Personal data protection policy for Users
Version of the Policy : 27-02-2021 Read FR version

SellerSights is committed to protecting your privacy. Contact us at hello@sellersights.me if you have any questions or issues regarding the use of your personal data and we will be happy to assist you .

This document constitutes the Personal Data Protection Policy (hereinafter the "Policy") of SellerSights. As part of a transparency requirement, this policy has been written to be understandable and easily accessible in order to reflect our commitments under European Regulation (EU) 2016/679 on the protection of personal data (Ci -after “RGPD / GDPR” or “GDPR”) as well as the amended Data Protection Act.

As the policy is subject to change, we invite you to refer to it regularly.
If you are a user of the Sites, you will be informed of any changes by e-mail.

Definitions In the body of this “Privacy Policy”, each of the following terms must be understood as meaning given by its definition.
Personal data : any information relating to an identified or identifiable natural person; personal data is “personal information” as defined below.
Processing : any operation or set of operations carried out on personal data or on sets of personal data.
Data subject : a natural person whose personal data is being processed.
Cookie : A cookie is a small text file stored on your computer. Cookies store information that is used to make the sites work. Only we can access the cookies created by our website. You can control your cookies at the browser level.
Choosing to disable cookies may interfere with your use of certain features.

What data is collected and which legal basis justifies the collection by SellerSights? Depending on the nature and purpose of your interaction with SellerSights, we may collect the Data listed below.
Data collected when creating the SellerSights account
Type of data collected
- Contact details (email address)
- Professional data (URL of the merchant site)

Data collected on the SellerSights account creation form from the Back Office
Type of data collected
- Connection data (URL of the merchant site, SellerSights account identifiers, customer ID)
- Transaction data (data relating to transactions carried out by the Merchant's customers)
- Google Analytics data from the merchant (id google analytics account; username google analytics; token authentication (access token / refresh token); id webproerty; name webperty; id profile (view); name profile (view); sessions by date; session by channel; sessions total, user by date; user total)

How is your data collected? Data may be collected in various ways on the Sites.
They can be collected directly when you communicate them to us through the user account creation forms.
SellerSights also collects your Data indirectly by means of cookies / tracers.

For what purposes and on what basis are your data collected? The processing of your data by SellerSights may be necessary for the following reasons:
- To allow SellerSights to respect its contractual commitments
- To comply with the laws and regulations in force
- For the legitimate interest of SellerSights (to develop its business or improve its products and services)
In addition, some of your personal data can only be collected if you consent to its processing.

Purposes and legal basis justifying their collection of data following the creation of the SellerSights account

Type of data collected:
- Contact details (email address)
- Professional data (URL of the merchant site)
- Merchant store data (CMS version of the store; Server version, PHP; Store languages ​​(with main language) and currencies)

Purpose:
- Your email address can be collected and used to allow us to manage the contractual relationship.
- The collection of this data is necessary to link your SellerSights account to your merchant site
- User knowledge and improvement of the SellerSights Solution


Purposes and legal bases justifying the processing of data collected on the SellerSights account creation form

Who processes your data? Processing of your data internally
Your Data is processed by SellerSights employees in charge of: Site management

Connected third parties: Google Analytics

Google Analytics Reporting API
SellerSights uses Google Analytics Reporting API. Our goal is to make analytics easier for users by showing them how visitors find and use their website from their SellerSights dashboard.

The SellerSights app uses the Google Analytics Reporting API to collect analytics about your website and present it in a actionable way through charts, graphs and tables in your SellerSights table to any user with administrator level privileges on your website.

SellerSights discloses Google Analytics customer information with the user's prior consent only to those of its employees, contractors in order to process it on behalf of SellerSights or to provide the services available) and to provide the necessary technical support to our services.

You can learn more about using permissions Google OAuth API

European data laws such as the Cookie Law and the GDPR can make it difficult to understand your site's compliance, especially in terms of analytics.

Our EU compliance add-on for SellerSights automatically:
- We do not use IP addresses
- We do not use demographics and interests reports for remarketing and advertising
- We do not use user ID and author name tracking

We only work with processing partners who are able to ensure an adequate level of protection for your personal data.

How long is your data kept? Retention period of data collected from the SellerSights Service use form
The Data collected upon registration for the SellerSights Service is kept for the time necessary to manage the contractual relationship. From the date of the User's unsubscription, the data is kept for 3 months and then archived.

How do we secure your data? We are committed to respecting the following data protection principles:
- The processing is lawful, fair and transparent. Our processing activities have legal grounds. We always consider your rights before processing personal data. We will provide you with processing information upon request.
- Processing is limited to the purpose. Our processing activities correspond to the purpose for which the personal data was collected.
- The processing is carried out with a minimum of data. We collect and process only the minimum amount of personal data required for any purpose.
- Processing is limited with a period of time. We will not keep your personal data longer than necessary. - We will do our best to ensure the accuracy of the data.
- We will do our best to ensure data integrity and confidentiality.

Your Data is kept on secure servers and protected by firewalls and antiviruses.
- We do our best to protect your personal data.
- We use secure protocols for communication and data transfer (like HTTPS).
- We use anonymity and pseudonymization where appropriate.
- We monitor our systems to detect possible vulnerabilities and attacks. Stored data is encrypted when possible.

If you have an account with us, please note that you must keep your username and password secret.
We have implemented technical and organizational measures intended to guarantee the security and confidentiality of your Data against any accidental loss and against any unauthorized access, use, modification and disclosure.
Given the inherent peculiarities of the Internet, however, it is impossible for us to guarantee the optimum security of information exchange on this network.

We make every effort to protect your Data, but we cannot guarantee the absolute security of information transmitted to the Site. You agree that you transmit your Data at your own risk.
We cannot be held responsible for any failure to respect the confidentiality settings or the security measures in place on our Sites.

As such, you agree that the security of your information is also your responsibility. For example, you are responsible for keeping the password to access your user account secret.
Under no circumstances divulge it to third parties. Likewise, be careful when you disclose information in the public sections of the Site, which can be viewed by any user of the Site.

You can exercise these rights by sending an email in French, or in English to hello@sellersights.me

We have one month to respond to any request relating to the exercise of your rights. This period can be extended by two months, due to the complexity or too many requests.

Finally, you have the right to lodge a complaint with the National Commission for Information Technology and Freedoms (CNIL), in particular on its website www.cnil.fr .

Rights of the data subject In accordance with the provisions of the applicable regulations on the protection of personal data, in particular European regulation 2016/679 on data protection (hereinafter the “GDPR”) as well as the law of January 6, 1978 n ° 78 -17 known as “Informatique et Libertés” and its modifications, you have a right of access and a right of rectification on your Data.

The data subject has the following rights Right to information : which means that you have the right to know if your personal data is being processed; what data is collected, where it comes from and why and by whom it is processed.
Right of access : which means that you have the right to access the data collected from / about you. This includes your right to request and obtain a copy of your personal data collected.
Right of rectification : which means that you have the right to request the rectification or erasure of your personal data which is inaccurate or incomplete.
Right to erasure : which means that in certain circumstances you can request that your personal data be erased from our records.
Right to restrict processing : which means that when certain conditions apply, you have the right to restrict the processing of your personal data.
Right to object to processing : this means that in certain cases you have the right to object to the processing of your personal data, for example in the case of direct marketing.
Right to object to automated processing : meaning that you have the right to object to automated processing, including profiling; and not to be the subject of a decision based solely on Automated Processing. You can exercise this right whenever there is a result of the profiling that produces legal effects concerning you or significantly affecting you.
Right to data portability : you have the right to obtain your personal data in a machine-readable format or, if possible, in the form of transfer from one processor to another.
Right to lodge a complaint : In the event that we deny your request under the rights of access, we will provide you with a reason why. If you are not satisfied with the way your request has been handled, please contact us.
Right for the help of the supervisory authority : meaning you have the right for the help of a supervisory authority and the right to other legal remedies such as claiming damages.
Right to withdraw your consent : you have the right to withdraw any consent given for the processing of your personal data.

Cookies and other technologies we use We use cookies and / or similar technologies to analyze customer behavior, administer the website, track user movements, and collect user information. This is done in order to personalize and improve your experience with us.

We use cookies for the following purposes Necessary cookies : These cookies are necessary for you to be able to use some important features of our website, such as logging in. These cookies do not collect any personal information.
Functionality cookies : These cookies provide functionality that makes the use of our service more convenient and allows more personalized functionality to be provided. For example, they can remember your name and email address in comment forms so you don't have to re-enter that information the next time you comment.
Analytical cookies : these cookies are used to track the use and performance of our website and our services Advertising cookies : These cookies are used to serve advertisements that are relevant to you and your interests. Additionally, they are used to limit the number of times you see an advertisement. They are usually placed on the website by advertising networks with the permission of the website operator. These cookies remember that you have visited a website and this information is shared with other organizations such as advertisers. Targeting or advertising cookies will often be linked to site functionality provided by the other organization.

These are the cookies we use Cookies policy : persistent cookie - duration of one year - we set this cookie to limit the display of the cookie policy to each page viewed / visits.
Google Analytics - persistent cookie - duration of 2 years - we use Google Analytics to improve the user experience on the website ( you can deactivate here )
You can delete cookies stored on your computer through your browser settings. You can also control certain third-party cookies by using a privacy enhancing platform such as optout.aboutads.info or youronlinechoices.com . For more information on cookies, visit allaboutcookies.org .
We use Google Analytics to measure traffic to our website. Google has its own privacy policy which you can view here. If you would like to opt out of tracking by Google Analytics, visit the Google Analytics deactivation page.