providers: PROFESOR may also disclose your information to companies that provide services for us or on our behalf. These service providers carry out commercial services on our behalf.
  3. performance of a legal obligation, sharing in accordance with laws and regulations: PROFESOR may share your information as required by laws and regulations, in order to resolve disputes or legal investigations, or as required by judicial or administrative authorities under the law.

PROFESOR will ensure the lawfulness of any sharing of personal data through data processing clauses with the companies with which your personal data is shared, requiring them to comply with this privacy policy and to take appropriate security and confidentiality measures when processing personal data.

III. How PROFESOR protects your personal data

PROFESOR attaches great importance to the security of your personal data and has adopted standard industry practices in order to protect your personal data and to prevent unauthorised access, disclosure, use, modification, damage or loss of this information.

We have also taken the appropriate precautions, together with our host, to preserve the security and confidentiality of the data, and in particular to prevent it from being distorted, damaged or disclosed to unauthorised persons.

PROFESOR also adopts the following organisational measures:

  1. we adopt reasonable and workable policies to ensure that the personal data collected is minimal and relevant to what is necessary in view of the purposes for which it is processed;
  2. we retain your personal data for the period strictly necessary for the purposes of the processing, unless the retention of your data is required or permitted by law. For example, we retain data relating to the performance of your orders for the period required by law for the retention of accounting records, namely a maximum of 10 years from the financial year concerned;
  3. we deploy access control mechanisms to ensure that only authorised staff can access your personal data. In the event of a personal data breach, PROFESOR will comply with the legal and regulatory requirements applicable to the notification of personal data breaches to the competent supervisory authorities and/or the data subjects concerned.

IV. Where PROFESOR hosts and transfers your personal data

Your personal data will be hosted within the hosting infrastructure of our host, SCALEWAY SAS, registered with the Trade and Companies Register of Paris under number 433 115 904, with its registered office at 8 rue de la Ville l'Évêque, 75008 Paris, France. The data is hosted within the European Union.

Some third parties to whom we disclose your personal data are located in countries outside the European Union, in particular the United States and England.

When the products available for sale on the website are delivered by resources located in countries outside the European Union, we will in particular be required to transfer your personal data to those countries. It may also happen that service providers access your data on our behalf in order to provide us with a specific service and are located in countries outside the European Union.

Where such transfers exist, we ensure that these transfers of personal data are framed in accordance with the applicable regulations in order to ensure an adequate level of data protection, either by an adequacy decision of the European Commission, or through legal instruments such as data transfer agreements incorporating the European Commission's Standard Contractual Clauses.

For any request concerning the recipients and the data transfers we carry out outside the European Union, please contact us at the addresses indicated in the "How to contact us" section below.

V. How you can exercise your rights relating to your personal data

You have the right of access, rectification, erasure, restriction and objection regarding the processing of your personal data, as well as the right to define directives relating to the fate of your data after your death and the right to portability of your personal data.

The CNIL defines personal data as "any information relating to an identified or identifiable natural person. But because it concerns people, they must retain control over it."

You also have the right to lodge a complaint with the French Data Protection Authority (Commission Nationale Informatique et Libertés) for France, and with a competent supervisory authority for any other Member State depending on your habitual residence, place of work or the place where the breach of your rights was committed, if you consider that the processing of your personal data does not comply with the applicable texts.

You may contact us at any time at the addresses indicated in the "How to contact us" section below in order to exercise your rights regarding personal data under the conditions laid down by the applicable regulations. You must state which right you intend to exercise as well as all the details necessary for us to respond to your request.

These rights are exercised under the conditions laid down by the applicable regulations:

  • The right of access means that you may ask us at any time to tell you whether we are processing personal data concerning you and, if so, to tell you what personal data is concerned as well as the characteristics of the processing carried out.
  • The right of rectification means that you may ask us to rectify your personal data when it is inaccurate. You may also request that your personal data be completed insofar as this is relevant to the purpose of the processing in progress.
  • The right to erasure means that you may request the erasure of your personal data, in particular when:
    1. its retention is no longer necessary in view of the purposes for which it was collected;
    2. your personal data is processed on the basis of your consent, you wish to withdraw that consent, and there is no other legal basis capable of justifying the processing;
    3. you have objected to the processing of your personal data and you consequently wish it to be erased;
    4. your personal data has been subject to unlawful processing;
    5. your personal data must be erased to comply with a legal obligation provided for either by European Union law or by French law.
  • The right to restriction means that you may ask us to restrict the processing of your personal data:
    1. when you contest the accuracy of your personal data, for a period enabling us to verify its accuracy;
    2. when, following processing established as non-compliant, you prefer the restriction of processing to the complete erasure of your personal data;
    3. when we no longer need your personal data for the purposes of the processing but it is still necessary to you for the establishment, exercise or defence of legal claims;
    4. when you have objected to the processing of your personal data and you wish a restriction of processing for the period enabling us to verify whether the legitimate ground you invoke is justified.

Restriction of processing means that the processing of your personal data will then consist solely of storing the corresponding personal data. We will then no longer carry out any other operation on the personal data concerned.

  • The right to object means that you may object to the processing of your personal data, when this processing is based on the pursuit of PROFESOR's legitimate interest. The right to object is exercised subject to justifying a legitimate ground relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling grounds justifying its continuation in compliance with the applicable regulations.
  • The right to define directives relating to the fate of your data after your death allows you to make known your instructions concerning the retention, erasure and communication of your personal data after your death.
  • The right to portability means that you may ask us, under the conditions laid down by the applicable regulations, to receive your personal data in a structured, commonly used and machine-readable format, and to transmit it to you, or to ask us to transmit it directly to a third party of your choice where this is legally and technically possible.

When we process your personal data on the basis of your consent, you finally have the option of withdrawing your consent at any time by contacting us at the addresses indicated in the "How to contact us" section or by clicking on the unsubscribe link present in each of our communications.

However, the withdrawal of your consent does not affect the validity of the processing carried out before that withdrawal.

VI. Updates to the privacy policy

This privacy policy may be amended or supplemented at any time by PROFESOR, in particular to take into account any legal, regulatory, case-law or technical developments. The applicable version is the one accessible on the website at the time of your consultation. We invite you to consult this page regularly in order to be aware of any changes. In the event of a substantial change, we will inform you by appropriate means before it comes into force.

VII. How to contact us

For any question relating to this privacy policy, to exercise your rights regarding personal data or to withdraw your consent, you may contact us:

  • by email, at contact@tadoo.io;
  • by post, at the following address: PROFESOR, 9 rue du Coq Français, 93260 Les Lilas, France.

In order to handle your request as quickly as possible, please indicate the right you wish to exercise as well as all the details necessary to process it.