The protection of your personal data is a priority for us.

When you use the website https://wayupapp.com/ (hereinafter the “Site”), we may collect personal data about you.

The purpose of this policy is to inform you about how we process this data in compliance with Regulation (EU) 2016/679 of April 27, 2016, relating to the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”).

• Who is the data controller?

The data controller is WayUp, SAS with a capital of €1500, registered at the RNE under the SIREN number 977 878 743 and headquartered in Champs-sur-Marne (hereinafter “We”).

• What data do we collect?

Personal data is any information that can identify an individual directly or through cross-referencing with other data.

We collect data falling under the following categories:

• Identification data (your email address)
• Any information you wish to share with us as part of your contact request;
• Internet data (e.g., IP address);

Mandatory data is indicated when you provide your information to us. They are marked with an asterisk and are necessary for us to provide our services to you.

• On what legal bases, for what purposes, and for how long do we keep your personal data?

• Who are the recipients of your data?

Your personal data may be accessed by:

1. Our company staff;
2. Our subcontractors: hosting providers, emailing services, CRM tools;
3. Where applicable: public and private entities, solely to comply with our legal obligations.

• Is your data likely to be transferred outside the European Union?

Your data is stored and retained throughout the duration of processing on the servers of WayUp located at 2 bis rue Alfred Nobel in Champs-sur-Marne.

In the context of the tools we use (see the section on recipients regarding our subcontractors), your data may be transferred outside the European Union. The transfer of your data in this context is secured by the following means:

• Either the data is transferred to a country that has been subject to an adequacy decision by the European Commission, in accordance with Article 45 of the GDPR: in this case, the country ensures a level of protection deemed sufficient and adequate to the provisions of the GDPR;

• Or the data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, these transfers are based on appropriate safeguards mentioned in Article 46 of the GDPR, tailored to each provider, including, but not limited to, the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules, or under an approved certification mechanism.

• Or the data is transferred based on one of the appropriate safeguards described in Chapter V of the GDPR.

• What are your rights concerning your data?

You have the following rights concerning your personal data:

• Right to information: this is precisely why we have drafted this policy. This right is provided for by Articles 13 and 14 of the GDPR.

• Right of access: you have the right to access all of your personal data at any time, pursuant to Article 15 of the GDPR.

• Right to rectification: you have the right to rectify your inaccurate, incomplete, or outdated personal data at any time in accordance with Article 16 of the GDPR.

• Right to restriction: you have the right to obtain the restriction of the processing of your personal data in certain cases defined by Article 18 of the GDPR.

• Right to erasure: you have the right to demand that your personal data be erased, and to prohibit any future collection thereof on the grounds set out in Article 17 of the GDPR.

• Right to lodge a complaint with a supervisory authority: you have the right to contact a supervisory authority (such as the CNIL in France) to file a complaint regarding our personal data protection practices in accordance with Article 77 of the GDPR.

• Right to define directives related to the storage, deletion, and communication of your personal data after your death.

• Right to withdraw your consent at any time: for purposes requiring your consent to the processing of your data, Article 7 of the GDPR allows you to withdraw your consent at any time. We will then cease processing your personal data for these purposes.

• Right to portability: under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you provided to us in a standard machine-readable format, and to request its transfer to the recipient of your choice.

You may exercise these rights by writing to us at: contact@wayupapp.com.

Note that we may require proof of your identity to fulfill your request. This proof will be deleted once the request has been processed.

• Amendments

We may modify this policy at any time, particularly to comply with regulatory, jurisprudential, editorial, or technical developments. These modifications will apply as of the publication of the new version. Therefore, it is advisable to refer to the most recent version of this policy before browsing.

Date of last update: 12/06/2023