Introduction

Linier Solutions, based in LONS (64140), Allée du Bigné, develops and publishes the GirlsConnect application and the GirlsConnect.net website.

In compliance with the French Data Protection Act and the General Data Protection Regulation (RGPD: https://www.privacy-regulation.eu/fr/ ), this privacy policy describes in detail how we process the personal data we collect through our services. It aims to help you to:

• Know why we collect personal information
• Inform you about the processing procedures applied to your data
• Check the security of your sensitive data
• Make it easier for you to exercise your rights

Purpose of processing

1. Personal data: We collect certain personal data for the proper operation of the application.ent de l’application.

• Display name (mandatory): Name you have chosen and which will be displayed to other users.
• Date of birth (required): Your date of birth allows us to calculate your age and enables the application to match you with other users by applying an age filter.
• Email (required): Your email serves as your login and can be used to reset your password.
• Profile photos (Optional but recommended): Your photo is displayed in the application to other users.
• Other optional data: Other data, such as your hobbies or your expectations when using the application, are optional. If you provide it, it will be used to display your profile in other users’ searches.

When you locate yourself in the application, we collect your GPS position only once, and store this position in our database. This enables us to suggest users and publications within your search perimeter.

We do not view your data or share it with any third party.

2. Content you provide via our services. We store the content you publish through our services. Here are some examples of the content we collect and store:

• Your posts
• Outings you organize
• Your comments on existing posts
• …
• …

Content also includes the images and photos you upload to the application. This data belongs to you and is used solely for display in the application.

Legal basis for processing

Pursuant to Article 6 of the General Data Protection Regulation (GDPR), data is lawfully processed according to a defined legal basis:

1. Personal data: On the basis of a Legitimate Interest (Art 6.1f), the only information you are obliged to provide us with is your display name, your date of birth, and your email also serving as an identifier for using our services.
2. Content you provide via our services: On a contractual basis (Art 6.1b) established when you accept our general terms of use, we store and secure the personal data you provide to us via our services.

Hosting and data security

Our services and your data are hosted in Europe by Amazon Web Services (AWS). Your data is stored and secured in datacenters covered by ISO/IEC 27001:2013 certification.

Amazon Web Services undertakes to comply with the Standard Contractual Clauses (SCC) established by the European Commission, which govern the transfer of personal data between the data controller and its service provider. The data we store remains in Europe and is not transferred to the USA or any other third country.

(To find out more : https://d1.awsstatic.com/Controller_to_Processor_SCCs.pdf)

Data recipients

No other personal data is passed on to third parties.

Data retention period

1. Personal data: We keep this information for as long as your account is active. When you delete your account, this data is instantly destroyed and cannot be recovered.
2. Content you provide via our services: We retain this information for as long as your account is active. When you delete your account, this data is instantly destroyed and cannot be recovered.

Your rights

Right of access to data

Your right of access to data allows you, under Article 15.3 of the General Data Protection Regulation, to request a copy of your personal data.

The data is accompanied by this privacy policy in order to confirm to you the purposes of its processing.

Administrative charges may apply for any additional copies requested.

To exercise this right, please see “Contact and complaints” below.

Right of rectification

In accordance with Article 16 of the General Data Protection Regulation, you have the right to rectify your personal data. To exercise this right, you can access your user profile from our application at any time and modify your personal data.

Right to erasure

The right to erasure is governed by Article 17 of the General Data Protection Regulation. It concerns personal data processed by our services. You can exercise this right from the moment the data is no longer necessary with regard to the purposes for which it was collected and processed.

To delete your account and all your data, open your user profile in the application and click on the “Delete my account” button at the bottom of the page.

Contact and complaints

As required by Article 37 of the General Data Protection Regulation, the appointed Data Protection Officer (DPO) is your contact for any questions or requests relating to the protection of personal data.

For any queries you may choose to address your request:

• By e-mail: contact@girlsconnect.net

Specifying your identity, and the subject of your request among :

• Exercising the right of access to data
• Exercise of the right to erasure of data
• Complaint