Privacy policy
This policy describes how Shiftwisefr SAS collects, uses and protects personal data of visitors and clients of shiftwisefr.com, in compliance with the General Data Protection Regulation (EU 2016/679) and the French Data Protection Act.
1. Identity of the data controller
The data controller is Shiftwisefr SAS, a simplified joint-stock company with share capital of €25,000, registered with the Paris Trade & Companies Register under number 920 485 173, with head office at 12 rue de la Pépinière, 75008 Paris. Data protection officer: dpo@shiftwisefr.com.
2. Data collected
We only collect data strictly necessary to deliver our services: first and last name, email address, phone number, household composition, tax notices and supporting documents you voluntarily provide. No sensitive data within the meaning of Article 9 GDPR is collected without your explicit consent.
3. Purposes and legal bases
Your data is processed to (i) deliver advisory and administrative support services (contractual performance); (ii) communicate commercially about our services and resources (legitimate interest, with a right to object); (iii) meet our accounting and tax obligations (legal obligation).
4. Recipients
Only authorised Shiftwisefr staff, our GDPR-compliant processors (OVHcloud for hosting, Scaleway for backups, Brevo for communications) and, where applicable, the receiving administrations (CAF, DGFiP, URSSAF, regions, ERDF/ESF + managing authorities) have access to your data.
5. Retention periods
Client data is kept throughout the contractual relationship and then archived for five years to meet accounting obligations. Prospects that do not convert are deleted no later than 36 months after the last contact.
6. Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, as well as the right to give directives regarding its use after your death. To exercise these rights: dpo@shiftwisefr.com. You may also lodge a complaint with the CNIL (www.cnil.fr).
7. Security
Data is hosted exclusively in France by OVHcloud (Roubaix and Strasbourg), encrypted at rest (AES-256) and in transit (TLS 1.3). Our processes comply with the ISO/IEC 27001 standard and the French ANSSI information-security policy.