Privacy Policy
Last Updated: 17/07/2025
This privacy policy explains how, in accordance with French law (Law No. 78-17 of January 6, 1978, relating to data processing, files and freedoms, as amended (hereinafter the "Data Protection Act")) and European law (Regulation (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR")) in force, CartoExplorer collects, uses and protects the personal data of users (hereinafter "Users") who use its applications (mobile or desktop) (hereinafter the "Applications") and/or its website https://www.cartoexplorer.com (hereinafter the "Website"), (hereinafter collectively referred to as the "Ecosystem").
By using this Ecosystem, you agree to the practices described in this document.
1. Data Controller
The data controller for personal data is:
Name : Lucas CartoExplorer's developer
Address : CartoExplorer, 492 rue Nicolas Parent, 73000 Chambéry
Email : contact@cartoexplorer.fr
2. Data Collected
When using its Ecosystem, CartoExplorer reserves the right to ask the user to provide personal data to benefit from certain services.
Within this privacy policy, the term "personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject") required by CartoExplorer and its commercial partners in the context of providing the services expected by the data subject.
This data may include, but is not limited to:
- Identification data: name, first name, email address, telephone number.
- Technical data: geolocation.
- Navigation data: browsing history, pages visited, session duration.
- Transaction data: bank details (during a secure purchase).
Some data are collected automatically when using the Site (cookies, server logs). Regarding geolocation data, it allows the User to orient themselves and use more specific features on these Applications. If the User decides so, CartoExplorer may, through a feature of the applications, receive their location and make it available to third parties with whom they wish to share this data.
3. Purposes of Data Processing
The collected data is used for the following purposes:
- Ensure the proper functioning and security of the Services (account creation).
- Provide the services requested by the User (order management).
- Improve the user experience and personalize content (commercial and traffic statistics).
- Create a file of registered members, users, customers and prospects.
- Respond to support or assistance requests.
- Comply with our legal and regulatory obligations.
4. Legal Basis of Processing
The processing of your data is based on:
- Your consent, in particular for the use of cookies or the receipt of marketing communications.
- The performance of a contract, for example for the management of your account or an order.
- Our legal obligations, in particular regarding invoicing or data retention.
- Our legitimate interest, to guarantee the Ecosystem security and improve our services.
5. Recipients of Data
Your personal data may be shared with:
- Our internal teams, strictly authorized to process this data.
- Our subcontractors (hosts, technical service providers, payment tools) within the framework of the aforementioned purposes.
- The competent authorities, if required by law.
A detailed list of our subcontractors, including their roles, types of data processed, data location, and applicable GDPR safeguards, is available in Annex 1 — List of CartoExplorer's Subprocessors.
Your data will never be sold, rented or exchanged with third parties without your explicit consent.
6. Data Retention Period
Data are kept only for the time necessary to accomplish the purposes described above:
- Account data: until the deletion of your account or 3 years after your last activity.
- Billing data: 10 years, in accordance with tax obligations.
- Cookies: maximum duration of 13 months after their collection.
7. Your Rights
In accordance with the GDPR and the Data Protection Act, you have the following rights:
- Right of access: to know the personal data we hold about you.
- Right to rectification: to request the correction of inaccurate data.
- Right to erasure: to request the deletion of your data, within the limits provided by law.
- Right to portability: to receive your data in a structured and readable format.
- Right to object: to oppose certain processing, in particular for prospecting purposes.
- Right to restriction of processing: to temporarily restrict the use of your data.
To exercise these rights, you can contact us at:
Email : contact@cartoexplorer.fr
Address : CartoExplorer, 492 Rue Nicolas Parent, 73000 Chambéry
8. Cookies and Similar Technologies
A cookie, in the context of a website, is a small text file stored by a user's web browser (such as Chrome, Firefox, Safari, etc.) on their computer or mobile device. This file is created by the website's server during the user's browsing and contains information that is then sent back to the server with each subsequent request.
The user has the possibility to manage the cookies stored on their device. They can accept, refuse, or delete them, either globally or for specific websites. Cookie management settings are usually found in the options or preferences of the web browser.
Cookies, especially third-party cookies, can raise privacy concerns because they allow information about the user to be collected and their browsing to be tracked. This is why the regulations (Ordinance of August 24, 2011 relating to the application of European directives on the protection of privacy on the Internet) govern the use of cookies and require websites to clearly inform users about their presence and purpose, and to obtain their consent before depositing them.
However, it is important to specify that in case of refusal, it is possible that Users may not be able to benefit from certain functionalities of the website such as: browsing preferences, access to personalized services, automatic identification to your personal space, etc...
The Ecosystem may refer to "social plugins" (Facebook, Twitter, Youtube, Viadeo, Linkedin, etc...) which allow content recommendation, profile data use for comments, registration or forms completion, social sites content display.
CartoExplorer is not responsible for the implementation by the social network(s) of third-party cookies on Users computers.
9. Data Security
CartoExplorer implements technical and organizational measures to ensure the security and confidentiality of your personal data (to prevent it from being distorted, damaged, misappropriated, subjected to intrusion, disclosure, alteration or destruction, and more generally, that unauthorized third parties have access to it) in particular:
- Data encryption (SSL).
- Restricted access to data to authorized persons only.
- Data backups within secure servers.
10. Changes to the Privacy Policy
We reserve the right to modify this policy at any time to comply with legal or technical developments. These modifications will come into effect upon the publication of the new privacy policy. Unless substantial modification(s) requiring the express consent of the User, the use of the Services, following the entry into force of these modifications, will be considered as recognition and acceptance of the new privacy policy.
11.Contact and Complaints
For any questions or complaints regarding your personal data, you can contact us:
By email: contact@cartoexplorer.fr
By mail: CartoExplorer, 492 rue Nicolas Parent, 73000 Chambéry
If you believe that your rights are not respected, you can also file a complaint with the National Commission for Information Technology and Liberties (CNIL): https://www.cnil.fr
Annex 1 — List of CartoExplorer's Subprocessors
In accordance with Article 28 of the GDPR, we work with service providers (subprocessors) who process certain personal data on our behalf in order to deliver our services with the best levels of security and quality.
Subprocessor Name | Purpose of Processing | Data Processed | Data Location | GDPR Safeguards |
---|---|---|---|---|
Stripe, Inc. | Online payments | Payment details, name, email, IP address, transaction information | EU / United States | Standard Contractual Clauses (SCCs), DPA signed |
Sentry (Functional Software Inc.) | Application error monitoring | Error logs, IP addresses, user identifiers, technical information | EU (via eu.sentry.io) or US | Standard Contractual Clauses (SCCs), DPA signed |
OVH | Application and data hosting | All data collected via the application and website | EU | Data processing agreement, technical and security measures |