Last updated: October 23rd, 2024

Privacy Policy

Rayon (« Rayon » or « we ») values its clients’ and its Web App users’ personal data protection. This privacy policy describes how Rayon processes the Clients’ and Web App users’ personal (together « You » or « your ») during the provision of the Web App services and the performance of the Terms of Use entered with the Clients.

1. The Controller of the processing of Your personal data

Rayon is the controller of the processing of Your personal data. Rayon, is a limited liability company (société par actions simplifiée unipersonnelle), registered with the Paris Trade and Companies Register under number No. 903 538 403 and having its registered address at 1 Rue de Stockholm, 75008 Paris, France, ([email protected]).

2. Purposes of Processing and Legal Basis

Rayon processes Your Personal data:

  • for the purposes of performing the Terms of Use entered into between You and Rayon, delivering the services You have purchased and invoicing the applicable fees. The legal basis underpinning these purposes is the performance of a contract between you and Rayon;

  • Record-keeping and management of accounts relating to the performance of the Terms of Use You have entered with Rayon. The legal basis underpinning this purpose if Rayon’s legal obligation to keep accounts and retain necessary supporting documents;

  • for the purposes of sending you direct marketing communications and newsletters regarding Rayon’s services which are identical or similar to those You have already purchased from Rayon. The legal basis underpinning this purpose is Rayon’s legitimate interest in promoting its new offers regarding the services you have already purchased or new services similar to those you have already purchased;

  • for the purposes of providing You with support and assistance services in accordance with the offer plan you have purchased. The legal basis underpinning this purpose if the performance of a contract between you and Rayon;

  • for the purposes of answering to your GDPR-rights requests. The legal basis underpinning this purpose is Rayon’s legal obligation to answer data subjects requests for the exercise of theirs GDPR-rights.

  • for the purposes of defending its rights and interest in the context of pre-litigation, litigation or out-of-court settlements. The legal basis underpinning this purpose is Rayon’s legitimate interest to asserts its rights and defends its interests in the event of a dispute.

3. Personal Data Retention Periods

Rayon retains Your personal data for a limited period of time and proportionate to the purposes listed in Section 2. In particular, Rayon will retain your personal data:

  • for the signing, monitoring and performance of the Terms of Use entered with You, throughout the contractual relation and, after its term, for the duration of the applicable statute of limitations;

  • for the invoicing and accounting related to the performance of the Terms of Use entered with You, for ten (10) years in accordance with the applicable provisions of the French Commercial Code;

  • for direct marketing, during the entirety of the contractual relation and, after the deletion of Your account, for three (3) years;

  • for management of pre-litigation, out-of-court settlements and, where applicable, litigation, for the duration of the pre-litigation or legal proceedings.

4. Recipients of Your Personal Data

Rayon will share Your personal data for the purposes of the performance of the Terms of Use with:

  • duly authorized employees;

  • service providers acting on behalf Rayon (including processors);

  • competent authorities, if any, such as public authorities and administrative or tax authorities.

5. Transfers of Your Personal Data

Rayon uses the services of processors located in the United States, which is a country that does not offer a level of protection equivalent to the European Union regulations.

For the purposes of transferring personal data to such processors, Rayon ensures that appropriate safeguards are in place and, where applicable, enters into Standard Contractual Clauses, released by the European Commission, with such processors prior to any transfer of personal data. A copy of such appropriate safeguards implemented by Rayon may be provided upon written request at [email protected].

6. Your GDPR-rights

In accordance with the applicable regulations, you have rights regarding the personal data we collect, in particular:

  • the right of access: you can obtain information about the data we hold about you and about the characteristics of the processing we carry out;

  • the right to rectification: you can modify or correct your data;

  • the right to erasure: you can ask us to delete your data in certain circumstances (please note that legal and regulatory provisions or legitimate reasons may require us to retain your data);

  • the right to restriction and objection: you may, in certain circumstances, ask us to restrict or object to the processing of your data (please note that we may continue to process your personal data if we have a legitimate reason to do so);

  • the right to portability: you can ask us to receive data in electronic form and/or ask us to transfer this information to a third party where technically feasible;

  • the post-mortem right: you may provide us with general instructions for the processing of your personal data after death.

You may exercise your rights and contact Rayon using the contact information provided in Section 7 below.

For any request of exercising your rights, We may ask you to provide additional documentation to verify your identity and to ensure that the personal data under the request relates to you.

We are committed to responding to requests as soon as possible. You will receive a response within one (1) month following the receipt of your request. However, please note that this period may be extended by two (2) months due to the particularly complex nature of your request or due to the number of requests. In this case, you will be informed of such extension and the reasons for it within one (1) month following the receipt of your request.

You may also file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the national data protection authority in France (www.cnil.fr).

7. Rayon’s contact information

You may contact us at [email protected] or by writing to 1 Rue de Stockholm, 75008 Paris, France,