By clicking "Accept All Cookies," you agree to have cookies stored on your device to improve your browsing experience on the site, analyze site usage, and support our marketing efforts. Please see our Privacy Policy for more information.
PreferencesDeclineAccept

Privacy Policy

Effective August 7, 2024, and subject to change without notice

‍

Please read the terms and conditions of use for this website carefully before browsing its pages. By accessing this website, you agree, without reservation, to these terms and conditions.

Furthermore, in accordance with Article 6 of Law No. 2004-575 of June 21, 2004, on Confidence in the Digital Economy, the persons responsible for this website, www.claisy.com, are:

‍

At CLAISY, respecting your privacy and protecting your personal data are our top priorities.

This privacy policy (the “Privacy Policy”) is intended to inform you about how your personal data is processed in connection with your use of the claisy.com website (the “Website”) and/or the app.claisy.com platform (the “Platform”) in accordance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and Law No. 78-17 of January 6, 1978, on Information Technology, Data Files, and Civil Liberties, as last amended (collectively, the “Applicable Regulations”).

This Privacy Policy does not describe how your data is collected and processed through cookies and other trackers (“Cookies”) on the Site and/or the Platform. For more information, you can click on the cookie icon in the lower-left corner of your screen at any time.

1. Who is the data controller?

When you browse and/or register on our Site, or more generally in the context of managing our contractual relationship with you, the data controller is TRCKLY, a simplified joint-stock company (SASU), registered with the Paris Trade and Companies Register (RCS) under No. 927 541 201, with its registered office located at 4 rue du Rendez-Vous, 75012 PARIS (“We,” “Us,” “Our”).

However, when our services are used by business customers to manage shipments and package-related disputes , we collect and process personal data on their behalf and for their account. Our business customers are therefore the data controllers, and we act as a data processor.

2. What data do we collect?

Personal data is data that can be used to identify an individual either directly or by cross-referencing it with other data.

We collect personal data that falls into the following categories:

  • The sender's identifying information (last name, first name, email address, mailing address, and phone number);
  • Information about your professional background (company name, job title/position);
  • Data related to the recipient's identification (last name, first name, email and mailing addresses, phone number, package number);
  • Data related to the handling of disputes and claims: copy of identification document, signature, sworn statement, receipt from Filing a police report, photographs (including associated technical metadata and identifiable elements in the background);
  • Order data: content and details of purchases made;
  • Login data (login logs, encrypted passwords);
  • Browsing data (IP address, pages viewed, date and time of connection, browser used, operating system, user ID);
  • Economic and financial data (bank account information);
  • Any information you wish to provide to us in connection with your contact request.

Required fields are indicated when you provide us with your information. They are highlighted in various ways.

3. Details on the Processing of Your Personal Data

Provide our services available on our Site/Platform through your account

  • Legal basis: Performance of the contract that you or your company has entered into with us (i.e., our Terms of Use)
  • Retention Period: Once you have created an account, your data is retained for as long as your account remains active. Your login logs are retained for 1 year. In addition, your data may be archived for evidentiary purposes for a period of 5 years.

Perform tasks related to managing our customers' orders and quotes, and ensure that the contractual relationship with our customers is properly maintained

  • Legal basis: Performance of the contract that you or your company has entered into with us (i.e., our Terms of Use)
  • Retention Period: Personal data is retained for the duration of the contractual relationship. In addition, your data (with the exception of your bank account information) is archived for evidentiary purposes for a period of 5 years.

To send you commercial offers and propose additional services to you (prospecting and upselling to our customers)

  • Legal basis: Our legitimate interest in promoting and developing our business
  • Retention Period: Personal data is retained for the duration of the contractual relationship. In addition, your data may be archived for evidentiary purposes for a period of 5 years.

To analyze your use of the services, understand your expectations, and improve the features offered (in particular by analyzing interactions or compiling statistics on website/platform traffic and audience)

  • Legal basis: Our legitimate interest in improving our services
  • Retention Period: Personal data is retained for 3 years. Once your data has been anonymized, it is no longer considered personal data because re-identification is no longer possible. It is retained for as long as necessary.

Manage Your Reviews of Our Services

  • Legal basis: Our legitimate interest in collecting your feedback on our services
  • Retention period: 5 years from the date of publication of the notice

Build a list of prospective customers

  • Legal basis: Our legitimate interest in developing and promoting our business
  • Retention Period: Your data is retained for a period of 3 years from the date of your last contact with us.

Respond to your requests for information, contact, and/or a demonstration

  • Legal basis: The performance of precontractual measures taken at your request
  • Retention period: Data is retained for a period of 3 years from the date of your last contact.

Retain administrative information and documents related to our business

  • Legal Basis: To comply with our legal and regulatory obligations
  • Retention Period: Invoices are archived for a period of 10 years. Data related to your transactions (excluding banking information) is retained for 5 years. Data related to your contract and documents pertaining to the signing of the contract are retained for 10 years from the date the service is performed.

Responding to requests from data subjects to exercise their rights

  • Legal Basis: To comply with our legal and regulatory obligations
  • Retention Period: If we ask you to provide proof of identity: We retain it only for as long as necessary to verify your identity. Once the verification is complete, the proof of identity is deleted. If you exercise your right to opt out of receiving marketing communications: We retain this information for 3 years.

4. Who receives your data?

The following individuals will have access to your personal data:

  • (i) Our company's employees;
  • (ii) Our third-party service providers: Webflow, Google Search Console, Google Analytics, Google Tag Manager, UserBack, Brevo, reCAPTCHA, OVH, Supabase, Bing Webmaster Tools, WeGlot, Hotjar, Google Workspace;
  • (iii) To any authority legally authorized to receive such information, in particular judicial, law enforcement, or administrative authorities, if they so request.

5. Is your data likely to be transferred outside the European Union?

Your data is retained and stored for the entire duration of the processing on the servers of Supabase, located in Frankfurt, Germany, and OVH, located in Gravelines, France.

As part of the tools we use (see the section on recipients regarding our processors), your data may be transferred outside the European Union. The transfer of your data in this context is secured using the following tools:

  • either the data is transferred to a country for which the European Commission has issued an adequacy decision, in accordance with Article 45 of the GDPR: in this case, that country ensures a level of protection deemed sufficient and adequate under the provisions of the GDPR;
  • either the data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, such transfers are based on appropriate safeguards as set forth in Article 46 of the GDPR, tailored to each service provider, including, but not limited to, the use of standard contractual clauses approved by the European Commission, the application of binding corporate rules, or a certified certification mechanism;
  • or the data is transferred based on one of the appropriate safeguards described in Chapter V of the GDPR.

You can obtain a copy of the tools that allow you to transfer your data outside the European Union by contacting us using the contact information provided in the section “What are your rights regarding your data?” below.

6. What are your rights regarding your data?

You have the following rights regarding your personal data:

  • Right to information: this is precisely why we have drafted this Privacy Policy. This right is provided for in Articles 13 and 14 of the GDPR.
  • Right of access: You have the right to access all of your personal data at any time, pursuant to Article 15 of the GDPR.
  • Right to rectification: You have the right to have your inaccurate, incomplete, or outdated personal data corrected at any time, in accordance with Article 16 of the GDPR.
  • Right to restriction of processing: You have the right to have the processing of your personal data restricted in certain cases set forth in Article 18 of the GDPR.
  • Right to erasure: You have the right to request that your personal data be erased and to prohibit any future collection of such data for the reasons set forth in Article 17 of the GDPR.
  • Right to establish post-mortem directives: You have the right to establish directives regarding the retention, deletion, and disclosure of your personal data after your death, in accordance with Article 85 of the French Data Protection Act.
  • Right to withdraw your consent at any time: For processing based on consent, Article 7 of the GDPR states that you may withdraw your consent at any time. Such withdrawal will not affect the lawfulness of processing carried out prior to the withdrawal.
  • Right to Data Portability: Subject to certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to Us in a standard, machine-readable format and to request that it be transferred to a recipient of your choice.
  • Right to Object: Under Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue to process your personal data despite your objection, for legitimate reasons or to defend our legal rights.

You may exercise these rights by writing to us at the following address: dpo@claisy.com / Trckly – 4 rue du Rendez-Vous, 75012 Paris, France.

In such cases, we may ask you to provide us with additional information if we have reasonable doubt, or even any document that can verify your identity if the doubt persists.

If you have any questions or concerns that have not been resolved, you have the right to file a complaint with the competent supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertés (“CNIL”), located at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

7. Changes

We may modify this Privacy Policy at any time, in particular to comply with any regulatory, legal, editorial, or technical changes. These modifications will take effect on the date the revised version becomes effective. We therefore encourage you to review the latest version of this policy regularly. However, we will notify you of any significant changes to this Privacy Policy.

Effective Date: October 27, 2026

‍